学习puppet 之SSL验证报错 SSL_connect returned=1 errno...

安装配置puppet 步骤参看 守住的  CentOS 5 yum快速安装puppet 

Jul  3 18:49:45 slave puppet-agent[3773]: Could not request certificate: getaddrinfo: Name or service not known

该错误是未添加--server master.*  添加pupetmaster主机名

Jul  3 18:27:10 slave puppet-agent[28640]: Could not retrieve catalog; skipping run
Jul  3 18:27:25 slave puppet-agent[28849]: Could not retrieve catalog from remote server: SSL_connect returned=1 errno=0 state=SSLv3 read server certificate B: certificate verify failed
Jul  3 18:27:25 slave puppet-agent[28849]: Not using cache on failed catalog
Jul  3 18:27:25 slave puppet-agent[28849]: Could not retrieve catalog; skipping run
在网上查了好多 都说是时间同步问题，同步了一下时间，重新运行puppetd -t --server=master.test.com 还是报错，又在网上查了很多资料，还是google group NB，见URL

https://groups.google.com/forum/#!msg/puppet-users/cHBgNmgOjM0/iw-rc5Zaew4J

When you cleaned the certs on the SERVER side, did you also clean the $ssldir on the CLIENT side and try to connect to the master again?  Doing a `puppet config print ssldir` will give you the path to your $ssldir.  I would:

1. Clean the cert on the master

2. Clean the ssldir on the client

3. Try running `puppet agent -t` on the client to generate a CSR on the master

4. Sign the cert on the master

5. Try running puppet again on the client.

按照他的步骤顺序做了一遍，弄了一天，终于搞定了。

转载于:https://my.oschina.net/davisqi/blog/142237