I am moving from RHEL 6 to RHEL 7 puppet master. The new one is all set and
ready to go. DNS name is also updated to have the new master.
We have 300 + nodes to be migrated from old puppet master to the new master.
What is the easiest way to move the certificates from the old master to the
new master?
Please list the steps/commands in detail.
Error message :
#sudo puppet agent -t
Warning: Unable to fetch my node definition, but the agent run will
continue:
Warning: SSL_connect returned=1 errno=0 state=error: certificate verify
failed: [unable to get local issuer certificate for
/CN=newmaster.domain.com]
Info: Retrieving pluginfacts
Error: /File[/opt/puppetlabs/puppet/cache/facts.d]: Failed to generate
additional resources using 'eval_generate': SSL_connect returned=1 errno=0
state=error: certificate verify failed: [unable to get local issuer
certificate for /CN=newmaster.domain.com]
Error: /File[/opt/puppetlabs/puppet/cache/facts.d]: Could not evaluate:
Could not retrieve file metadata for puppet:///pluginfacts: SSL_connect
returned=1 errno=0 state=error: certificate verify failed: [unable to get
local issuer certificate for /CN=newmaster.domain.com]
Info: Retrieving plugin
Error: /File[/opt/puppetlabs/puppet/cache/lib]: Failed to generate
additional resources using 'eval_generate': SSL_connect returned=1 errno=0
state=error: certificate verify failed: [unable to get local issuer
certificate for /CN=newmaster.domain.com]
Error: /File[/opt/puppetlabs/puppet/cache/lib]: Could not evaluate: Could
not retrieve file metadata for puppet:///plugins: SSL_connect returned=1
errno=0 state=error: certificate verify failed: [unable to get local issuer
certificate for /CN=newmaster.domain.com]
Info: Loading facts
Error: Could not retrieve catalog from remote server: SSL_connect
returned=1 errno=0 state=error: certificate verify failed: [unable to get
local issuer certificate for /CN=newmaster.domain.com]
Warning: Not using cache on failed catalog
Error: Could not retrieve catalog; skipping run
Error: Could not send report: SSL_connect returned=1 errno=0 state=error:
certificate verify failed: [unable to get local issuer certificate for
/CN=newmaster.domain.com]
--
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to puppet-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/puppet-users/995d4ae1-e794-44c9-9bb7-df06816a34c8%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
