我现在正在签署Puppet-Agents 2天后一直在努力.问题如下:
在主人上我删除所有现有的签名
puppet cert clean esx-poc-1.xxx.de
在代理上我删除了整个ssl目录
rm -rf/var/lib/puppet/ssl /
在代理上运行以下命令之一后...
puppet证书生成esx-poc-1.xxx.de --ca-location远程木偶代理--server puppetmaster.int.xxx.com --waitforcert 60 --test
...我可以列出主人的证书:
木偶证书清单 - 所有
输出是:
"esx-poc-1.xxx.de"(SHA256)71:72:D8:3E:09:9E:B1:5C:DA:78:A8:B8:A1:2B:E4:09:B8:00: 8A:AF:49:02:CC:B2:B5:C3:25:79:59:0D:A8:F5 +"puppetmaster.int.xxx.com"(SHA256)7B:00:8C:4F:CE: B2:0D:2F:A1:BB:A7:C4:25:B0:11:01:2B:EC:90:46:D1:CB:BE:AA:AD:3F:B4:70:0C:83: 3F:78(alt名称:"DNS:puppet","DNS:puppet.xxx.de","DNS:puppetmaster.int.xxx.com")
签署代理后:
puppet cert sign esx-poc-1.xxx.de
指纹与上面的指纹不同:
- "esx-poc-1.xxx.de"(SHA256)49:F6:59:FD:3C:28:C6:54:7F:6E:A7:56:56:DB:64:9A:E2:08: 10:90:11:83:7A:A6:0E:E1:CD:39:F0:E0:1C:25
那是对的吗？
执行代理运行aferwards会导致以下错误:
Warning: Unable to fetch my node definition, but the agent run will continue: Warning: Error 400 on SERVER: Could not retrieve facts for esx-poc-1.xxx.de: Failed to submit 'replace facts' command for esx-poc-1.xxx.de to PuppetDB at puppetmaster.int.xxx.com:8081: SSL_connect returned=1 errno=0 state=SSLv3 read server …