"Error: Could not request certificate: Error 500 on SERVER" after updating certificate

[shlo....@gmail.com]

Hi,

I need to renew the SSL certificate.

I overwrite the old certificate files with the new files and restart the httpd.

When I tried to run puppet from the agent I get:

   ...

   Error: Could not request certificate: Error 500 on SERVER

   ...

   Phusion Passenger

   Web application could not be started

   ...

The unix permission look the same as the old one.

I also remove the agent's certificate files from the agent and from the master.

If I put back the old certificate everything work okay.

Any to solve the problem?

Shlomit

[Lowe Schmidt]

What does your server logs say? And what Puppet version are you running?
--
Lowe Schmidt | +46 723 867 157

> --
> You received this message because you are subscribed to the Google Groups
> "Puppet Users" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to puppet-users...@googlegroups.com.
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/puppet-users/809f5d76-8f2f-4315-b3f6-c0453979c07b%40googlegroups.com.
> For more options, visit https://groups.google.com/d/optout.

[shlo....@gmail.com]

In the log:

Could not prepare for execution: The certificate retrieved from the master does not match the agent's private key.

Certificate fingerprint: XX:XX:XX:XX:XX:XX:XX:XX:XX:XX:XX:XX:XX:XX:XX:XX:XX:XX:...

To fix this, remove the certificate from both the master and the agent and then start a puppet run, which will automatically regenerate a certficate.

On the master:

   puppet cert clean puppet.wezmann.pem

On the agent:

   rm -f /var/lib/puppet/ssl/certs/puppet.wezmann.pem

   puppet agent -t

Which I did and no help + warning about deprecate things that  I believe not connected to the problem because it still working with the old certificate.

Puppet: 3.6.2

Thanks.

[Lowe Schmidt]

So you did remove the SSL certificate on the _agent_ as well?

--
Lowe Schmidt | +46 723 867 157

> https://groups.google.com/d/msgid/puppet-users/826a66f2-eca4-4043-80e6-44e4f37c8529%40googlegroups.com.

[shlo....@gmail.com]

Yes

[Lowe Schmidt]

And you requested a new one?

--
Lowe Schmidt | +46 723 867 157

> https://groups.google.com/d/msgid/puppet-users/9c6c5d0c-5d4f-447e-8424-567845d69f35%40googlegroups.com.