I'm trying to set up a Ubuntu VM with puppet installed so I can locally test our production setup. I'm having trouble getting puppetmaster and puppet to talk to each other. Let me take you through my steps. (The server's hostname
is a FQDN of the format "web1.xxx.xxx.net").
So firstly, I clear out all the pem files (except the CA pems of course) from the /etc/puppet/ssl
directory so I can do a fresh start. puppetca --list
returns no results.
Then, I run puppetd --test
to generate a CSR for the puppetmaster. puppetca --list
now includes my hostname ("web1.xxx.xxx.net").
Then I run puppetca --sign web1.xxx.xxx.net
. Now puppetca --list
is empty again -- everything working fine so far.
Lastly I run puppetd --test
again. I get the following output:
err: Could not retrieve catalog from remote server: hostname was not match with the server certificate
warning: Not using cache on failed catalog
err: Could not retrieve catalog; skipping run
Listing the contents of the /etc/puppet/ssl
directory shows PEM files with the correct server name, which matches my hostname
. Anyone have any ideas on how to attack this problem?