sslv3 alert certificate revoked on newly spawned servers

[Eziera Yvanne Gabriel]

Hello,

I always encounter this error when executing puppet agent -t --debug on our newly spawned servers. Tried everything (except for puppetmaster restart) that I saw on the Internet with no success.

But with old servers with signed certs (before this error occur), puppet agent runs are still successful.

[Rafael Tomelin]

Hi Dear,

Forword options:

1) update the OS;

2) date sync;

3) Key is exist in puppetserver;

4) generate new ssl - rm -rf /etc/puppetlabs/puppet/ssl

--
You received this message because you are subscribed to the Google Groups "Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to puppet-users...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-users/e51442a7-0f4b-4889-a850-db1bc745da1c%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

--

Atenciosamente,

Rafael Tomelin

skype: rafael.tomelin

E-mail: rafael....@gmail.com

RHCE - Red Hat Certified Engineer

Zabbix - ZABBIX Certified Specialist

LPI3 

ITIL v3

[Gabriel Schuyler]

Do these new machines have the same hostname as previously decommissioned hosts?  If so, you'll need to clear out the previous machine's certificate in order to get sign one that has the same name.

  https://docs.puppet.com/pe/latest/agent_cert_regen.html

It sounds like that might be what's going on.