Jira (PUP-3556) Older versions of Puppet fail to retrieve certificates from a 3.7.x master

2017-05-18 Thread Moses Mendoza (JIRA) 
Title: Message Title
 
 
 
 
 
 
 
 
 
 
  
 
 Moses Mendoza updated an issue 
 
 
 
 
 
 
 
 
 
 

 
 
 
 
 
 
 
 Puppet /  PUP-3556 
 
 
 
  Older versions of Puppet fail to retrieve certificates from a 3.7.x master  
 
 
 
 
 
 
 
 
 

Change By:
 
 Moses Mendoza 
 
 
 

Labels:
 
 triaged 
 
 
 
 
 
 
 
 
 
 
 
 

 
 Add Comment 
 
 
 
 
 
 
 
 
 
 

 
 
 
 
 
 
 
 
 
 

 This message was sent by Atlassian JIRA (v6.4.14#64029-sha1:ae256fe) 
 
 
 
 
  
 
 
 
 
 
 
 
 
   





-- 
You received this message because you are subscribed to the Google Groups "Puppet Bugs" group.
To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com.
To post to this group, send email to puppet-bugs@googlegroups.com.
Visit this group at https://groups.google.com/group/puppet-bugs.
For more options, visit https://groups.google.com/d/optout.

Jira (PUP-3556) Older versions of Puppet fail to retrieve certificates from a 3.7.x master

2017-05-15 Thread Sean McDonald (JIRA) 
Title: Message Title
 
 
 
 
 
 
 
 
 
 
  
 
 Sean McDonald updated an issue 
 
 
 
 
 
 
 
 
 
 

 
 
 
 
 
 
 
 Puppet /  PUP-3556 
 
 
 
  Older versions of Puppet fail to retrieve certificates from a 3.7.x master  
 
 
 
 
 
 
 
 
 

Change By:
 
 Sean McDonald 
 
 
 

Labels:
 
 triaged 
 
 
 
 
 
 
 
 
 
 
 
 

 
 Add Comment 
 
 
 
 
 
 
 
 
 
 

 
 
 
 
 
 
 
 
 
 

 This message was sent by Atlassian JIRA (v6.4.14#64029-sha1:ae256fe) 
 
 
 
 
  
 
 
 
 
 
 
 
 
   





-- 
You received this message because you are subscribed to the Google Groups "Puppet Bugs" group.
To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com.
To post to this group, send email to puppet-bugs@googlegroups.com.
Visit this group at https://groups.google.com/group/puppet-bugs.
For more options, visit https://groups.google.com/d/optout.

Jira (PUP-3556) Older versions of Puppet fail to retrieve certificates from a 3.7.x master

2014-10-28 Thread Chris Spence (JIRA) 
Title: Message Title










 

 Chris Spence updated an issue


















 Puppet /  PUP-3556



  Older versions of Puppet fail to retrieve certificates from a 3.7.x master 










Change By:

 Chris Spence









 Aversion3.1.0Puppetagent(OEL6.5x86_64)requestingacertfromamasterrunning,inthiscase,3.7.2withautosignenabled(signeverything-*)failstodownloadthesignedcertificate:{quote}undefined:~#puppet-V3.1.0undefined:~#puppetagent-tInfo:CreatinganewSSLkeyforundefined.emea1.ciscloudInfo:CachingcertificateforcaInfo:CreatinganewSSLcertificaterequestforundefined.emea1.ciscloudInfo:CertificateRequestfingerprint(SHA256):F6:EB:4E:C3:19:CC:C4:11:09:05:5B:B9:76:4F:32:09:0D:73:64:03:D5:8C:E4:45:C8:B4:BD:F0:00:C1:E7:74Error:Couldnotrequestcertificate:Couldnotinternfroms:nestedasn1errorExiting;failedtoretrievecertificateandwaitforcertisdisabled{quote}Themasterhasinfactreceivedthecertrequest,andhassignedit.{quote}puppetmaster:/var/log/puppet#puppetcertlist--all|grepundefined+undefined.emea1.ciscloud(SHA256)1F:A0:FA:25:37:90:82:DA:EE:64:B5:9C:69:CF:4C:E9:BD:D9:EE:E1:B7:A6:66:5C:52:EC:5F:F8:55:EC:E1:55{quote}Meanwhiletheagentisinatailspin{quote}undefined:~#puppetagent-t --servernonprod.puppet.int.thomsonreuters.com Info:CreatinganewSSLcertificaterequestforundefined.emea1.ciscloudInfo:CertificateRequestfingerprint(SHA256):F6:EB:4E:C3:19:CC:C4:11:09:05:5B:B9:76:4F:32:09:0D:73:64:03:D5:8C:E4:45:C8:B4:BD:F0:00:C1:E7:74Error:Couldnotrequestcertificate:Couldnotinternfroms:nestedasn1errorExiting;failedtoretrievecertificateandwaitforcertisdisabled{quote}












   

 Add Comment






















 This message was sent by Atlassian JIRA (v6.1.4#6159-sha1:44eaede)




 














-- 
You received this message because you are subscribed to the Google Groups Puppet Bugs group.
To unsubscribe from

Jira (PUP-3556) Older versions of Puppet fail to retrieve certificates from a 3.7.x master

2014-10-28 Thread Chris Spence (JIRA) 
Title: Message Title










 

 Chris Spence created an issue


















 Puppet /  PUP-3556



  Older versions of Puppet fail to retrieve certificates from a 3.7.x master 










Issue Type:

  Bug




Assignee:


 Unassigned




Created:


 28/Oct/14 2:28 AM




Priority:

  Normal




Reporter:

 Chris Spence










A version 3.1.0 Puppet agent (OEL 6.5 x86_64) requesting a cert from a master running, in this case, 3.7.2 with autosign enabled (sign everything - *) fails to download the signed certificate:

undefined:~ # puppet -V 3.1.0 undefined:~ # puppet agent -t Info: Creating a new SSL key for undefined.emea1.ciscloud Info: Caching certificate for ca Info: Creating a new SSL certificate request for undefined.emea1.ciscloud Info: Certificate Request fingerprint (SHA256): F6:EB:4E:C3:19:CC:C4:11:09:05:5B:B9:76:4F:32:09:0D:73:64:03:D5:8C:E4:45:C8:B4:BD:F0:00:C1:E7:74 Error: Could not request certificate: Could not intern from s: nested asn1 error Exiting; failed to retrieve certificate and waitforcert is disabled

The master has in fact received the cert request, and has signed it.

puppetmaster:/var/log/puppet # puppet cert list --all | grep undefined + undefined.emea1.ciscloud (SHA256) 1F:A0:FA:25:37:90:82:DA:EE:64:B5:9C:69:CF:4C:E9:BD:D9:EE:E1:B7:A6:66:5C:52:EC:5F:F8:55:EC:E1:55

Meanwhile the agent is in a tailspin

undefined:~ # puppet agent -t --server nonprod.puppet.int.thomsonreuters.com Info: Creating a new SSL certificate request for undefined.emea1.ciscloud Info: Certificate Request fingerprint (SHA256): F6:EB:4E:C3:19:CC:C4:11:09:05:5B:B9:76:4F:32:09:0D:73:64:03:D5:8C:E4:45:C8:B4:BD:F0:00:C1:E7:74 Error: Could not request certificate: Could not intern from s: nested asn1 error

Jira (PUP-3556) Older versions of Puppet fail to retrieve certificates from a 3.7.x master

2014-10-28 Thread Chris Spence (JIRA) 
Title: Message Title










 

 Chris Spence updated an issue


















 Puppet /  PUP-3556



  Older versions of Puppet fail to retrieve certificates from a 3.7.x master 










Change By:

 Chris Spence









 Aversion3.1.0Puppetagent(OEL6.5x86_64)requestingacertfromamasterrunning,inthiscase,3.7. 2 1 withautosignenabled(signeverything-*)failstodownloadthesignedcertificate:{quote}undefined:~#puppet-V3.1.0undefined:~#puppetagent-tInfo:CreatinganewSSLkeyforundefined.emea1.ciscloudInfo:CachingcertificateforcaInfo:CreatinganewSSLcertificaterequestforundefined.emea1.ciscloudInfo:CertificateRequestfingerprint(SHA256):F6:EB:4E:C3:19:CC:C4:11:09:05:5B:B9:76:4F:32:09:0D:73:64:03:D5:8C:E4:45:C8:B4:BD:F0:00:C1:E7:74Error:Couldnotrequestcertificate:Couldnotinternfroms:nestedasn1errorExiting;failedtoretrievecertificateandwaitforcertisdisabled{quote}Themasterhasinfactreceivedthecertrequest,andhassignedit.{quote}puppetmaster:/var/log/puppet#puppetcertlist--all|grepundefined+undefined.emea1.ciscloud(SHA256)1F:A0:FA:25:37:90:82:DA:EE:64:B5:9C:69:CF:4C:E9:BD:D9:EE:E1:B7:A6:66:5C:52:EC:5F:F8:55:EC:E1:55{quote}Meanwhiletheagentisinatailspin{quote}undefined:~#puppetagent-tInfo:CreatinganewSSLcertificaterequestforundefined.emea1.ciscloudInfo:CertificateRequestfingerprint(SHA256):F6:EB:4E:C3:19:CC:C4:11:09:05:5B:B9:76:4F:32:09:0D:73:64:03:D5:8C:E4:45:C8:B4:BD:F0:00:C1:E7:74Error:Couldnotrequestcertificate:Couldnotinternfroms:nestedasn1errorExiting;failedtoretrievecertificateandwaitforcertisdisabled{quote}












   

 Add Comment






















 This message was sent by Atlassian JIRA (v6.1.4#6159-sha1:44eaede)




 














-- 
You received this message because you are subscribed to the Google Groups Puppet Bugs group.
To unsubscribe from this group and stop receiving emails from it,