Question

在尝试引导新服务器时：

Chef-Workstation:~ # knife bootstrap SERVER -N SERVER -E PROJECTNAMEHERE -x USERNAMEHERE-A --sudo --verbose
Connecting to SERVER
SERVER Starting first Chef Client run...
SERVER Starting Chef Client, version 12.19.36
SERVER Creating a new client identity for SERVER using the validator key.
SERVER [2019-04-01T14:52:54+00:00] ERROR: SSL Validation failure connecting to host: Chef-Server - SSL_connect returned=1 errno=0 state=error: certificate verify failed
SERVER
SERVER ================================================================================
SERVER Chef encountered an error attempting to create the client "SERVER"
SERVER ================================================================================
SERVER
SERVER Platform:
SERVER ---------
SERVER x86_64-linux-gnu
SERVER
SERVER
SERVER Running handlers:
SERVER [2019-04-01T14:52:54+00:00] ERROR: Running exception handlers
SERVER Running handlers complete
SERVER [2019-04-01T14:52:54+00:00] ERROR: Exception handlers complete
SERVER Chef Client failed. 0 resources updated in 03 seconds
SERVER [2019-04-01T14:52:54+00:00] FATAL: Stacktrace dumped to /var/chef/cache/chef-stacktrace.out
SERVER [2019-04-01T14:52:54+00:00] FATAL: Please provide the contents of the stacktrace.out file if you file a bug report
SERVER [2019-04-01T14:52:54+00:00] ERROR: SSL Error connecting to https://Chef-Server/clients - SSL_connect returned=1 errno=0 state=error: certificate verify failed
SERVER [2019-04-01T14:52:54+00:00] FATAL: Chef::Exceptions::ChildConvergeError: Chef run process exited unsuccessfully (exit code 1)
Chef-Workstation:~ #

但是我已经有了：

grep -i ssl .chef/knife.rb
ssl_verify_mode :verify_none

还有：

openssl s_client -showcerts -connect "Chef-Server:443" < /dev/null 2>/dev/null | sed -n -e '/BEGIN\ CERTIFICATE/,/END\ CERTIFICATE/ p' | tee -a /opt/chef/embedded/ssl/certs/cacert.pem

我认为这是软件错误，还是我还缺少什么？

问题：当我在配置文件中声明不打扰有效的SSL证书时，刀为何会出现SSL问题？

Answer 1

我需要注册的节点上的厨师客户端版本从12降级到11。

刀引导程序：“错误：SSL错误连接”

1 个答案: