I would like to use the puppet-dashboard as an ENC. I am running the dashboard with SSL and passenger. I have edited the /usr/share/puppet-dashboard/bin/external_node script with the correct dashboard URL. I have editing the config in puppet.conf to use the external_node etc.. however when using SSL, I am getting the following errors when running /usr/bin/env PUPPET_DASHBOARD_URL=https://puppet /usr/share/puppet-dashboard/bin/external_node puppet-node-1.example.com :
/usr/lib/ruby/1.8/net/http.rb:586:in `connect': SSL_connect returned=1 errno=0 state=SSLv3 read server certificate B: certificate verify failed (OpenSSL::SSL::SSLError) When I update the external_node script's SSL directives, and use the certs that were generated by the rake tool (dashboard.cert.pem etc), I can run the following command on the puppet master / ca server and puppet-dashboard. /usr/bin/env PUPPET_DASHBOARD_URL=https://puppet /usr/share/puppet-dashboard/bin/external_node puppet But if I use a different node, I get the SSL error. It appears to me that if I use the certs generated by the rake tool, only the puppet master a/ca server and the puppet dashboard work. All other nodes in the environment return an SSL error, maybe because they are unaware of the certs generated by the rake tool. What certs should I be using in the following external_node section? CA_PATH = CERT_PATH = PKEY_PATH = -Oli -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-users+unsubscr...@googlegroups.com. To post to this group, send email to puppet-users@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-users?hl=en. For more options, visit https://groups.google.com/groups/opt_out.
