unable to sign certificate for client

516 views
Skip to first unread message

jg

unread,
Jun 11, 2010, 3:18:40 PM6/11/10
to Puppet Users
(puppet 0.25.4)

I make the client request for a certificate:

$ puppetd -t --waitforcert 30

And expect the ca server to have the client's FQDN listed:

$ puppetca --list
[none listed]

There's also nothing under the certificate_requests directory:

$ ls /var/lib/puppet/ssl/certificate_requests/


I check where the ca server and puppetmaster looks for certs:

$ puppetca --configprint ssldir
/var/lib/puppet/ssl

$ puppetmasterd --configprint ssldir
/var/lib/puppet/ssl

Attempting to sign the cert for my puppet client anyway (will fail):

$ puppetca --sign chowchow.p3.sc.verticalresponse.com
chowchow.p3.sc.verticalresponse.com
err: Could not call sign: Could not find certificate request for
chowchow.p3.sc.verticalresponse.com

Any ideas why?

Charles Johnson

unread,
Jun 11, 2010, 5:09:35 PM6/11/10
to puppet...@googlegroups.com
On the client, what is the output if you do

puppetd --test --debug 

~Charles~


--
You received this message because you are subscribed to the Google Groups "Puppet Users" group.
To post to this group, send email to puppet...@googlegroups.com.
To unsubscribe from this group, send email to puppet-users...@googlegroups.com.
For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.


Reply all
Reply to author
Forward
0 new messages