Issues with certificates in Foreman

Support
#1

After cleaning and re-signing the CA certificate in foreman, I now get the
following error with I test the agent:

root@linuxhub:/etc/puppetlabs/puppet# puppet agent --test


Warning: Unable to fetch my node definition, but the agent run will 
continue:
Warning: SSL_connect returned=1 errno=0 state=error: certificate verify 
failed: [certificate revoked for /CN=linuxhub.az.int]
Info: Retrieving pluginfacts
Error: /File[/opt/puppetlabs/puppet/cache/facts.d]: Failed to generate 
additional resources using 'eval_generate': SSL_connect returned=1 errno=0 
state=error: certificate verify failed: [certificate revoked for 
/CN=linuxhub.az.int]
Error: /File[/opt/puppetlabs/puppet/cache/facts.d]: Could not evaluate: 
Could not retrieve file metadata for puppet:///pluginfacts: SSL_connect 
returned=1 errno=0 state=error: certificate verify failed: [certificate 
revoked for /CN=linuxhub.az.int]
Info: Retrieving plugin
Error: /File[/opt/puppetlabs/puppet/cache/lib]: Failed to generate 
additional resources using 'eval_generate': SSL_connect returned=1 errno=0 
state=error: certificate verify failed: [certificate revoked for 
/CN=linuxhub.az.int]
Error: /File[/opt/puppetlabs/puppet/cache/lib]: Could not evaluate: Could 
not retrieve file metadata for puppet:///plugins: SSL_connect returned=1 
errno=0 state=error: certificate verify failed: [certificate revoked for 
/CN=linuxhub.az.int]
Info: Loading facts
Error: Could not retrieve catalog from remote server: SSL_connect 
returned=1 errno=0 state=error: certificate verify failed: [certificate 
revoked for /CN=linuxhub.az.int]
Warning: Not using cache on failed catalog
Error: Could not retrieve catalog; skipping run
Error: Could not send report: SSL_connect returned=1 errno=0 state=error: 
certificate verify failed: [certificate revoked for /CN=linuxhub.az.int]

Is there a site where I can read up on troubleshooting this problem?

Thank you in advance!

#2

This tells you the issue:

>> Warning: SSL_connect returned=1 errno=0 state=error: certificate verify
failed: [certificate revoked for /CN=linuxhub.az.int]

The certificate on the puppet master has been revoked. Run a puppet cert
clean on the master and remove /var/lib/puppet/ssl on your client and re
run. Assuming you have autosign on this will generate a new cert for you.

ยทยทยท On Wednesday, March 1, 2017 at 3:13:21 PM UTC-5, Jonathan D wrote: > > After cleaning and re-signing the CA certificate in foreman, I now get the > following error with I test the agent: > > root@linuxhub:/etc/puppetlabs/puppet# puppet agent --test > > > Warning: Unable to fetch my node definition, but the agent run will > continue: > Warning: SSL_connect returned=1 errno=0 state=error: certificate verify > failed: [certificate revoked for /CN=linuxhub.az.int] > Info: Retrieving pluginfacts > Error: /File[/opt/puppetlabs/puppet/cache/facts.d]: Failed to generate > additional resources using 'eval_generate': SSL_connect returned=1 errno=0 > state=error: certificate verify failed: [certificate revoked for /CN= > linuxhub.az.int] > Error: /File[/opt/puppetlabs/puppet/cache/facts.d]: Could not evaluate: > Could not retrieve file metadata for puppet:///pluginfacts: SSL_connect > returned=1 errno=0 state=error: certificate verify failed: [certificate > revoked for /CN=linuxhub.az.int] > Info: Retrieving plugin > Error: /File[/opt/puppetlabs/puppet/cache/lib]: Failed to generate > additional resources using 'eval_generate': SSL_connect returned=1 errno=0 > state=error: certificate verify failed: [certificate revoked for /CN= > linuxhub.az.int] > Error: /File[/opt/puppetlabs/puppet/cache/lib]: Could not evaluate: Could > not retrieve file metadata for puppet:///plugins: SSL_connect returned=1 > errno=0 state=error: certificate verify failed: [certificate revoked for > /CN=linuxhub.az.int] > Info: Loading facts > Error: Could not retrieve catalog from remote server: SSL_connect > returned=1 errno=0 state=error: certificate verify failed: [certificate > revoked for /CN=linuxhub.az.int] > Warning: Not using cache on failed catalog > Error: Could not retrieve catalog; skipping run > Error: Could not send report: SSL_connect returned=1 errno=0 state=error: > certificate verify failed: [certificate revoked for /CN=linuxhub.az.int] > > ******************************************** > > > Is there a site where I can read up on troubleshooting this problem? > > Thank you in advance! >