Re: [Puppet Users] PUPPET 6.0 : PuppetDB SSL Engine issue

2018-10-03 Thread Maggie Dreyer
If you regenerated your CA as part of fixing the issues with the master/agent connection, did you also regenerate the certificates for PuppetDB? Not having really any experience with PuppetDB, I could see thi error being cause by still using certificates issued by the old certificate authority. On

[Puppet Users] PUPPET 6.0 : PuppetDB SSL Engine issue

2018-10-03 Thread Andy Hall
Just fixed an issue with the puppetserver ca after a 5.x to 6.x upgrade (see post "PUPPET 6.0 : CSR from master does not match the agent public key" for more details) but now experience the following issue with PuppetDB (maybe a problem with the Java KeyStore ?): AGENT: # puppet agent --test

Re: [Puppet Users] PUPPET 6.0 : CSR from master does not match the agent public key

2018-10-03 Thread Andy Hall
Thanks Maggie these instructions were perfect. The cert didn't have the extension you refer to so i recreated the ca setup on the master and then tried again with good results this time : AGENT: # puppet agent --test --noop Info: Creating a new SSL key for andy-puppet6-test.london.company.com I

REGRESSION - Re: [Puppet Users] Announcement: Release of Puppet Platform 6.0.1

2018-10-03 Thread Peter Meier
Hi All, > We're happy to announce the release of Puppet Platform 6.0.1. This is > primarily a bug release, with some improvements to Puppet, some new > features in Puppet Server, and some new component versions in Puppet > Agent. Just a heads up to everybody: There is a pretty severe regression i