On Mon, Jul 26, 2010 at 12:29 PM, WEB PAGE: http://www.dyarstraights.com (08/14/04) WEB PAGE: http://www.livejournal.com/users/allyson13/ (08/14/04) David Dyer-Bennet 11/30/04 Minneapolis, Minnesota Address(es): <[email protected]> wrote: > I've triple-checked that I'm restarting the server after changing the > config. I'm sure I have been all along; in any case the latest test > fails just like the others, with > > err: Could not retrieve catalog from remote server: hostname not match > with the server certificate > > Just out of curiosity, which hostname (client or server), what is its > current value (is this in the debug output somewhere?), and what is > the name on the server certificate? (The debug output shows > references to prc-mn-lnx01.pinerivercapital.local certificates; but I > can't tell if the copy they are referring to is on the client or on > the server; the directory structures are the same on both.)
If you look at the SSL certificate on the puppet master using the output of openssl x509 -text -noout -in /path/to/cert.pem , does it contain the name you're using to connect from the client? These names much mast for SSL verification to work. -- Jeff McCune http://www.puppetlabs.com/ -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to [email protected]. To unsubscribe from this group, send email to [email protected]. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.
