Hrmph... So post install & error, did the all the certs that were
there look the same on both sides?
Is the resolving name of the puppet server the same when it got the
cert as post configuration once it was configured? (ie: puppet
changing to puppet.mydomain.com?)
On Tue, Aug 28, 2012 at 1:54 PM, Bai Shen <baishen.lists(a)gmail.com> wrote:
I already had the ntp stuff in the kickstart. And I redid the
kickstart, so
there was no certs to clean off the client.
On Tue, Aug 28, 2012 at 1:45 PM, Greg Swift <gregswift(a)gmail.com> wrote:
>
> On Tue, Aug 28, 2012 at 10:20 AM, Bai Shen <baishen.lists(a)gmail.com>
> wrote:
> > I'm trying to get puppet to connect to my puppetmaster, but I keep
> > getting
> > the same error.
> >
> > err: Could not retrieve catalog from remote server: SSL_connect
> > returned=1
> > errno=0 state=SSLv3 read server certificate B: certificate verify failed
> >
> > I've made sure ntpd is running during the kickstart and that the times
> > are
> > the same on both machines. I've also ran puppet cert --clean --all on
> > the
> > puppetmaster. I have the puppetmaster set to autosign all certs.
> >
> > Any ideas what I'm missing? Everything I've found says to make sure
the
> > clocks are the same, which I've already done. I did see one post
> > talking
> > about an issue with Ruby 1.9.2, but I'm running 1.8.7.
>
> I used to get that error a lot before I added an explicit 'ntpdate
> <ntpserver>' inside my kickstart.
>
> Once you ran the clean on the puppetmaster did you also clean them off
> the client just to be sure?
> _______________________________________________
> cobbler mailing list
> cobbler(a)lists.fedorahosted.org
>
https://lists.fedorahosted.org/mailman/listinfo/cobbler
_______________________________________________
cobbler mailing list
cobbler(a)lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/cobbler