Jira (PUP-10663) SSL cert agent cannot verify from host.

[Josh Cooper (Jira)]

Josh Cooper moved an issue

Puppet / PUP-10663 SSL cert agent cannot verify from host. Change By: Josh Cooper Key: PA PUP - 3399 10663 Project: Puppet Agent Add Comment

This message was sent by Atlassian Jira (v8.5.2#805002-sha1:a66f935)

[Josh Cooper (Jira)]

Josh Cooper commented on PUP-10663

Re: SSL cert agent cannot verify from host. By default, a new install of puppetserver 6 will create root and intermediate CA certificates, and issue the pupetserver certificate from the intermediate. See https://puppet.com/blog/certificate-improvements-puppet-6/ However, puppet 5 agents do not support CA chains leading to the above error. I suggest following up in #puppet in slack to see how others have handled this.

Add Comment

[Richard Woon (Jira)]

Richard Woon commented on PUP-10663

Re: SSL cert agent cannot verify from host.

Thanks Josh Cooper I believe Muhammad Amirrul Al Hafiz has solved it once he used puppet-agent v6 Now that it's solved, we also now know why it didn't work. Thanks again

Add Comment

[Muhammad Amirrul Al Hafiz (Jira)]

Muhammad Amirrul Al Hafiz commented on PUP-10663

Re: SSL cert agent cannot verify from host.

Hi Josh Cooper , Issue was fixed. After further investigation puppet-agent and puppet-master is not in the same range of versioning. I will close this ticket. Thank you.

Add Comment

[Muhammad Amirrul Al Hafiz (Jira)]

Muhammad Amirrul Al Hafiz assigned an issue to Muhammad Amirrul Al Hafiz

Puppet / PUP-10663

SSL cert agent cannot verify from host.

Change By: Muhammad Amirrul Al Hafiz Assignee: Muhammad Amirrul Al Hafiz

Add Comment