Ask Your Question

Puppet Enterprise Inventory SSL Error

asked 2013-06-07 10:58:22 -0600

bmurts gravatar image

I've installed PE v2.7 via the tar.gz and installer script, everything is working fine. I'm attempting to view the inventory information for each node via the Dashboard, but are getting an SSL error and I'm not sure what to look for to find the root cause & fix it.

The error is: "Could not retrieve facts from inventory service: SSL_connect returned=1 errno=0 state=SSLv3 read server session ticket A: tlsv1 alert unknown ca"

The auth.conf is default from the 2.7 and I can query facts from nodes using:

curl -k -H "Accept ... (more)

edit retag flag offensive close merge delete


Can the puppet agent on the master successfully run? Did you regenerate certificates at all? Did your hostname/FQDN change after puppet installation? Sometimes this happens if you join to ...(more)

Ancillas gravatar imageAncillas ( 2013-06-08 01:43:02 -0600 )edit

I spoke to PL Support and they had be regenerate the pe-internal-dashboard. I'll be posting the steps below to help others

bmurts gravatar imagebmurts ( 2013-06-10 13:27:45 -0600 )edit

1 Answer

Sort by ยป oldest newest most voted

answered 2013-06-10 13:28:19 -0600

bmurts gravatar image

updated 2013-06-10 13:29:58 -0600

I spoke with Zach @ PL Support and he outlined the following steps which corrected the issue.

With pe-httpd running (do not stop it first):

cd /opt/puppet/share/puppet-dashboard
rm -rf ./certs/*
puppet cert clean pe-internal-dashboard
cd /opt/puppet/share/puppet-dashboard
RAILS_ENV=production /opt/puppet/bin/rake cert:create_key_pair
RAILS_ENV=production /opt/puppet/bin/rake cert:request
puppet cert sign pe-internal-dashboard
RAILS_ENV=production /opt/puppet/bin/rake cert:retrieve
chown puppet-dashboard:puppet-dashboard ./certs/*
Restart pe-httpd with /etc/init.d/pe-httpd restart
edit flag offensive delete link more

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower


Asked: 2013-06-07 10:58:22 -0600

Seen: 897 times

Last updated: Jun 10 '13