Puppet 4.3.2客户端节点无法通过SSL连接到Puppet Server

时间:2016-03-05 03:04:31

标签: ruby apache ssl puppet

根据the guide in the official docs,我刚刚完成了所有Puppet认证的清理再生。

但是,我遇到了这个错误,似乎没有Google,SO和其他任何地方的良好线索。

[vagrant@client puppet]$ hostname
client.example.com

[vagrant@client puppet]$ puppet --version
4.3.2

[vagrant@client puppet]$ sudo puppet config print vardir ssldir
vardir = /var/opt/puppetlabs/puppetserver
ssldir = /var/opt/puppetlabs/puppetserver/ssl

[vagrant@client puppet]$ sudo puppet agent --test --server=puppet.example.com
Warning: Unable to fetch my node definition, but the agent run will continue:
Warning: SSL_connect SYSCALL returned=5 errno=0 state=unknown state
Info: Retrieving pluginfacts
Error: /File[/var/opt/puppetlabs/puppetserver/facts.d]: Failed to generate additional resources using 'eval_generate': Connection reset by peer - SSL_connect
Error: /File[/var/opt/puppetlabs/puppetserver/facts.d]: Could not evaluate: Could not retrieve file metadata for puppet:///pluginfacts: SSL_connect SYSCALL returned=5 errno=0 state=unknown state
Info: Retrieving plugin
Error: /File[/var/opt/puppetlabs/puppetserver/lib]: Failed to generate additional resources using 'eval_generate': SSL_connect SYSCALL returned=5 errno=0 state=unknown state
Error: /File[/var/opt/puppetlabs/puppetserver/lib]: Could not evaluate: Could not retrieve file metadata for puppet:///plugins: SSL_connect SYSCALL returned=5 errno=0 state=unknown state
Error: Could not retrieve catalog from remote server: SSL_connect SYSCALL returned=5 errno=0 state=unknown state
Warning: Not using cache on failed catalog
Error: Could not retrieve catalog; skipping run
Error: Could not send report: SSL_connect SYSCALL returned=5 errno=0 state=unknown state

这是is a similar error,但对于Ruby中的常规SSL,我不知道如何更改Puppet的密码(不要认为它已启用)。

This post seems to suggest it may be Apache's fault,但我不认为我正在使用Apache。

有什么想法吗?

1 个答案:

答案 0 :(得分:4)

我遇到了同样的问题。

使用以下命令检查代理上的ssl目录:

sudo puppet config print ssldir

你的ssl目录可能不在/ etc / puppetlabs / puppet / ssl中,但可能在/ opt / puppetlabs下。从此目录中删除您的证书(或整个目录),然后执行另一个木偶运行。