Ask Your Question

Error: Could not request certificate: execution expired

asked 2014-07-15 03:27:56 -0600

olauret gravatar image


I'm trying to register a new agent but I get this following error: "Error: Could not request certificate: execution expired".

I have check the time sync and it is fine. I have run "sudo puppet agent -t --debug --waitforcert=60" but no luck. I have checked that there is a TCP connection to the master as well from the agent.

Any idea on how to solve this issue?

edit retag flag offensive close merge delete

2 Answers

Sort by ยป oldest newest most voted

answered 2014-09-04 00:26:58 -0600

Ath gravatar image

I Guess you might have solved this by your own.

However, this worked for me

on the client,

In the File /etc/puppet/puppet.conf, set server=<puppet master="" here="">

On the server,

puppet cert clean <client name="">

On the client,

rm -rf /var/lib/puppet/ssl/*

puppet agent --test --waitforcert=60


edit flag offensive delete link more


I installed puppet on a new Windows 2008 R2 installation right after applying all Windows updates, but the client wasn't able to retrieve the certificate due to a similar error: "puppet error SSLV2/V3 ...could not request certificate hello A", so I tried these steps which worked perfectly. Thank you

Roy gravatar imageRoy ( 2015-08-31 13:00:10 -0600 )edit

answered 2017-03-22 16:45:24 -0600

Just wanted to add this in case someone ran across the same issue and couldn't find resolution in any of these threads.

My case turned out to be a subnet mask issue. We have a kickstart post script that configures the network cfg file. Somehow it was writing the incorrect prefix and ending up with a /8 network and since our puppet master was on a different network, packets were not getting back to the agent.

edit flag offensive delete link more

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower


Asked: 2014-07-15 03:27:56 -0600

Seen: 8,790 times

Last updated: Jul 15 '14