When I run

openssl s_client -host puppet -port 8081 -CAfile 
/etc/puppet/ssl/certs/puppet.fqdn 

I get Verify return code: 21 (unable to verify the first certificate).

If I run the same command, but use port 8140 to connect to puppet, I get a 
return code of 19 (which is correct).

I believe that, if I fix this SSL problem then it would fix my main problem 
which is :

Report processor failed: Failed to submit 'store report' command for 
puppet1.allantgroup.com to PuppetDB at fqdn:8081: SSL_connect returned=1 
errno=0 state=SSLv3 read server certificate B: certificate verify failed: 
[certificate signature failure for /CN=fqdn]

I have puppetdb in the dns_alt_names line in puppet.conf 

Why does it work on 8140. but not  8081?  How can I fix this problem?

Thanks,

Andy

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To post to this group, send email to puppet-users@googlegroups.com.
Visit this group at http://groups.google.com/group/puppet-users?hl=en.
For more options, visit https://groups.google.com/groups/opt_out.


Reply via email to