Porblem of add new foreman proxy with puppetserver and puppetca

Support
1

Hello,
I have already a running foreman server with multiple puppetservers and a separate foreman proxy with single puppetca.
I want add a new foreman proxy with puppetserver and puppetca to the existing system. After install new puppetserver and foreman-proxy. I can not add the new foreman-proxy to the existing system.
The error message is “OpenSSL::SSL::SSLError: SSL_accept returned=1 errno=0 state=error: tlsv1 alert unknown ca /usr/share/ruby/openssl/ssl.rb:280:in `accept’”

Any idea on how to do this.

Foreman version is 1.24
Puppetserver version is 6.13

Best Regards
Xiaofei

2

Is it possible that you are using puppet 5 agents attempting to connect to the puppet 6 server? If so, by default Puppet 6 creates an intermediate CA which is incompatible with puppet 5 agents.
For more details see https://puppet.com/docs/puppet/6.18/server/intermediate_ca.html and https://puppet.com/docs/puppetserver/5.3/intermediate_ca_configuration.html