On Wednesday, November 25, 2015 at 4:45:57 PM UTC-6, John Gateley wrote: > > Puppet 4.3.0 > Server Debian 7 > Client Debian 8 > > I have verified the server is running and listening on port 8140 > The client has the puppet service started, but there are no certs to > verify on the server. > This is the error I am seeing: > > root@puppetclient1:/opt/puppetlabs/puppet# puppet agent --test > > Error: Could not request certificate: SSL_connect SYSCALL returned=5 > errno=0 state=SSLv2/v3 read server hello A > Exiting; failed to retrieve certificate and waitforcert is disabled > >
It sounds like the agent is unable to connect to the server to deliver a certificate-signing request. This is most likely because a firewall on one side or both refuses to pass the traffic through. In particular, the server listening on port 8140 in no way guarantees that machine's firewall will let any traffic through to that port. Make sure port 8140/tcp is open for all inbound traffic from all machines that should be able to request catalogs. John -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-users/c5c2833a-5712-4e69-81e3-5f2352fcddf7%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
