Hello Ken, Thanks for the response.
On Thu, Mar 28, 2013 at 6:42 PM, Ken Barber <[email protected]> wrote: > So I have some questions, as the error could mean a number of things: > > What version of PuppetDB are you running? And what exact version of > Java is it using? puppetdb version is puppetdb-1.0.4-1.el6.noarch. $ java -version java version "1.6.0_24" OpenJDK Runtime Environment (IcedTea6 1.11.5) (rhel-1.50.1.11.5.el6_3-x86_64) OpenJDK 64-Bit Server VM (build 20.0-b12, mixed mode) > > Can you take a look at puppetdb.log and tell me if you see any > meaningful error messages? I took a look, no error messages, only info messages. > > Without trying to compile a catalog in this manner - are you getting > any trouble with replace facts/replace catalogs generally? ie. Just > trying to running puppet agent -t for example? Nope, those runs are working fine. > > Have you tried re-initialisation your SSL setup with > puppetdb-ssl-setup at all yet? Yes, and confirmed the validity of certificates and their fingerprints in the truststore and master ca. > > Does the hostname you have specified in /etc/puppet/puppetdb.conf to > talk to your puppetdb server match the SSL certificate assigned to the > puppetdb host itself? Yes. > > On Thu, Mar 28, 2013 at 12:55 PM, Mohit Chawla > <[email protected]> wrote: >> Forgot mentioning the env details: >> >> [user@puppetmaster ~]# rpm -qa | grep puppet >> puppetlabs-release-6-6.noarch >> puppetdb-terminus-1.0.4-1.el6.noarch >> mcollective-puppet-agent-1.4.1-1.noarch >> puppet-2.7.20-1.el6.noarch >> hiera-puppet-1.0.0-1.el6.noarch >> puppet-server-2.7.20-1.el6.noarch >> mcollective-puppet-common-1.4.1-1.noarch >> >> [user@puppetmaster ~]# cat /etc/centos-release >> CentOS release 6.3 (Final) >> >> On Thu, Mar 28, 2013 at 6:23 PM, Mohit Chawla >> <[email protected]> wrote: >>> Hello, >>> >>> Stuck in a weird place here. I am trying to do 'puppet master >>> --compile foo.com', however I am not getting the catalog json. So far, >>> I have noticed two sort of outputs: >>> >>> 1) The above command results in : >>> notice: Compiled catalog for foo.com in environment production in 10.60 >>> seconds >>> Failed to submit 'replace catalog' command for foo.com to PuppetDB at >>> puppetdb:8081: SSL_connect SYSCALL returned=5 errno=0 state=SSLv3 read >>> finished A >>> >>> Notice that I don't actually get any json & of course, the ssl error. >>> >>> 2) Other output: >>> Failed when searching for node bar.com: Could not retrieve facts for >>> bar.com: Failed to find facts from PuppetDB at puppetdb:8081: >>> SSL_connect SYSCALL returned=5 errno=0 state=SSLv3 read finished A >>> >>> Disabling storeconfig allows me to get a proper catalog json. >>> >>> Regarding the ssl errors, we've established the correctness of >>> certificates in the relevant places - and done tests using curl and >>> using ruby net/http. Here's a gist of for the curl and ruby snippet. >>> https://gist.github.com/alcy/5262866 >>> >>> Any suggestions what could be happening here ? Perhaps in >>> indirector/facts/puppetdb.rb, http_get doesn't get the correct ssl >>> params or something ? >> >> -- >> You received this message because you are subscribed to the Google Groups >> "Puppet Users" group. >> To unsubscribe from this group and stop receiving emails from it, send an >> email to [email protected]. >> To post to this group, send email to [email protected]. >> Visit this group at http://groups.google.com/group/puppet-users?hl=en. >> For more options, visit https://groups.google.com/groups/opt_out. >> >> > > -- > You received this message because you are subscribed to the Google Groups > "Puppet Users" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > To post to this group, send email to [email protected]. > Visit this group at http://groups.google.com/group/puppet-users?hl=en. > For more options, visit https://groups.google.com/groups/opt_out. > > -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. Visit this group at http://groups.google.com/group/puppet-users?hl=en. For more options, visit https://groups.google.com/groups/opt_out.
