I configure the puppet master and agent followed by this step. But when I run “puppet agent -t”, it report error:

[root@iZ25s7c99ynZ ~]# puppet agent --test
Info: Creating a new SSL key for iz25s7c99ynz
Info: Caching certificate for ca
Info: csr_attributes file loading from /etc/puppet/csr_attributes.yaml
Info: Creating a new SSL certificate request for iz25s7c99ynz
Info: Certificate Request fingerprint (SHA256): E0:17:BA:8F:0A:97:FC:90:84:75:96:75:CC:DB:B8:07:C8:48:AD:CA:26:5C:E5:5B:01:4B:9E:71:6A:52:C9:AE
Info: Caching certificate for iz25s7c99ynz
Info: Caching certificate_revocation_list for ca
Error: Could not request certificate: SSL_connect returned=1 errno=0 state=SSLv3 read server certificate B: certificate verify failed: [certificate revoked for /CN=puppet.builder1.com]

My OS version is “Centos 7” and puppet version is “3.7.5”. After I have tried the way as this page answered, the problem still exists. Therefore, I write down the final correct operations here for future reference:

#In master
rm -rf /var/lib/puppet/ssl/*
service httpd stop
## use Ctrl + c to break when you see "Notice: Starting Puppet master version..."
puppet master --no-daemonize --verbose
service httpd start
#In agent
rm -rf /var/lib/puppet/ssl/*
puppet agent -t

Related Posts