Page MenuHomePhabricator
Paste P5007

puppet master failing on wikifactmine
ActivePublic

Authored by Tarrow on Mar 1 2017, 1:20 PM.
Tags
None
Referenced Files
F5965539: puppet master failing on wikifactmine
Mar 1 2017, 1:20 PM
Subscribers
None
root@puppetmaster-06:~# puppet agent -tv
Warning: Setting templatedir is deprecated. See http://links.puppetlabs.com/env-settings-deprecations
(at /usr/lib/ruby/vendor_ruby/puppet/settings.rb:1139:in `issue_deprecation_warning')
Error: Could not request certificate: The certificate retrieved from the master does not match the agent's private key.
Certificate fingerprint: BB:2C:57:A4:3D:9B:06:AE:F0:A0:77:B5:34:CA:74:7E:A0:41:4F:0E:60:2C:17:22:98:08:EC:A1:5D:C8:33:93
To fix this, remove the certificate from both the master and the agent and then start a puppet run, which will automatically regenerate a certficate.
On the master:
puppet cert clean puppetmaster-06.wikifactmine.eqiad.wmflabs
On the agent:
1a. On most platforms: find /var/lib/puppet/ssl -name puppetmaster-06.wikifactmine.eqiad.wmflabs.pem -delete
1b. On Windows: del "/var/lib/puppet/ssl/puppetmaster-06.wikifactmine.eqiad.wmflabs.pem" /f
2. puppet agent -t
Exiting; failed to retrieve certificate and waitforcert is disabled