使用puppet agent的外部CA配置

时间:2016-06-17 15:19:47

标签: ssl puppet puppet-enterprise

我正在尝试将puppetserver和agent配置为使用外部CA - Root自签名CA& Master,Agent拥有自己的ssl证书

puppetserver中的配置:

/etc/puppetlabs/puppetserver/bootstrap.cfg

# To enable the CA service, leave the following line uncommented
# puppetlabs.services.ca.certificate-authority-service/certificate-authority-service
# To disable the CA service, comment out the above line and uncomment the line below
puppetlabs.services.ca.certificate-authority-disabled-service/certificate-authority-disabled-service

/etc/puppetlabs/puppetserver/conf.d/webserver.conf

ssl-cert    : /usr/cachelogic/var/device-pki/dev_cert.pem
ssl-key     : /usr/cachelogic/var/device-pki/dev_key.pem
ssl-ca-cert : /usr/cachelogic/var/device-pki/CAcert.pem
ssl-crl-path : /etc/puppetlabs/puppet/ssl/crl.pem

puppetserver服务已成功启动。

木偶代理中的配置:

/etc/puppetlabs/puppet/puppet.conf

hostcert = /usr/cachelogic/var/device-pki/dev_cert.pem 
hostprivkey = /usr/cachelogic/var/device-pki/dev_key.pem 
localcacert = /usr/cachelogic/var/device-pki/CAcert.pem

在启动木偶代理后,我收到错误消息。

Debug: Using cached certificate for ca
Debug: Creating new connection for https://cp3.zzz152d1.cdn:8140
Debug: Using cached certificate for ca
Error: Could not run: stack level too deep
/opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet.rb:63

有关调试此问题的任何指示都会有所帮助。感谢。

0 个答案:

没有答案