So, I just started randomly twiddling knobs, and I realized the 'puppet module list' starts returning proper values once I comment out the 'certname' setting in /etc/puppet/puppet.conf:
certname=kmadmin102.vistaprint.net (I had unqualified name there before, but whether unqualified or FQDN, it makes no difference). Note that my certname is set correctly, and matches the certificate Puppetmaster is using: # openssl s_client -connect test-kmpuppet:8140 </dev/null 2>&1 | openssl x509 -noout -issuer -subject -dates issuer= /CN=Puppet CA: kmadmin102 subject= /CN=*kmadmin102.vistaprint.net* notBefore=Oct 27 20:20:30 2014 GMT notAfter=Oct 27 20:20:30 2019 GMT Plus, the certname value should only affect communications with agent -- it should have absolutely nothing to do with the local operation like 'puppet module list', right? -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-users/2136d125-cf80-4b18-90b1-3463d177e7f9%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
