puppet-agent[21365]: Could not request certificate: execution expired
puppet-agent[21365]: Could not request certificate: execution expired
Not able register Puppet client to Puppet Server.
Troubleshooting & Solution :
Tried Generating certificate for testserver01 on Puppet server. No Success
[root@puppet01 ~]# puppet cert --generate testserver01
Error: testserver01 already has a requested certificate; ignoring certificate request
Tried Revoking certificate for testserver01 on Puppet server. No Success
[root@puppet01 ~]# puppet cert --revoke testserver01
Error: Could not find a serial number for testserver01
Checked certificate for testserver01 on Puppet server. No Success
[root@testserver01 puppet]# puppet config print certname
testserver01
tried cleaning certificate for testserver01 on Puppet server. No Success
[root@puppet01 ~]# puppet cert --clean testserver01
Error: Could not find a serial number for testserver01
[root@puppet01 ~]#
tried cleaning Node (testserver01) on Puppet server. Finally Succeeded
[root@puppet01 ~]# puppet node clean testserver01
Notice: Removing file Puppet::SSL::CertificateRequest testserver01 at '/var/lib/puppet/ssl/ca/requests/testserver01.pem'
Notice: Removing file Puppet::SSL::CertificateRequest testserver01 at '/var/lib/puppet/ssl/certificate_requests/testserver01.pem'
Notice: Removing file Puppet::SSL::Key testserver01 at '/var/lib/puppet/ssl/private_keys/testserver01.pem'
testserver01
[root@puppet01 ~]#
Remove the SSL directory at client Side.
Client:testserver01
rm -rf /var/lib/puppet/ssl
Generated Puppet certificate and register Puppet Client:
[root@testserver01 puppet]# puppet agent --server puppet01.ori --waitforcert 60 --test
Info: Creating a new SSL key for testserver01
Info: Caching certificate for ca
Info: csr_attributes file loading from /etc/puppet/csr_attributes.yaml
Info: Creating a new SSL certificate request for testserver01
Info: Certificate Request fingerprint (SHA256): < .....>
*********AT THIS POINT SIGN THE CERT IN SERVER******************
Info: Caching certificate for ca
Notice: Did not receive certificate
Info: Caching certificate for testserver01
Notice: Ignoring --listen on onetime run
Info: Caching certificate_revocation_list for ca
Info: Retrieving pluginfacts
Info: Retrieving plugin
Info: Caching catalog for testserver01
Info: Applying configuration version '1442380272'
Notice: Finished catalog run in 0.15 seconds
You have new mail in /var/spool/mail/root
[root@testserver01 puppet]#
Server ..puppet01
[root@puppet01 ~]# puppet cert --sign testserver01
Notice: Signed certificate request for testserver01
Notice: Removing file Puppet::SSL::CertificateRequest testserver01 at '/var/lib/puppet/ssl/ca/requests/testserver01.pem'
[root@puppet01 ~]#
No comments