Cert generation messed up, fresh install

[John Gateley]

Puppet 4.3.0

Server Debian 7

Client Debian 8

I have verified the server is running and listening on port 8140

The client has the puppet service started, but there are no certs to verify on the server.

This is the error I am seeing:

root@puppetclient1:/opt/puppetlabs/puppet# puppet agent --test                                                                                 

Error: Could not request certificate: SSL_connect SYSCALL returned=5 errno=0 state=SSLv2/v3 read server hello A

Exiting; failed to retrieve certificate and waitforcert is disabled

I tried removing the client ssl directory, no change in behavior.

Any suggestions appreciated, I am very new to Puppet.

Thanks

John

[jcbollinger]

On Wednesday, November 25, 2015 at 4:45:57 PM UTC-6, John Gateley wrote:

Puppet 4.3.0

Server Debian 7

Client Debian 8

I have verified the server is running and listening on port 8140

The client has the puppet service started, but there are no certs to verify on the server.

This is the error I am seeing:

root@puppetclient1:/opt/puppetlabs/puppet# puppet agent --test                                                                                 

Error: Could not request certificate: SSL_connect SYSCALL returned=5 errno=0 state=SSLv2/v3 read server hello A

Exiting; failed to retrieve certificate and waitforcert is disabled

It sounds like the agent is unable to connect to the server to deliver a certificate-signing request.  This is most likely because a firewall on one side or both refuses to pass the traffic through.  In particular, the server listening on port 8140 in no way guarantees that machine's firewall will let any traffic through to that port.  Make sure port 8140/tcp is open for all inbound traffic from all machines that should be able to request catalogs.


John