puppet证书掉销的问题
2010年10月21日 admin 发表评论 阅读评论
在puppet serser上用puppet -r -c client_hostname后.

接着在client再次申请的时候.出现如下提示:
puppetd –server puppetserver –test
notice: Ignoring –listen on onetime run
err: Could not retrieve catalog from remote server: sslv3 alert certificate revoked
warning: Not using cache on failed catalog
err: Could not retrieve catalog; skipping run

为这个问题.困惑了好久.
绕过GFW后,找到解决方法
mv /var/lib/puppet /tmp
然后再次做证书,请求,我们希望的结构出现了.

在server上签名一下就OK了

如果出现提示如下:
[root@CUC-TY-1-101 lib]# puppetd –server puppet_server –test
err: Could not request certificate: Retrieved certificate does not match private key; please remove certificate from server and regenerate it with the current key
删除 /var/lib/puppet
然后在服务器上注销证书 先revoke 再clean
服务器端操作完成后,要杀掉进程,然后重启puppet master.
脚 本restart 不管用.不知道是不是puppet的bug
目前,还有一个证书校验的问题没有解决:如下

puppetrun -p 10 –host a.com
Triggering a.com
Host a.com failed: certificate verify failed
a.com finished with exit code 2
Failed: a.com