client certificate issue

[Karel]

Hi,

I have a problem with a certificate on some servers.

C:\Program Files\Puppet Labs\Puppet Enterprise\bin>puppet agent -t
Error: Could not request certificate: The certificate retrieved from the master does not match the agent's private key.
Certificate fingerprint: 93:85:FC:CF:32:19:43:33:75:43:B0:43:D3:60:4C:69
To fix this, remove the certificate from both the master and the agent and then start a puppet run, which will automatically regenerate a certficate.
On the master:
puppet cert clean ..........

I would need to know if it is possible to track this issue from Puppet Master side. Is this communication logged somewhere to log files on Puppet Master servers?
I need to know a list of clients that have the problem with the cert.

Thanks,
Karel

[Felix Frank]

Hi,

there really is no way for the master to tell directly.

The best approach is to enable storing of reports (e.g. in PuppetDB) so
that you can monitor agent operation. Afflicted agents do not run and do
not report. Tools like Puppet Explorer can indicate this to you very
directly.

HTH,
Felix