Ask Your Question
0

SSL regeneration issue

asked 2015-08-27 08:14:14 -0500

uKrease gravatar image

Greetings Community,

I installed Puppet Enterprise yesterday, and it has taken me less than 24 hours to break a perfectly good working install. NOTE : this is my first experience with Puppet.

So, I deleted the SSL certificate on the Puppet Master server by accident, and followed the guide here to try fix it :

http://docs.puppetlabs.com/pe/latest/...regeneratecerts_monolithic.html

When I execute Step 6 of above article, "Step 6: Run Puppet on the Monolithic Server" I get the following error :

[root@puppet-dtup catalog]# puppet agent -t --trace Info: Retrieving pluginfacts Info: Retrieving plugin Info: Loading facts Error: Could not retrieve catalog from remote server: Error 400 on SERVER: Evaluation Error: Error while evaluating a Function Call, "puppet-dtup.mydomain-name.com" is not an Array. It looks to be a String at /opt/puppetlabs/puppet/modules/puppetenterprise/manifests/profile/certificateauthority.pp:16:3 on node puppet-dtup.mydomain-name.com /opt/puppetlabs/puppet/lib/ruby/vendorruby/puppet/indirector/rest.rb:207:in is_http_200?' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/indirector/rest.rb:105:infind' /opt/puppetlabs/puppet/lib/ruby/vendorruby/puppet/indirector/indirection.rb:194:in find' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/configurer.rb:295:inblock in retrievenewcatalog' /opt/puppetlabs/puppet/lib/ruby/vendorruby/puppet/util.rb:292:in block in thinmark' /opt/puppetlabs/puppet/lib/ruby/2.1.0/benchmark.rb:294:inrealtime' /opt/puppetlabs/puppet/lib/ruby/vendorruby/puppet/util.rb:291:in thinmark' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/configurer.rb:294:inretrievenewcatalog' /opt/puppetlabs/puppet/lib/ruby/vendorruby/puppet/configurer.rb:59:in retrieve_catalog' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/configurer.rb:104:inprepareandretrievecatalog' /opt/puppetlabs/puppet/lib/ruby/vendorruby/puppet/configurer.rb:202:in run_internal' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/configurer.rb:134:inblock in run' /opt/puppetlabs/puppet/lib/ruby/vendorruby/puppet/context.rb:64:in override' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet.rb:223:inoverride' /opt/puppetlabs/puppet/lib/ruby/vendorruby/puppet/configurer.rb:133:in run' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/agent.rb:48:inblock (4 levels) in run' /opt/puppetlabs/puppet/lib/ruby/vendorruby/puppet/agent/locker.rb:20:in lock' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/agent.rb:48:inblock (3 levels) in run' /opt/puppetlabs/puppet/lib/ruby/vendorruby/puppet/agent.rb:98:in with_client' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/agent.rb:45:inblock (2 levels) in run' /opt/puppetlabs/puppet/lib/ruby/vendorruby/puppet/agent.rb:65:in run_in_fork' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/agent.rb:44:inblock in run' /opt/puppetlabs/puppet/lib/ruby/vendorruby/puppet/application.rb:179:in call' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/application.rb:179:incontrolledrun' /opt/puppetlabs/puppet/lib/ruby/vendorruby/puppet/agent.rb:42:in run' /opt/puppetlabs/puppet/lib ... (more)

edit retag flag offensive close merge delete

1 Answer

Sort by ยป oldest newest most voted
1

answered 2015-08-27 14:55:05 -0500

GregLarkin gravatar image

Try checking what classes are assigned to the group "PE Certificate Authority" in the PE Console. If one of the classes is "puppetenterprise::profile::certificateauthority", please note and report back here if the class has an parameter assigned to it or not.

edit flag offensive delete link more

Comments

Hi GregLarkin, thank you for replying, The only class I can see is this one : Class: puppet_enterprise::profile::certificate_authority It only has 1 parameter assigned to it, as follows : Parameter name : client_whitelist Value : "puppet-dtup.mydomain-name.com"

uKrease gravatar imageuKrease ( 2015-08-28 06:23:59 -0500 )edit

Ok, I think that is the issue here. The module expects an array, but it's receiving a string. Please change the value to place square brackets around it, e.g. [ "puppet-dtup.mydomain-name.com" ] and commit the change. Then run the agent again and let me know if it works or not

GregLarkin gravatar imageGregLarkin ( 2015-08-28 11:23:38 -0500 )edit

Spot on! That fixed my issue. Thanks for assisting, very much appreciated

uKrease gravatar imageuKrease ( 2015-08-31 02:36:13 -0500 )edit

Glad to hear it!

GregLarkin gravatar imageGregLarkin ( 2015-08-31 16:51:00 -0500 )edit

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower

Stats

Asked: 2015-08-27 08:14:14 -0500

Seen: 125 times

Last updated: Aug 27 '15