I have to do an update. We just configured one RED HAT 4 node as puppet master, and connected another RH4 agent node without any ssl or certificate issue.
So, brief recap: MASTER Centos 6.3, Puppet 3.0.1 --> Agent RedHat 4, Puppet 3.0.1 = ERROR MASTER Ubuntu 12.10, puppet 3.0.1 --> Agent RedHat 4, Puppet 3.0.1 = ERROR (we mean always the same ERROR on certificate validation) MASTER Centos 6.3, Puppet Enterprise 2.6 , based on Puppet open source 2.7 --> Agent RedHat 4, Puppet 3.0.1 = OK but not always MASTER RedHat 4, Puppet 3.0.1 --> Agent RedHat 4, Puppet 3.0.1 = OK On 13 February 2013 15:13, jcbollinger <john.bollin...@stjude.org> wrote: > > > On Wednesday, February 13, 2013 6:15:09 AM UTC-6, Felix.Frank wrote: >> >> Hmm, so did you *ever* use --waitforcert on your agent side? >> >> If you haven't, that's your problem right there. >> >> > I never use --waitforcert. Instead, I just run the agent twice when I > first set up Puppet, signing the cert in between. Naturally, the agent > receives neither certificate nor catalog on the first run, but on the > second it receives both. That's slightly less secure than the client > maintaining the connection and receiving a cert via the same network > connection over which it requested one, but it's good enough for me. Most > importantly, it works reliably. I don't understand the basis for claiming > that not using --waitforcert would cause issues. > > > John > > -- > You received this message because you are subscribed to the Google Groups > "Puppet Users" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to puppet-users+unsubscr...@googlegroups.com. > To post to this group, send email to puppet-users@googlegroups.com. > Visit this group at http://groups.google.com/group/puppet-users?hl=en. > For more options, visit https://groups.google.com/groups/opt_out. > > > -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-users+unsubscr...@googlegroups.com. To post to this group, send email to puppet-users@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-users?hl=en. For more options, visit https://groups.google.com/groups/opt_out.
