木偶4.3.2客戶端節點無法通過SSL連接到Puppet服務器

Question

我剛剛根據the guide in the official docs完成了我所有木偶認證的全新再生。

但是，我遇到了這個錯誤，看似沒有在Google，SO或其他任何地方的優秀潛在客戶。

[vagrant@client puppet]$ hostname 
client.example.com 

[vagrant@client puppet]$ puppet --version 
4.3.2 

[vagrant@client puppet]$ sudo puppet config print vardir ssldir 
vardir = /var/opt/puppetlabs/puppetserver 
ssldir = /var/opt/puppetlabs/puppetserver/ssl 

[vagrant@client puppet]$ sudo puppet agent --test --server=puppet.example.com 
Warning: Unable to fetch my node definition, but the agent run will continue: 
Warning: SSL_connect SYSCALL returned=5 errno=0 state=unknown state 
Info: Retrieving pluginfacts 
Error: /File[/var/opt/puppetlabs/puppetserver/facts.d]: Failed to generate additional resources using 'eval_generate': Connection reset by peer - SSL_connect 
Error: /File[/var/opt/puppetlabs/puppetserver/facts.d]: Could not evaluate: Could not retrieve file metadata for puppet:///pluginfacts: SSL_connect SYSCALL returned=5 errno=0 state=unknown state 
Info: Retrieving plugin 
Error: /File[/var/opt/puppetlabs/puppetserver/lib]: Failed to generate additional resources using 'eval_generate': SSL_connect SYSCALL returned=5 errno=0 state=unknown state 
Error: /File[/var/opt/puppetlabs/puppetserver/lib]: Could not evaluate: Could not retrieve file metadata for puppet:///plugins: SSL_connect SYSCALL returned=5 errno=0 state=unknown state 
Error: Could not retrieve catalog from remote server: SSL_connect SYSCALL returned=5 errno=0 state=unknown state 
Warning: Not using cache on failed catalog 
Error: Could not retrieve catalog; skipping run 
Error: Could not send report: SSL_connect SYSCALL returned=5 errno=0 state=unknown state 

這is a similar error，但對於一般的Ruby SSL，我不知道如何更改木偶密碼（不認爲它已啓用）。

This post seems to suggest it may be Apache's fault，但我不認爲我在使用Apache。

任何想法？

Answer 1

我遇到了同樣的問題。

檢查SSL目錄上的代理使用以下命令：

sudo puppet config print ssldir 

你的SSL目錄可能不是在/ etc/puppetlabs /傀儡/ SSL，但可能在/ opt/puppetlabs。從該目錄中刪除您的證書（或整個目錄），然後執行另一個木偶運行。