伪装代理失败

我不能让傀儡代理人运行。

我试着删除客户端上的/etc/puppet/ssl和服务器上的./puppetca --clean 。 没有工作。

 notice: Starting Puppet client version 2.6.8 debug: Using cached certificate for ca debug: Using cached certificate for nysv0194 debug: Using cached certificate for ca /usr/lib/ruby/1.8/net/http.rb:586:in `connect': certificate verify failed (OpenSSL::SSL::SSLError) from /usr/lib/ruby/1.8/net/http.rb:586:in `connect' from /usr/lib/ruby/1.8/net/http.rb:553:in `do_start' from /usr/lib/ruby/1.8/net/http.rb:542:in `start' from /usr/lib/ruby/1.8/net/http.rb:1035:in `request' from /usr/lib/ruby/1.8/net/http.rb:772:in `get' from /usr/lib/ruby/site_ruby/1.8/puppet/indirector/rest.rb:75:in `find' from /usr/lib/ruby/site_ruby/1.8/puppet/indirector/indirection.rb:188:in `find' from /usr/lib/ruby/site_ruby/1.8/puppet/indirector.rb:50:in `find' ... 10 levels... from /usr/lib/ruby/site_ruby/1.8/puppet/application.rb:305:in `run' from /usr/lib/ruby/site_ruby/1.8/puppet/application.rb:411:in `exit_on_fail' from /usr/lib/ruby/site_ruby/1.8/puppet/application.rb:305:in `run' from /usr/sbin/puppetd:4 

它是

 puppetca --clean full.host.domain.com 

你是否也以root身份运行客户端?

这里的证书保存在/var/lib/puppet/ssl ,但我假设你在/etc/puppet/ssl 。 问题是,当你删除该目录时,傀儡客户端是否停止了 ? 因为如果不是的话,你会遇到这样的问题。

主机不在NTP同步:P

我有一个类似的问题,最终导致安装了多个版本的puppet:一个来自Ubuntu软件库,另一个来自一个rubygem。 从Ubuntu存储库卸载版本解决了这个问题。