Puppet主证书生成不起作用

时间:2017-09-24 09:24:48

标签: ssl puppet

Puppet Master:

  • 具有分-OS-6的Docker容器
  • 在/ etc / hosts
  • 中配置
  • 使用服务器 dns_alt_names 配置/etc/puppet/puppet.conf并且 的 certname

Puppet Agent:

  • 使用ubuntu OS的Docker容器
  • 在/ etc / hosts
  • 中配置了serverip和agent ip
  • 使用服务器值配置/etc/puppet/puppet.conf

现在尝试使用

在SERVER计算机中生成证书
sudo -u puppet puppet master --no-daemonize --verbose

显示器: Notice: Starting Puppet master version 3.8.7

与证书生成无关。

我相信在hosts文件和其他配置中没有任何错误。这里可能有问题。

在客户端计算机中 如果我运行此命令 puppet agent -t 。我收到以下错误。由于证书不是在服务器中生成的。我想我必须首先解决这个问题。

Warning: Unable to fetch my node definition, but the agent run will continue:
Warning: Server hostname 'www.puppetmaster.com' did not match server certificate; expected one of puppetcertificate, DNS:puppet www.puppetmaster.com, DNS:puppetcertificate
Info: Retrieving pluginfacts
Error: /File[/var/lib/puppet/facts.d]: Failed to generate additional resources using 'eval_generate': Server hostname 'www.puppetmaster.com' did not match server certificate; expected one of puppetcertificate, DNS:puppet www.puppetmaster.com, DNS:puppetcertificate
Error: /File[/var/lib/puppet/facts.d]: Could not evaluate: Could not retrieve file metadata for puppet://www.puppetmaster.com/pluginfacts: Server hostname 'www.puppetmaster.com' did not match server certificate; expected one of puppetcertificate, DNS:puppet www.puppetmaster.com, DNS:puppetcertificate
Info: Retrieving plugin
Error: /File[/var/lib/puppet/lib]: Failed to generate additional resources using 'eval_generate': Server hostname 'www.puppetmaster.com' did not match server certificate; expected one of puppetcertificate, DNS:puppet www.puppetmaster.com, DNS:puppetcertificate
Error: /File[/var/lib/puppet/lib]: Could not evaluate: Could not retrieve file metadata for puppet://www.puppetmaster.com/plugins: Server hostname 'www.puppetmaster.com' did not match server certificate; expected one of puppetcertificate, DNS:puppet www.puppetmaster.com, DNS:puppetcertificate
Error: Could not retrieve catalog from remote server: Server hostname 'www.puppetmaster.com' did not match server certificate; expected one of puppetcertificate, DNS:puppet www.puppetmaster.com, DNS:puppetcertificate
Warning: Not using cache on failed catalog
Error: Could not retrieve catalog; skipping run
Error: Could not send report: Server hostname 'www.puppetmaster.com' did not match server certificate; expected one of puppetcertificate, DNS:puppet www.puppetmaster.com, DNS:puppetcertificate

0 个答案:

没有答案