Puppet certificate verify failed self signed certificate in certificate chain for CN Puppet CA master-b

0 votes

I have a puppet setup (A puppet server/master and a linux puppet agent node) and the communication among them was successfully established. I have a change in my requirement for which i had to create a new puppet master and run it in the agent:

sudo puppet agent -t --server master-b

which led to the error mentioned above.

I replicated the folder /var/lib/puppet/ssl from master-a  to master-b, and it was successful.

Is there an approach to avoid an puppet agent node from communicating with the primary master(master a)? How I can remove the certificates of the old master from the agent node and replace it with the certificates of the master-b?

Aug 5, 2019 in Puppet by Liana

1 answer to this question.

0 votes

Make new clean master b, and duplicate two records from master b to agent: 

Duplicate record "/var/lib/puppet/ssl/ca/ca_crt.pem"" from master b to agent, and save it as "/var/lib/puppet/ssl/certs/ca.pem". 

Duplicate record "/var/lib/puppet/ssl/ca/ca_crl.pem" from master b to agent, ans save it as "/var/lib/puppet/ssl/crl.pem". 

Erase old authentications in agent. 

sudo find /var/lib/puppet/ssl -name <hostname>.pem -delete
answered Aug 5, 2019 by Sirajul
• 59,230 points

Related Questions In Puppet

0 votes
1 answer

err: Could not send report: SSL_connect returned=1 errno=0 state=SSLv3 read server certificate B: certificate verify failed

This error occurs when Windows agents' time isn't synced.  Windows agents ...READ MORE

answered Aug 5, 2019 in Puppet by Sirajul
• 59,230 points
0 votes
1 answer
0 votes
1 answer

Puppet : Provisioning a Replica in PE for High availability.

Provisioning a replica duplicates specific components and ...READ MORE

answered Aug 1, 2019 in Puppet by Sirajul
• 59,230 points
+15 votes
2 answers

Git management technique when there are multiple customers and need multiple customization?

Consider this - In 'extended' Git-Flow, (Git-Multi-Flow, ...READ MORE

answered Mar 27, 2018 in DevOps & Agile by DragonLord999
• 8,450 points
+2 votes
1 answer
0 votes
1 answer
webinar_success Thank you for registering Join Edureka Meetup community for 100+ Free Webinars each month JOIN MEETUP GROUP