0

One of our machines was recently put behind an SSL proxy and since then I can't connect to puppet with "Could not evaluate: certificate verify failed."

I have checked that the dates match, regenerated the certificates but to no avail.

Debugging the verification with "openssl s_client -showcerts -connect puppetmaster:puppetmasterport" shows "Verify return code: 0 (ok)"

Initially the Proxy SSL Certificate was not recognized with a "Verify return code: 20 (unable to get local issuer certificate)" problem which was then fixed with the answer in the question: Adding root certificate to CentOS 5

Improve this question
2
  • 1
    check also the time set on the master and your agent.
    – Sebastien Varrette
    Oct 12, 2012 at 13:50
  • Thanks for the addition, I should've specified I checked the date AND time :)
    – Onitlikesonic
    Oct 15, 2012 at 11:53

1 Answer 1

Reset to default
1

This seems to have solved my problem:

you need to add the top level ca pub key to it to /var/lib/puppet/ssl/certs/ca.pem

Reference: https://groups.google.com/forum/?fromgroups=#!topic/puppet-users/VVGkYArpYfI

Improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .