Sorry to follow up to myself, but I found the problem. I need to use the FQDN for the server on the command line, not just the host name.
The error messages don't suggest that as the problem at all. And the fact that the certificate showed up in the signing queue on the server made me rule that out as a possible problem. But that's the problem anyway; changing the command to use the FQDN (after wiping out the cert on both sides again) worked fine. --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-users@googlegroups.com To unsubscribe from this group, send email to [EMAIL PROTECTED] For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en -~----------~----~----~----~------~----~------~--~---