puppet的问题

nixiaoweihunter

Notice: Ignoring --listen on onetime run
Warning: Unable to fetch my node definition, but the agent run will continue:
Warning: SSL_connect returned=1 errno=0 state=SSLv3 read server certificate B: certificate verify failed: [certificate revoked for /CN=hunter1]
Info: Retrieving plugin
Error: /File[/var/lib/puppet/lib]: Failed to generate additional resources using 'eval_generate: SSL_connect returned=1 errno=0 state=SSLv3 read server certificate B: certificate verify failed: [certificate revoked for /CN=hunter1]
Error: /File[/var/lib/puppet/lib]: Could not evaluate: SSL_connect returned=1 errno=0 state=SSLv3 read server certificate B: certificate verify failed: [certificate revoked for /CN=hunter1] Could not retrieve file metadata for puppet://hunter1/plugins: SSL_connect returned=1 errno=0 state=SSLv3 read server certificate B: certificate verify failed: [certificate revoked for /CN=hunter1]
Error: Could not retrieve catalog from remote server: SSL_connect returned=1 errno=0 state=SSLv3 read server certificate B: certificate verify failed: [certificate revoked for /CN=hunter1]
Warning: Not using cache on failed catalog
Error: Could not retrieve catalog; skipping run
Error: Could not send report: SSL_connect returned=1 errno=0 state=SSLv3 read server certificate B: certificate verify failed: [certificate revoked for /CN=hunter1]


客户端连接的时候一直报这个错，而且客户端向服务端请求证书的时候，服务器端用puppet ca list命令显示的请求还是puppet服务器这台机器是怎么回事？


自己搞定了，谢谢。。。

rdcwayx

回复 1# nixiaoweihunter


    如果解决的话，也请告诉大家如何解决的。

qiaoyihang

今天也碰到这个错误，查了很久没找到。请问你是怎么解决的呀，还记得吗？  得.....

expert1

涉及到key不匹配的问题，一般把客户端的
rm -f /var/lib/puppet/ssl/* -r删掉

然后服务器rm -f /etc/puppet/ssl/ca/signed/这里对应的删掉，

然后重新puppetd --test --env XX执行重新生成就好了。

yscisco

今天遇到同样的问题了，弄了好长时间，最后发现是因为客户端时间不准导致的。希望对其他遇到该问题的人有帮助。