Yes, RED HAT 4 is very old, but we can't update it.

I agree with the idea that the problem could be ssl library.
As I wrote before, on RH4 we have openssl-0.9.7, on the others systems
it'1.0.0

Maybe puppet 3.0.1 master force the use of SHA256 for certificate digest,
but SHA256 is not supported by openssl-0.9.7?
Is there any way to force master to use SHA1? I already tryied the option
"--digest sha1" in
>puppet cert sign --all --digest sha1
but the error remains...



On 13 February 2013 15:58, Felix Frank <felix.fr...@alumni.tu-berlin.de>wrote:

> On 02/13/2013 03:32 PM, Luigi Martin Petrella wrote:
> > MASTER Centos 6.3, Puppet 3.0.1 --> Agent RedHat 4, Puppet 3.0.1 = ERROR
> > MASTER Ubuntu 12.10, puppet 3.0.1 --> Agent RedHat 4, Puppet 3.0.1 =
> > ERROR MASTER  RedHat 4, Puppet 3.0.1  --> Agent RedHat 4, Puppet 3.0.1 =
> > OK
>
> I agree with Matthew that this does smell like a libssl related issue.
>
> Isn't RedHat 4 ancient? Aren't they past 6 or somesuch by now?
>
> > I don't understand the basis for claiming that not using --waitforcert
> > would cause issues.
>
> Mea culpa. I seemed to remember an issue with puppet 2.6 not receiving
> the signed certificate unless invoking the option. That may have been me
> blundering in some other exciting way, though.
>
> Thanks for clearing that up, John!
>
> --
> You received this message because you are subscribed to the Google Groups
> "Puppet Users" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to puppet-users+unsubscr...@googlegroups.com.
> To post to this group, send email to puppet-users@googlegroups.com.
> Visit this group at http://groups.google.com/group/puppet-users?hl=en.
> For more options, visit https://groups.google.com/groups/opt_out.
>
>
>

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To post to this group, send email to puppet-users@googlegroups.com.
Visit this group at http://groups.google.com/group/puppet-users?hl=en.
For more options, visit https://groups.google.com/groups/opt_out.


Reply via email to