Project

General

Profile

Actions
Copy link

Bug #35164

closed

puppet failed on initial ubuntu 20.04 installation

Added by Xiao Li almost 2 years ago. Updated over 1 year ago.

Status:
Closed
Priority:
Normal
Assignee:
-
Category:
-
Target version:
-
Difficulty:
Triaged:
No
Bugzilla link:
Pull request:
Fixed in Releases:
Found in Releases:
Red Hat JIRA:

Description

Jul 05 12:40:38 dskscs008 puppet-agent[483]: Could not send report: SSL_connect returned=1 errno=0 state=error: certificate verify failed (unable to get issuer certificate): [unable to get issuer certificate fo>
Jul 05 13:10:37 dskscs008 puppet-agent[543]: Unable to fetch my node definition, but the agent run will continue:
Jul 05 13:10:37 dskscs008 puppet-agent[543]: SSL_connect returned=1 errno=0 state=error: certificate verify failed (unable to get issuer certificate): [unable to get issuer certificate for /CN=Puppet CA: katell>
Jul 05 13:10:37 dskscs008 puppet-agent[543]: (/File[/var/lib/puppet/facts.d]) Failed to generate additional resources using 'eval_generate': SSL_connect returned=1 errno=0 state=error: certificate verify failed>
Jul 05 13:10:37 dskscs008 puppet-agent[543]: (/File[/var/lib/puppet/facts.d]) Could not evaluate: Could not retrieve file metadata for puppet:///pluginfacts: SSL_connect returned=1 errno=0 state=error: certific>
Jul 05 13:10:37 dskscs008 puppet-agent[543]: (/File[/var/lib/puppet/lib]) Failed to generate additional resources using 'eval_generate': SSL_connect returned=1 errno=0 state=error: certificate verify failed (un>
Jul 05 13:10:37 dskscs008 puppet-agent[543]: (/File[/var/lib/puppet/lib]) Could not evaluate: Could not retrieve file metadata for puppet:///plugins: SSL_connect returned=1 errno=0 state=error: certificate veri>
Jul 05 13:10:37 dskscs008 puppet-agent[543]: Could not retrieve catalog from remote server: SSL_connect returned=1 errno=0 state=error: certificate verify failed (unable to get issuer certificate): [unable to g>
Jul 05 13:10:37 dskscs008 puppet-agent[543]: Could not retrieve catalog; skipping run
Jul 05 13:10:37 dskscs008 puppet-agent[543]: Could not send report: SSL_connect returned=1 errno=0 state=error: certificate verify failed (unable to get issuer certificate): [unable to get issuer certificate fo>
Actions
Copy link
 #1

Updated by Ewoud Kohl van Wijngaarden over 1 year ago

  • Description updated (diff)
  • Status changed from New to Closed

From the paths used this looks like it's using the OS vendor's package, which is version 5.5. If you talk to Puppetserver 7 it can't deal with the intermediate certificate.

I'd advise using a newer Puppet version (since Puppet 5 is also EOL). See https://apt.puppet.com/ as well.

Actions
Copy link

Also available in: Atom PDF