SSL Certificate Verification Error During Fact Upload from Puppet to Foreman

Support
1

hi all,
when uploading facts from Puppet to Foreman, the following error occurs:

/etc/puppetlabs/puppet/node.rb myagent.local

During fact upload occurred an exception: SSL_connect returned=1 errno=0 peeraddr=10.10.10.10:443 state=error: certificate verify failed (unable to get local issuer certificate)Serving cached ENC: Could not send facts to Foreman: SSL_connect returned=1 errno=0 peeraddr=10.10.10.10:443 state=error: certificate verify failed (unable to get local issuer certificate)Unable to read from Cache file: No such file or directory @ rb_sysopen - /opt/puppetlabs/server/data/puppetserver/yaml/foreman/myagent.local.yaml

What I’ve checked so far:

  • Puppet and Foreman certificates appear valid.

  • The Puppetserver can resolve and reach the Foreman host.

  • CA certificate is present under /etc/puppetlabs/puppet/ssl/certs/ca.pem.

What could cause this SSL certificate verification error between Puppet and Foreman, and how can I properly re-establish trust or update the certificate chain?

Environment:

  • Foreman version: 3.16.0

  • foreman-proxy: 3.16.0-1

  • Puppetserver: 8.7.0

  • OS: Ubuntu 22.04 LTS

Thanks

2

solved, I had wrong ca in the /etc/puppetlabs/puppet/foreman.yaml, so after I change it back to right one it works.