Re: err: Could not request certificate: stack level too deep

[Steve Roberts]

On Saturday, September 15, 2012 6:10:33 AM UTC-7, quanta wrote:

    debug: Using cached certificate for ca

    err: Could not request certificate: stack level too deep

    debug: Using cached certificate for ca

    debug: Using cached certificate for ca

    /usr/lib/ruby/1.8/sync.rb:58:in `Fail': Thread(#<Thread:0x2af83efcd378 run>) not locked. (Sync_m::Err::UnknownLocker)

    from /usr/lib/ruby/1.8/sync.rb:64:in `Fail'

    from /usr/lib/ruby/1.8/sync.rb:184:in `sync_unlock'

    from /usr/lib/ruby/1.8/sync.rb:232:in `synchronize'

    from /usr/lib/ruby/site_ruby/1.8/puppet/util/settings.rb:650:in `uninterpolated_value'

    from /usr/lib/ruby/site_ruby/1.8/puppet/util/settings.rb:800:in `each_source'

    from /usr/lib/ruby/site_ruby/1.8/puppet/util/settings.rb:797:in `each'

    from /usr/lib/ruby/site_ruby/1.8/puppet/util/settings.rb:797:in `each_source'

    from /usr/lib/ruby/site_ruby/1.8/puppet/util/settings.rb:647:in `uninterpolated_value'

    from /usr/lib/ruby/site_ruby/1.8/puppet/util/settings.rb:646:in `catch'

    from /usr/lib/ruby/site_ruby/1.8/puppet/util/settings.rb:646:in `uninterpolated_value'

    from /usr/lib/ruby/site_ruby/1.8/puppet/util/settings.rb:682:in `value'

    from /usr/lib/ruby/site_ruby/1.8/puppet/util/settings.rb:21:in `[]'

    from /usr/lib/ruby/site_ruby/1.8/puppet.rb:65:in `[]'

    from /usr/lib/ruby/site_ruby/1.8/puppet/ssl/host.rb:297:in `wait_for_cert'

    from /usr/lib/ruby/site_ruby/1.8/puppet/application/agent.rb:407:in `setup_host'

    from /usr/lib/ruby/site_ruby/1.8/puppet/application/agent.rb:425:in `setup_agent'

    from /usr/lib/ruby/site_ruby/1.8/puppet/application/agent.rb:484:in `setup'

    from /usr/lib/ruby/site_ruby/1.8/puppet/application.rb:307:in `run'

    from /usr/lib/ruby/site_ruby/1.8/puppet/application.rb:416:in `hook'

    from /usr/lib/ruby/site_ruby/1.8/puppet/application.rb:307:in `run'

    from /usr/lib/ruby/site_ruby/1.8/puppet/application.rb:407:in `exit_on_fail'

    from /usr/lib/ruby/site_ruby/1.8/puppet/application.rb:307:in `run'

    from /usr/lib/ruby/site_ruby/1.8/puppet/util/command_line.rb:69:in `execute'

    from /usr/bin/puppet:4

Since I'm not familiar with Ruby, could you help me please to solve this?

I had what I think is the same thing hit me today.

looks like in newer puppet agent's  if you only have the client cert local but not the CA.pem you get this obtuse error:
Error: Could not request certificate: stack level too deep

And if I add debug I get the trace like above.

solution was to add ca.pem in the bundle I unpack during system initialization.

Very frustrating nothing in release notes and other docs that I have been able to find on this change.  The number of tools I have been bumping into recently that really heavily on certs but don't tend to manage/deal with them well