That did it. Thanks for the quick reply. On Thursday, May 8, 2014 4:32:57 PM UTC-7, Josh Cooper wrote: > > Hi Patrick, > > > On Thu, May 8, 2014 at 12:50 PM, Patrick Auld > <[email protected]<javascript:> > > wrote: > >> I installed Puppet 3.5.1 on Windows 7 from the MSI. I've run a few >> 'puppet apply' commands and things appear to be working. We are not using a >> master node for our current use case so I haven't set one up. The Windows >> Puppet service is also disabled. When I try to install a module from the >> Forge I get this SSL error: >> >> Error: Could not connect via HTTPS to https://forge.puppetlabs.com >> Unable to verify the SSL certificate >> The certificate may not be signed by a valid CA >> The CA bundle included with OpenSSL may not be valid or up to date >> >> I haven't touched any of the puppet conf yet. Is a master node required >> to install modules? I'm still getting started but from what I've read it >> does not, so I'm a little unsure if this is an error in from MSI or if >> action is required on my part. Thanks in advance. >> >> -- >> You received this message because you are subscribed to the Google Groups >> "Puppet Users" group. >> To unsubscribe from this group and stop receiving emails from it, send an >> email to [email protected] <javascript:>. >> To view this discussion on the web visit >> https://groups.google.com/d/msgid/puppet-users/57e030f9-1fe0-40fd-a879-9c72c138cc35%40googlegroups.com<https://groups.google.com/d/msgid/puppet-users/57e030f9-1fe0-40fd-a879-9c72c138cc35%40googlegroups.com?utm_medium=email&utm_source=footer> >> . >> For more options, visit https://groups.google.com/d/optout. >> > > Due to the heartbleed vulnerability we obtained new SSL certificates for > all SSL web servers and services. Previously, our certificate was issued by > GeoTrust, but the new one is issued from UserTrustNetwork. Unfortunately, > the new CA is not trusted by Windows out of the box, nor when running > Windows update to install the latest cert bundle. We are working on > obtaining a new SSL certificate for the forge. > > In the meantime, you can manually install the UserTrustNetwork CA into > your Windows root certificate store. We do something similar during > acceptance testing: > > > https://github.com/puppetlabs/puppet/blob/master/acceptance/setup/git/pre-suite/070_InstalCACerts.rb#L62-L65 > > Make sure to verify the certificate prior to installing it due to the > security implications. > > Josh > > -- > Josh Cooper > Developer, Puppet Labs > > *Join us at PuppetConf 2014 <http://www.puppetconf.com/>, September > 22-24 in San Francisco* > *Register by May 30th to take advantage of the Early Adopter discount > <http://links.puppetlabs.com/puppetconf-early-adopter> **—**save $349!* >
-- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-users/88f9f4bd-5772-4aea-99ca-9c832578aeef%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
