Hi All,

I'm facing a very strange problem.

Because I had some mismatching with new agents I decided to remove all my 
cerst and start over. This all goes well, I can sign new agent-certs but 
after that when I run an agent test I get some strange error:

Error: /File[/var/lib/puppet/lib]: Failed to generate additional resources 
using 'eval_generate': SSL_connect returned=1 errno=0 state=SSLv3 read 
server certificate B: certificate verify failed: [self signed certificate 
in certificate chain for /CN=Puppet CA: fm-01.OLD.domain.local]
Error: /File[/var/lib/puppet/lib]: Could not evaluate: SSL_connect 
returned=1 errno=0 state=SSLv3 read server certificate B: certificate 
verify failed: [self signed certificate in certificate chain for /CN=Puppet 
CA: fm-01.OLD.domain.local] Could not retrieve file metadata for 
puppet://fm-01.domain.local/plugins: SSL_connect returned=1 errno=0 
state=SSLv3 read server certificate B: certificate verify failed: [self 
signed certificate in certificate chain for /CN=Puppet CA: 
fm-01.OLD.domain.local]

In the past I changed my Foreman installt from OLD.domain.local to 
domain.local as I don't needed a subdomain anymore. I changed all kinds of 
things that were needed in Foreman and Puppet and regenerated the certs. 
Everything seemed to go well, unless now.

I have grep -iR 'OLD.domain' . on all kinds of folders, /etc and 
/var/lib/puppet and I don't see any strange things, only old logs. Only in 
/usr/lib/jvm/ I see some java cert stuff where the name might be in, but 
that's just that.

What can I do to solve this as I'm really lost why and how this evening.

I hope someone can help out.

Thanks!

Matt


-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/puppet-users/6185c52d-a2b7-4654-85e7-f9165fd6d7b9%40googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.

Reply via email to