Puppet 4.3.2客户端节点无法通过SSL连接到Puppet Server

Question

根据官方文档中的指南,我刚刚完成了所有Puppet认证的清洁再生.

但是,我遇到了这个错误,似乎在Google,SO和其他任何地方都没有好的线索.

[vagrant@client puppet]$ hostname
client.example.com

[vagrant@client puppet]$ puppet --version
4.3.2

[vagrant@client puppet]$ sudo puppet config print vardir ssldir
vardir = /var/opt/puppetlabs/puppetserver
ssldir = /var/opt/puppetlabs/puppetserver/ssl

[vagrant@client puppet]$ sudo puppet agent --test --server=puppet.example.com
Warning: Unable to fetch my node definition, but the agent run will continue:
Warning: SSL_connect SYSCALL returned=5 errno=0 state=unknown state
Info: Retrieving pluginfacts
Error: /File[/var/opt/puppetlabs/puppetserver/facts.d]: Failed to generate additional resources using 'eval_generate': Connection reset by peer - SSL_connect
Error: /File[/var/opt/puppetlabs/puppetserver/facts.d]: Could not evaluate: Could not retrieve file metadata for puppet:///pluginfacts: SSL_connect SYSCALL returned=5 errno=0 state=unknown state
Info: Retrieving plugin
Error: /File[/var/opt/puppetlabs/puppetserver/lib]: Failed to generate additional resources using 'eval_generate': SSL_connect SYSCALL returned=5 errno=0 state=unknown state
Error: /File[/var/opt/puppetlabs/puppetserver/lib]: Could not evaluate: Could not retrieve file metadata for puppet:///plugins: SSL_connect SYSCALL returned=5 errno=0 state=unknown state
Error: Could not retrieve catalog from remote server: SSL_connect SYSCALL returned=5 errno=0 state=unknown state
Warning: Not using cache on failed catalog
Error: Could not retrieve catalog; skipping run
Error: Could not send report: SSL_connect SYSCALL returned=5 errno=0 state=unknown state

这是一个类似的错误,但对于Ruby中的一般SSL,我不知道如何更改Puppet的密码(不要认为它已启用).

这篇文章似乎暗示它可能是Apache的错,但我不认为我正在使用Apache.

有任何想法吗？

Answer 1

我遇到了同样的问题。

使用以下命令检查代理上的 ssl 目录：

sudo puppet config print ssldir

您的 ssl 目录可能不在 /etc/puppetlabs/puppet/ssl 中，但可能位于 /opt/puppetlabs 下。从此目录中删除您的证书（或整个目录），然后执行另一次 Puppet 运行。