Jira (PUP-9785) Unable to connect puppetserver ca endpoints

6 views
Skip to first unread message

foo bar (JIRA)

unread,
Jun 19, 2019, 9:24:04 AM6/19/19
to puppe...@googlegroups.com
foo bar created an issue
 
Puppet / Bug PUP-9785
Unable to connect puppetserver ca endpoints
Issue Type: Bug Bug
Affects Versions: PUP 6.4.2
Assignee: Unassigned
Created: 2019/06/19 6:23 AM
Priority: Normal Normal
Reporter: foo bar

Puppet Version: 6.4.2-1
Puppet Server Version: 6.3.0
OS Name/Version: RHEL 7.6 x86_64

I’m facing a issue if running `puppet node clean someagent.test.com` or `puppetserver ca clean --certname someagent.test.com` and `puppetserver ca list --all` (on the same machine as root) at the same time. This only occurs if I'm running one of the clean commands and the list command concurrently.

# puppet node clean someagent.test.com
 
WARN: Unresolved specs during Gem::Specification.reset:
 
      facter (< 4, >= 2.0.1)
 
WARN: Clearing out unresolved specs.
 
Please report a bug if this causes problems.
 
Notice: Revoked certificate for someagent.test.com
 
Notice: Cleaned files related to someagent.test.com
 
someagent.test.com

 

# puppetserver ca clean --certname someagent.test.net
 
Revoked certificate for someagent.test.net
 
Cleaned files related to someagent.test.net

 

# puppetserver ca list --all
 
Fatal error when running action 'list'
 
  Error: Failed connecting to https://puppet1.test.com:8140/puppet-ca/v1/certificate_statuses/any_key
 
  Root cause: SSL_connect returned=1 errno=0 state=error: sslv3 alert certificate unknown
 
Fatal error when running action 'list'
 
  Error: Failed connecting to https://puppet1.test.com:8140/puppet-ca/v1/certificate_statuses/any_key
 
  Root cause: Net::OpenTimeout

 

My Puppet config

# cat /etc/puppetlabs/puppet/puppet.conf
 
[agent]
 
server=puppet0.test.com
 
report=true
 
stringify_facts=falseruninterval=1800
 
[master]
 
storeconfigs = true
 
storeconfigs_backend = puppetdb
 
vardir = /opt/puppetlabs/server/data/puppetserver
 
logdir = /var/log/puppetlabs/puppetserver
 
rundir = /var/run/puppetlabs/puppetserver
 
pidfile = /var/run/puppetlabs/puppetserver/puppetserver.pid
 
codedir = /etc/puppetlabs/code
 
ssldir=/etc/puppetlabs/puppet/sslmaster
 
reports=puppetdb
 
certname=puppet1.test.com
 
dns_alt_names=puppet1.test.com,master1.test.com
 
parser=future
 
autosign=/usr/local/bin/autosign.sh
 
ca_server=puppet1.test.com
 
[main]
 
rundir=/var/run/puppetlabs
 
hiera_config = /etc/puppetlabs/puppet/hiera.yaml

 

Desired Behavior:

`puppetserver ca list --all` should list certificates 

Actual Behavior:

 

`puppetserver ca list --all` raises on errors

Fatal error when running action 'list' Error: Failed connecting to https://puppet1.test.com:8140/puppet-ca/v1/certificate_statuses/any_key Root cause: SSL_connect returned=1 errno=0 state=error: sslv3 alert certificate unknown Fatal error when running action 'list' Error: Failed connecting to https://puppet1.test.com:8140/puppet-ca/v1/certificate_statuses/any_key Root cause: Net::OpenTimeout

puppetserver.log

2019-06-19T15:08:08.594+02:00 INFO [clojure-agent-send-off-pool-1] [o.e.j.u.s.SslContextFactory] x509=X509@1e21d885(private key,h=[master1.test.com, puppet1.test.com],w=[]) for InternalSslContextFactory@ 5352bca3[provider=null,keyStore=null,trustStore=null] 2019-06-19T15:08:08.689+02:00 ERROR [qtp1989839493-311] [p.r.core] Internal Server Error: java.lang.IllegalArgumentException: The CRL reader must contain at least one CRL at puppetlabs.ssl_utils.core$fn__21465$pem__GT_ca_crl__21470$fn__21471.invoke(core.clj:567) at puppetlabs.ssl_utils.core$fn__21465$pem__GT_ca_crl__21470.invoke(core.clj:563) at puppetlabs.puppetserver.certificate_authority$fn__36744$get_certificate_statuses__36749$fn__36753.invoke(certificate_authority.clj:1382) at puppetlabs.puppetserver.certificate_authority$fn__36744$get_certificate_statuses__36749.invoke(certificate_authority.clj:1379) at puppetlabs.services.ca.certificate_authority_core$certificate_statuses$fn__38275$fn__38278.invoke(certificate_authority_core.clj:306) at liberator.core$run_handler.invokeStatic(core.clj:176) at liberator.core$run_handler.invoke(core.clj:131) at liberator.core$handle_ok.invokeStatic(core.clj:224) at liberator.core$handle_ok.invoke(core.clj:224) at liberator.core$decide.invokeStatic(core.clj:87) at liberator.core$decide.invoke(core.clj:74) at liberator.core$multiple_representations_QMARK_.invokeStatic(core.clj:232) at liberator.core$multiple_representations_QMARK_.invoke(core.clj:232) at liberator.core$decide.invokeStatic(core.clj:87) at liberator.core$decide.invoke(core.clj:74) at liberator.core$put_to_existing_QMARK_.invokeStatic(core.clj:305) at liberator.core$put_to_existing_QMARK_.invoke(core.clj:305) at liberator.core$decide.invokeStatic(core.clj:87) at liberator.core$decide.invoke(core.clj:74) at liberator.core$post_to_existing_QMARK_.invokeStatic(core.clj:308) at liberator.core$post_to_existing_QMARK_.invoke(core.clj:308) at liberator.core$decide.invokeStatic(core.clj:87) at liberator.core$decide.invoke(core.clj:74) at liberator.core$method_patch_QMARK_.invokeStatic(core.clj:315) at liberator.core$method_patch_QMARK_.invoke(core.clj:315) at liberator.core$decide.invokeStatic(core.clj:87) at liberator.core$decide.invoke(core.clj:74) at liberator.core$method_delete_QMARK_.invokeStatic(core.clj:317) at liberator.core$method_delete_QMARK_.invoke(core.clj:317) at liberator.core$decide.invokeStatic(core.clj:87) at liberator.core$decide.invoke(core.clj:74) at liberator.core$if_modified_since_exists_QMARK_.invokeStatic(core.clj:337) at liberator.core$if_modified_since_exists_QMARK_.invoke(core.clj:337) at liberator.core$decide.invokeStatic(core.clj:87) at liberator.core$decide.invoke(core.clj:74) at liberator.core$if_none_match_exists_QMARK_.invokeStatic(core.clj:355) at liberator.core$if_none_match_exists_QMARK_.invoke(core.clj:355) at liberator.core$decide.invokeStatic(core.clj:87) at liberator.core$decide.invoke(core.clj:74) at liberator.core$if_unmodified_since_exists_QMARK_.invokeStatic(core.clj:375) at liberator.core$if_unmodified_since_exists_QMARK_.invoke(core.clj:375) at liberator.core$decide.invokeStatic(core.clj:87) at liberator.core$decide.invoke(core.clj:74) at liberator.core$if_match_exists_QMARK_.invokeStatic(core.clj:389) at liberator.core$if_match_exists_QMARK_.invoke(core.clj:389) at liberator.core$decide.invokeStatic(core.clj:87) at liberator.core$decide.invoke(core.clj:74) at liberator.core$exists_QMARK_.invokeStatic(core.clj:392) at liberator.core$exists_QMARK_.invoke(core.clj:392) at liberator.core$decide.invokeStatic(core.clj:87) at liberator.core$decide.invoke(core.clj:74) at liberator.core$processable_QMARK_.invokeStatic(core.clj:395) at liberator.core$processable_QMARK_.invoke(core.clj:395) at liberator.core$decide.invokeStatic(core.clj:87)
 
at liberator.core$decide.invoke(core.clj:74) at liberator.core$encoding_available_QMARK_.invokeStatic(core.clj:399) at liberator.core$encoding_available_QMARK_.invoke(core.clj:399) at liberator.core$decide.invokeStatic(core.clj:87) at liberator.core$decide.invoke(core.clj:74) at liberator.core$accept_encoding_exists_QMARK_.invokeStatic(core.clj:416) at liberator.core$accept_encoding_exists_QMARK_.invokeStatic(core.clj:416) [65/808] at liberator.core$accept_encoding_exists_QMARK_.invoke(core.clj:416) at liberator.core$decide.invokeStatic(core.clj:87) at liberator.core$decide.invoke(core.clj:74) at liberator.core$accept_charset_exists_QMARK_.invokeStatic(core.clj:429) at liberator.core$accept_charset_exists_QMARK_.invoke(core.clj:429) at liberator.core$decide.invokeStatic(core.clj:87) at liberator.core$decide.invoke(core.clj:74) at liberator.core$accept_language_exists_QMARK_.invokeStatic(core.clj:443) at liberator.core$accept_language_exists_QMARK_.invoke(core.clj:443) at liberator.core$decide.invokeStatic(core.clj:87) at liberator.core$decide.invoke(core.clj:74) at liberator.core$media_type_available_QMARK_.invokeStatic(core.clj:453) at liberator.core$media_type_available_QMARK_.invoke(core.clj:453) at liberator.core$decide.invokeStatic(core.clj:87) at liberator.core$decide.invoke(core.clj:74) at liberator.core$accept_exists_QMARK_.invokeStatic(core.clj:456) at liberator.core$accept_exists_QMARK_.invoke(core.clj:456) at liberator.core$decide.invokeStatic(core.clj:87) at liberator.core$decide.invoke(core.clj:74) at liberator.core$is_options_QMARK_.invokeStatic(core.clj:473) at liberator.core$is_options_QMARK_.invoke(core.clj:473) at liberator.core$decide.invokeStatic(core.clj:87) at liberator.core$decide.invoke(core.clj:74) at liberator.core$valid_entity_length_QMARK_.invokeStatic(core.clj:476) at liberator.core$valid_entity_length_QMARK_.invoke(core.clj:476) at liberator.core$decide.invokeStatic(core.clj:87) at liberator.core$decide.invoke(core.clj:74) at liberator.core$known_content_type_QMARK_.invokeStatic(core.clj:479) at liberator.core$known_content_type_QMARK_.invoke(core.clj:479) at liberator.core$decide.invokeStatic(core.clj:87) at liberator.core$decide.invoke(core.clj:74) at liberator.core$valid_content_header_QMARK_.invokeStatic(core.clj:481) at liberator.core$valid_content_header_QMARK_.invoke(core.clj:481) at liberator.core$decide.invokeStatic(core.clj:87) at liberator.core$decide.invoke(core.clj:74) at liberator.core$allowed_QMARK_.invokeStatic(core.clj:484) at liberator.core$allowed_QMARK_.invoke(core.clj:484) at liberator.core$decide.invokeStatic(core.clj:87) at liberator.core$decide.invoke(core.clj:74) at liberator.core$authorized_QMARK_.invokeStatic(core.clj:487) at liberator.core$authorized_QMARK_.invoke(core.clj:487) at liberator.core$decide.invokeStatic(core.clj:87) at liberator.core$decide.invoke(core.clj:74) at liberator.core$malformed_QMARK_.invokeStatic(core.clj:490) at liberator.core$malformed_QMARK_.invoke(core.clj:490) at liberator.core$decide.invokeStatic(core.clj:87) at liberator.core$decide.invoke(core.clj:74) at liberator.core$method_allowed_QMARK_.invokeStatic(core.clj:493) at liberator.core$method_allowed_QMARK_.invoke(core.clj:493) at liberator.core$decide.invokeStatic(core.clj:87) at liberator.core$decide.invoke(core.clj:74) at liberator.core$uri_too_long_QMARK_.invokeStatic(core.clj:496) at liberator.core$uri_too_long_QMARK_.invoke(core.clj:496) at liberator.core$decide.invokeStatic(core.clj:87) at liberator.core$decide.invoke(core.clj:74) at liberator.core$known_method_QMARK_.invokeStatic(core.clj:499) at liberator.core$known_method_QMARK_.invoke(core.clj:499) at liberator.core$decide.invokeStatic(core.clj:87) at liberator.core$decide.invoke(core.clj:74) at liberator.core$service_available_QMARK_.invokeStatic(core.clj:502)
 
at liberator.core$service_available_QMARK_.invoke(core.clj:502) at liberator.core$decide.invokeStatic(core.clj:87) at liberator.core$decide.invoke(core.clj:74) at liberator.core$initialize_context.invokeStatic(core.clj:504) at liberator.core$initialize_context.invoke(core.clj:504) at liberator.core$run_resource.invokeStatic(core.clj:595) at liberator.core$run_resource.invoke(core.clj:593) at puppetlabs.services.ca.certificate_authority_core$certificate_statuses$fn__38275.invoke(certificate_authority_core.clj:293) at compojure.response$fn__16841.invokeStatic(response.clj:33) at compojure.response$fn__16841.invoke(response.clj:21) at compojure.response$fn__16814$G__16809__16821.invoke(response.clj:6) at puppetlabs.services.ca.certificate_authority_core$fn__38287$web_routes__38292$fn__38293$fn__38296.invoke(certificate_authority_core.clj:316) at bidi.ring$fn__16628.invokeStatic(ring.cljc:25) at bidi.ring$fn__16628.invoke(ring.cljc:21) at bidi.ring$fn__16613$G__16608__16622.invoke(ring.cljc:16) at puppetlabs.comidi$make_handler$fn__18544.invoke(comidi.clj:245) at puppetlabs.trapperkeeper.authorization.ring_middleware$fn__25030$wrap_authorization_check__25035$fn__25036$fn__25037.invoke(ring_middleware.clj:290) at puppetlabs.ring_middleware.core$fn__22623$wrap_bad_request__22632$fn__22635$fn__22641.invoke(core.clj:170) at puppetlabs.puppetserver.ringutils$fn__34959$wrap_with_trapperkeeper_or_client_whitelist_authorization__34964$fn__34965$fn__34969.invoke(ringutils.clj:124) at puppetlabs.i18n.core$locale_negotiator$fn__124.invoke(core.clj:357) at puppetlabs.ring_middleware.core$fn__22721$wrap_uncaught_errors__22730$fn__22733$fn__22738.invoke(core.clj:216) at puppetlabs.puppetserver.ringutils$wrap_with_puppet_version_header$fn__34948.invoke(ringutils.clj:83) at puppetlabs.ring_middleware.core$fn__22371$wrap_response_logging__22376$fn__22377$fn__22378.invoke(core.clj:53) at puppetlabs.trapperkeeper.services.webserver.jetty9_core$ring_handler$fn__28207.invoke(jetty9_core.clj:434) at puppetlabs.trapperkeeper.services.webserver.jetty9_core.proxy$org.eclipse.jetty.server.handler.AbstractHandler$ff19274a.handle(Unknown Source) at sun.reflect.GeneratedMethodAccessor16.invoke(Unknown Source) at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) at java.lang.reflect.Method.invoke(Method.java:498) at clojure.lang.Reflector.invokeMatchingMethod(Reflector.java:167) at clojure.lang.Reflector.invokeInstanceMethod(Reflector.java:102) at puppetlabs.trapperkeeper.services.webserver.normalized_uri_helpers$fn__27785$normalize_uri_handler__27790$fn__27791$fn__27792.invoke(normalized_uri_helpers.clj:74) at puppetlabs.trapperkeeper.services.webserver.normalized_uri_helpers.proxy$org.eclipse.jetty.server.handler.HandlerWrapper$ff19274a.handle(Unknown Source) at org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper.java:132) at org.eclipse.jetty.server.handler.ScopedHandler.nextHandle(ScopedHandler.java:257) at org.eclipse.jetty.server.handler.ContextHandler.doHandle(ContextHandler.java:1317) at org.eclipse.jetty.server.handler.ScopedHandler.nextScope(ScopedHandler.java:205) at org.eclipse.jetty.server.handler.ContextHandler.doScope(ContextHandler.java:1219) at org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:144) at org.eclipse.jetty.server.handler.ContextHandlerCollection.handle(ContextHandlerCollection.java:219) at org.eclipse.jetty.server.handler.HandlerCollection.handle(HandlerCollection.java:126) at org.eclipse.jetty.server.handler.gzip.GzipHandler.handle(GzipHandler.java:724) at org.eclipse.jetty.server.handler.RequestLogHandler.handle(RequestLogHandler.java:56) at com.puppetlabs.trapperkeeper.services.webserver.jetty9.utils.MDCRequestLogHandler.handle(MDCRequestLogHandler.java:36) at org.eclipse.jetty.server.handler.StatisticsHandler.handle(StatisticsHandler.java:169) at org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper.java:132) at org.eclipse.jetty.server.Server.handle(Server.java:531) at org.eclipse.jetty.server.HttpChannel.handle(HttpChannel.java:352) at org.eclipse.jetty.server.HttpConnection.onFillable(HttpConnection.java:260) at org.eclipse.jetty.io.AbstractConnection$ReadCallback.succeeded(AbstractConnection.java:281) at org.eclipse.jetty.io.FillInterest.fillable(FillInterest.java:102) at org.eclipse.jetty.io.ssl.SslConnection.onFillable(SslConnection.java:291) at org.eclipse.jetty.io.ssl.SslConnection$3.succeeded(SslConnection.java:151) at org.eclipse.jetty.io.FillInterest.fillable(FillInterest.java:102) at org.eclipse.jetty.io.ChannelEndPoint$2.run(ChannelEndPoint.java:118) at org.eclipse.jetty.util.thread.strategy.EatWhatYouKill.runTask(EatWhatYouKill.java:333) at org.eclipse.jetty.util.thread.strategy.EatWhatYouKill.doProduce(EatWhatYouKill.java:310) at org.eclipse.jetty.util.thread.strategy.EatWhatYouKill.tryProduce(EatWhatYouKill.java:168) at org.eclipse.jetty.util.thread.strategy.EatWhatYouKill.run(EatWhatYouKill.java:126) at org.eclipse.jetty.util.thread.ReservedThreadExecutor$ReservedThread.run(ReservedThreadExecutor.java:366) at org.eclipse.jetty.util.thread.QueuedThreadPool.runJob(QueuedThreadPool.java:762) at org.eclipse.jetty.util.thread.QueuedThreadPool$2.run(QueuedThreadPool.java:680) at java.lang.Thread.run(Thread.java:748)2019-06-19T15:08:10.847+02:00 WARN [qtp1989839493-291] [p.p.certificate-authority] No certificate request for someagent.test.net at expected path /etc/puppetlabs/puppet/sslmaster/ca/requests/someagent.test.net .pem
 
 

 
Add Comment Add Comment
 
This message was sent by Atlassian JIRA (v7.7.1#77002-sha1:e75ca93)
Atlassian logo

foo bar (JIRA)

unread,
Jun 19, 2019, 9:42:03 AM6/19/19
to puppe...@googlegroups.com
foo bar updated an issue
Change By: foo bar
*Puppet Version: 6.4.2-1*
*Puppet Server Version: 6.3.0*
*OS Name/Version: RHEL 7.6 x86_64*


I’m facing a issue if running `puppet node clean someagent.test.com` or `puppetserver ca clean --certname someagent.test.com` and `puppetserver ca list --all` (on the same machine as root) at the same time. This only occurs if I'm running one of the clean commands and the list command concurrently.
{code:java}
# puppet node clean someagent.test.com
WARN: Unresolved specs during Gem::Specification.reset:
      facter (< 4, >= 2.0.1)
WARN: Clearing out unresolved specs.
Please report a bug if this causes problems.
Notice: Revoked certificate for someagent.test.com
Notice: Cleaned files related to someagent.test.com
someagent.test.com{code}
 
{code:java}
# puppetserver ca clean --certname someagent.test.net
Revoked certificate for someagent.test.net
Cleaned files related to someagent.test.net
{code}
 
{code:java}
# puppetserver ca list --all
Fatal error when running action 'list'
  Error: Failed connecting to https://puppet1.test.com:8140/puppet-ca/v1/certificate_statuses/any_key
  Root cause: SSL_connect returned=1 errno=0 state=error: sslv3 alert certificate unknown
Fatal error when running action 'list'
  Error: Failed connecting to https://puppet1.test.com:8140/puppet-ca/v1/certificate_statuses/any_key
  Root cause: Net::OpenTimeout{code}
 

My Puppet config
{code:java}
# cat /etc/puppetlabs/puppet/puppet.conf
[agent]
server=puppet0.test.com
report=true
stringify_facts=falseruninterval=1800
[master]
storeconfigs = true
storeconfigs_backend = puppetdb
vardir = /opt/puppetlabs/server/data/puppetserver
logdir = /var/log/puppetlabs/puppetserver
rundir = /var/run/puppetlabs/puppetserver
pidfile = /var/run/puppetlabs/puppetserver/puppetserver.pid
codedir = /etc/puppetlabs/code
ssldir=/etc/puppetlabs/puppet/sslmaster
reports=puppetdb
certname=puppet1.test.com
dns_alt_names=puppet1.test.com,master1.test.com
parser=future
autosign=/usr/local/bin/autosign.sh
ca_server=puppet1.test.com
[main]
rundir=/var/run/puppetlabs
hiera_config = /etc/puppetlabs/puppet/hiera.yaml
{code}
 

*Desired Behavior:*


`puppetserver ca list --all` should list certificates 

*Actual Behavior:*


 

`puppetserver ca list --all` raises on errors
{code:java}
Fatal error when running action 'list' Error: Failed connecting to https://puppet1.test.com:8140/puppet-ca/v1/certificate_statuses/any_key Root cause: SSL_connect returned=1 errno=0 state=error: sslv3 alert certificate unknown Fatal error when running action 'list' Error: Failed connecting to https://puppet1.test.com:8140/puppet-ca/v1/certificate_statuses/any_key Root cause: Net::OpenTimeout
{code}
puppetserver.log
{code:java}
2019-06-19T15:08:08.594+02:00 INFO [clojure-agent-send-off-pool-1] [o.e.j.u.s.SslContextFactory] x509=X509@1e21d885(private key,h=[master1.test.com, puppet1.test.com],w=[]) for InternalSslContextFactory@ 5352bca3[provider=null,keyStore=null,trustStore=null]
2019-06-19T15:08:08.689+02:00 ERROR [qtp1989839493-311] [p.r.core] Internal Server Error: java.lang.IllegalArgumentException: The CRL reader must contain at least one CRL at puppetlabs.ssl_utils.core$fn__21465$pem__GT_ca_crl__21470$fn__21471.invoke(core.clj:567) at puppetlabs.ssl_utils.core$fn__21465$pem__GT_ca_crl__21470.invoke(core.clj:563) at puppetlabs.puppetserver.certificate_authority$fn__36744$get_certificate_statuses__36749$fn__36753.invoke(certificate_authority.clj:1382) at puppetlabs.puppetserver.certificate_authority$fn__36744$get_certificate_statuses__36749.invoke(certificate_authority.clj:1379) at puppetlabs.services.ca.certificate_authority_core$certificate_statuses$fn__38275$fn__38278.invoke(certificate_authority_core.clj:306) at liberator.core$run_handler.invokeStatic(core.clj:176) at liberator.core$run_handler.invoke(core.clj:131) at liberator.core$handle_ok.invokeStatic(core.clj:224) at liberator.core$handle_ok.invoke(core.clj:224) at liberator.core$decide.invokeStatic(core.clj:87) at liberator.core$decide.invoke(core.clj:74) at liberator.core$multiple_representations_QMARK_.invokeStatic(core.clj:232) at liberator.core$multiple_representations_QMARK_.invoke(core.clj:232) at liberator.core$decide.invokeStatic(core.clj:87) at liberator.core$decide.invoke(core.clj:74) at liberator.core$put_to_existing_QMARK_.invokeStatic(core.clj:305) at liberator.core$put_to_existing_QMARK_.invoke(core.clj:305) at liberator.core$decide.invokeStatic(core.clj:87) at liberator.core$decide.invoke(core.clj:74) at liberator.core$post_to_existing_QMARK_.invokeStatic(core.clj:308) at liberator.core$post_to_existing_QMARK_.invoke(core.clj:308) at liberator.core$decide.invokeStatic(core.clj:87) at liberator.core$decide.invoke(core.clj:74) at liberator.core$method_patch_QMARK_.invokeStatic(core.clj:315) at liberator.core$method_patch_QMARK_.invoke(core.clj:315) at liberator.core$decide.invokeStatic(core.clj:87) at liberator.core$decide.invoke(core.clj:74) at liberator.core$method_delete_QMARK_.invokeStatic(core.clj:317) at liberator.core$method_delete_QMARK_.invoke(core.clj:317) at liberator.core$decide.invokeStatic(core.clj:87) at liberator.core$decide.invoke(core.clj:74) at liberator.core$if_modified_since_exists_QMARK_.invokeStatic(core.clj:337) at liberator.core$if_modified_since_exists_QMARK_.invoke(core.clj:337) at liberator.core$decide.invokeStatic(core.clj:87) at liberator.core$decide.invoke(core.clj:74) at liberator.core$if_none_match_exists_QMARK_.invokeStatic(core.clj:355) at liberator.core$if_none_match_exists_QMARK_.invoke(core.clj:355) at liberator.core$decide.invokeStatic(core.clj:87) at liberator.core$decide.invoke(core.clj:74) at liberator.core$if_unmodified_since_exists_QMARK_.invokeStatic(core.clj:375) at liberator.core$if_unmodified_since_exists_QMARK_.invoke(core.clj:375) at liberator.core$decide.invokeStatic(core.clj:87) at liberator.core$decide.invoke(core.clj:74) at liberator.core$if_match_exists_QMARK_.invokeStatic(core.clj:389) at liberator.core$if_match_exists_QMARK_.invoke(core.clj:389) at liberator.core$decide.invokeStatic(core.clj:87) at liberator.core$decide.invoke(core.clj:74) at liberator.core$exists_QMARK_.invokeStatic(core.clj:392) at liberator.core$exists_QMARK_.invoke(core.clj:392) at liberator.core$decide.invokeStatic(core.clj:87) at liberator.core$decide.invoke(core.clj:74) at liberator.core$processable_QMARK_.invokeStatic(core.clj:395) at liberator.core$processable_QMARK_.invoke(core.clj:395) at liberator.core$decide.invokeStatic(core.clj:87)
at liberator.core$decide.invoke(core.clj:74) at liberator.core$encoding_available_QMARK_.invokeStatic(core.clj:399) at liberator.core$encoding_available_QMARK_.invoke(core.clj:399) at liberator.core$decide.invokeStatic(core.clj:87) at liberator.core$decide.invoke(core.clj:74) at liberator.core$accept_encoding_exists_QMARK_.invokeStatic(core.clj:416) at liberator.core$accept_encoding_exists_QMARK_.invokeStatic(core.clj:416) [65/808] at liberator.core$accept_encoding_exists_QMARK_.invoke(core.clj:416) at liberator.core$decide.invokeStatic(core.clj:87) at liberator.core$decide.invoke(core.clj:74) at liberator.core$accept_charset_exists_QMARK_.invokeStatic(core.clj:429) at liberator.core$accept_charset_exists_QMARK_.invoke(core.clj:429) at liberator.core$decide.invokeStatic(core.clj:87) at liberator.core$decide.invoke(core.clj:74) at liberator.core$accept_language_exists_QMARK_.invokeStatic(core.clj:443) at liberator.core$accept_language_exists_QMARK_.invoke(core.clj:443) at liberator.core$decide.invokeStatic(core.clj:87) at liberator.core$decide.invoke(core.clj:74) at liberator.core$media_type_available_QMARK_.invokeStatic(core.clj:453) at liberator.core$media_type_available_QMARK_.invoke(core.clj:453) at liberator.core$decide.invokeStatic(core.clj:87) at liberator.core$decide.invoke(core.clj:74) at liberator.core$accept_exists_QMARK_.invokeStatic(core.clj:456) at liberator.core$accept_exists_QMARK_.invoke(core.clj:456) at liberator.core$decide.invokeStatic(core.clj:87) at liberator.core$decide.invoke(core.clj:74) at liberator.core$is_options_QMARK_.invokeStatic(core.clj:473) at liberator.core$is_options_QMARK_.invoke(core.clj:473) at liberator.core$decide.invokeStatic(core.clj:87) at liberator.core$decide.invoke(core.clj:74) at liberator.core$valid_entity_length_QMARK_.invokeStatic(core.clj:476) at liberator.core$valid_entity_length_QMARK_.invoke(core.clj:476) at liberator.core$decide.invokeStatic(core.clj:87) at liberator.core$decide.invoke(core.clj:74) at liberator.core$known_content_type_QMARK_.invokeStatic(core.clj:479) at liberator.core$known_content_type_QMARK_.invoke(core.clj:479) at liberator.core$decide.invokeStatic(core.clj:87) at liberator.core$decide.invoke(core.clj:74) at liberator.core$valid_content_header_QMARK_.invokeStatic(core.clj:481) at liberator.core$valid_content_header_QMARK_.invoke(core.clj:481) at liberator.core$decide.invokeStatic(core.clj:87) at liberator.core$decide.invoke(core.clj:74) at liberator.core$allowed_QMARK_.invokeStatic(core.clj:484) at liberator.core$allowed_QMARK_.invoke(core.clj:484) at liberator.core$decide.invokeStatic(core.clj:87) at liberator.core$decide.invoke(core.clj:74) at liberator.core$authorized_QMARK_.invokeStatic(core.clj:487) at liberator.core$authorized_QMARK_.invoke(core.clj:487) at liberator.core$decide.invokeStatic(core.clj:87) at liberator.core$decide.invoke(core.clj:74) at liberator.core$malformed_QMARK_.invokeStatic(core.clj:490) at liberator.core$malformed_QMARK_.invoke(core.clj:490) at liberator.core$decide.invokeStatic(core.clj:87) at liberator.core$decide.invoke(core.clj:74) at liberator.core$method_allowed_QMARK_.invokeStatic(core.clj:493) at liberator.core$method_allowed_QMARK_.invoke(core.clj:493) at liberator.core$decide.invokeStatic(core.clj:87) at liberator.core$decide.invoke(core.clj:74) at liberator.core$uri_too_long_QMARK_.invokeStatic(core.clj:496) at liberator.core$uri_too_long_QMARK_.invoke(core.clj:496) at liberator.core$decide.invokeStatic(core.clj:87) at liberator.core$decide.invoke(core.clj:74) at liberator.core$known_method_QMARK_.invokeStatic(core.clj:499) at liberator.core$known_method_QMARK_.invoke(core.clj:499) at liberator.core$decide.invokeStatic(core.clj:87) at liberator.core$decide.invoke(core.clj:74) at liberator.core$service_available_QMARK_.invokeStatic(core.clj:502)
at liberator.core$service_available_QMARK_.invoke(core.clj:502) at liberator.core$decide.invokeStatic(core.clj:87) at liberator.core$decide.invoke(core.clj:74) at liberator.core$initialize_context.invokeStatic(core.clj:504) at liberator.core$initialize_context.invoke(core.clj:504) at liberator.core$run_resource.invokeStatic(core.clj:595) at liberator.core$run_resource.invoke(core.clj:593) at puppetlabs.services.ca.certificate_authority_core$certificate_statuses$fn__38275.invoke(certificate_authority_core.clj:293) at compojure.response$fn__16841.invokeStatic(response.clj:33) at compojure.response$fn__16841.invoke(response.clj:21) at compojure.response$fn__16814$G__16809__16821.invoke(response.clj:6) at puppetlabs.services.ca.certificate_authority_core$fn__38287$web_routes__38292$fn__38293$fn__38296.invoke(certificate_authority_core.clj:316) at bidi.ring$fn__16628.invokeStatic(ring.cljc:25) at bidi.ring$fn__16628.invoke(ring.cljc:21) at bidi.ring$fn__16613$G__16608__16622.invoke(ring.cljc:16) at puppetlabs.comidi$make_handler$fn__18544.invoke(comidi.clj:245) at puppetlabs.trapperkeeper.authorization.ring_middleware$fn__25030$wrap_authorization_check__25035$fn__25036$fn__25037.invoke(ring_middleware.clj:290) at puppetlabs.ring_middleware.core$fn__22623$wrap_bad_request__22632$fn__22635$fn__22641.invoke(core.clj:170) at puppetlabs.puppetserver.ringutils$fn__34959$wrap_with_trapperkeeper_or_client_whitelist_authorization__34964$fn__34965$fn__34969.invoke(ringutils.clj:124) at puppetlabs.i18n.core$locale_negotiator$fn__124.invoke(core.clj:357) at puppetlabs.ring_middleware.core$fn__22721$wrap_uncaught_errors__22730$fn__22733$fn__22738.invoke(core.clj:216) at puppetlabs.puppetserver.ringutils$wrap_with_puppet_version_header$fn__34948.invoke(ringutils.clj:83) at puppetlabs.ring_middleware.core$fn__22371$wrap_response_logging__22376$fn__22377$fn__22378.invoke(core.clj:53) at puppetlabs.trapperkeeper.services.webserver.jetty9_core$ring_handler$fn__28207.invoke(jetty9_core.clj:434) at puppetlabs.trapperkeeper.services.webserver.jetty9_core.proxy$org.eclipse.jetty.server.handler.AbstractHandler$ff19274a.handle(Unknown Source) at sun.reflect.GeneratedMethodAccessor16.invoke(Unknown Source) at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) at java.lang.reflect.Method.invoke(Method.java:498) at clojure.lang.Reflector.invokeMatchingMethod(Reflector.java:167) at clojure.lang.Reflector.invokeInstanceMethod(Reflector.java:102) at puppetlabs.trapperkeeper.services.webserver.normalized_uri_helpers$fn__27785$normalize_uri_handler__27790$fn__27791$fn__27792.invoke(normalized_uri_helpers.clj:74) at puppetlabs.trapperkeeper.services.webserver.normalized_uri_helpers.proxy$org.eclipse.jetty.server.handler.HandlerWrapper$ff19274a.handle(Unknown Source) at org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper.java:132) at org.eclipse.jetty.server.handler.ScopedHandler.nextHandle(ScopedHandler.java:257) at org.eclipse.jetty.server.handler.ContextHandler.doHandle(ContextHandler.java:1317) at org.eclipse.jetty.server.handler.ScopedHandler.nextScope(ScopedHandler.java:205) at org.eclipse.jetty.server.handler.ContextHandler.doScope(ContextHandler.java:1219) at org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:144) at org.eclipse.jetty.server.handler.ContextHandlerCollection.handle(ContextHandlerCollection.java:219) at org.eclipse.jetty.server.handler.HandlerCollection.handle(HandlerCollection.java:126) at org.eclipse.jetty.server.handler.gzip.GzipHandler.handle(GzipHandler.java:724) at org.eclipse.jetty.server.handler.RequestLogHandler.handle(RequestLogHandler.java:56) at com.puppetlabs.trapperkeeper.services.webserver.jetty9.utils.MDCRequestLogHandler.handle(MDCRequestLogHandler.java:36) at org.eclipse.jetty.server.handler.StatisticsHandler.handle(StatisticsHandler.java:169) at org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper.java:132) at org.eclipse.jetty.server.Server.handle(Server.java:531) at org.eclipse.jetty.server.HttpChannel.handle(HttpChannel.java:352) at org.eclipse.jetty.server.HttpConnection.onFillable(HttpConnection.java:260) at org.eclipse.jetty.io.AbstractConnection$ReadCallback.succeeded(AbstractConnection.java:281) at org.eclipse.jetty.io.FillInterest.fillable(FillInterest.java:102) at org.eclipse.jetty.io.ssl.SslConnection.onFillable(SslConnection.java:291) at org.eclipse.jetty.io.ssl.SslConnection$3.succeeded(SslConnection.java:151) at org.eclipse.jetty.io.FillInterest.fillable(FillInterest.java:102) at org.eclipse.jetty.io.ChannelEndPoint$2.run(ChannelEndPoint.java:118) at org.eclipse.jetty.util.thread.strategy.EatWhatYouKill.runTask(EatWhatYouKill.java:333) at org.eclipse.jetty.util.thread.strategy.EatWhatYouKill.doProduce(EatWhatYouKill.java:310) at org.eclipse.jetty.util.thread.strategy.EatWhatYouKill.tryProduce(EatWhatYouKill.java:168) at org.eclipse.jetty.util.thread.strategy.EatWhatYouKill.run(EatWhatYouKill.java:126) at org.eclipse.jetty.util.thread.ReservedThreadExecutor$ReservedThread.run(ReservedThreadExecutor.java:366) at org.eclipse.jetty.util.thread.QueuedThreadPool.runJob(QueuedThreadPool.java:762) at org.eclipse.jetty.util.thread.QueuedThreadPool$2.run(QueuedThreadPool.java:680) at java.lang.Thread.run(Thread.java:748)
2019-06-19T15:08:10.847+02:00 WARN [qtp1989839493-291] [p.p.certificate-authority] No certificate request for someagent.test.net at expected path /etc/puppetlabs/puppet/sslmaster/ca/requests/someagent.test.net .pem
 
{code}
 

foo bar (JIRA)

unread,
Jun 19, 2019, 9:58:03 AM6/19/19
to puppe...@googlegroups.com
Reply all
Reply to author
Forward
0 new messages