Trying to fetch a module, I have the following output
Notice: Preparing to install into /usr/local/etc/puppet/modules ... Notice: Downloading from https://forgeapi.puppetlabs.com ... Error: Could not connect via HTTPS to https://forgeapi.puppetlabs.com Unable to verify the SSL certificate The certificate may not be signed by a valid CA The CA bundle included with OpenSSL may not be valid or up to date
But my /etc/ssl/cert.pem
is linked correctly, and the package ca_root_nss-3.16.3
is up to date. Is there any information I can get from Puppet about how to proceed with diagnosing this? Maybe it's looking in the wrong location?
strace
d your command to find out whether the up-to-date certificate file is actually read? Can you check that the currentGeoTrust SSL CA - G2
is in there?date
(which happened to be wildly off, but no dice); and I ranktrace
. In fact,puppet
was attempting to read/usr/local/openssl/cert.pem
, and upon symlinking mycert.pem
there the error was fixed. This might be an issue with the port or something, which I'll pursue further. Thanks again.