代码之家  ›  专栏  ›  技术社区  ›  jayunit100

木偶:没有收到证书

  •  0
  • jayunit100  · 技术社区  · 6 年前

    我在更新版本(6)的puppet上有一个最低限度的默认puppet主/从配置,我正试图在virtualbox VMs中为一个原型初始化它。但是,代理似乎无法正确连接到主服务器。

    10.0.2.2 - - [14/Apr/2019:18:22:14 +0000] "GET /production/certificate/localhost? HTTP/1.1" 404 36 "-" "Ruby" 3
    10.0.2.2 - - [14/Apr/2019:18:22:14 +0000] "GET /production/certificate/ca?fail_on_404=true HTTP/1.1" 200 1939 "-" "Ruby" 3
    10.0.2.2 - - [14/Apr/2019:18:22:14 +0000] "GET /production/certificate/localhost? HTTP/1.1" 404 36 "-" "Ruby" 2
    10.0.2.2 - - [14/Apr/2019:18:22:14 +0000] "GET /production/certificate/localhost? HTTP/1.1" 404 36 "-" "Ruby" 3
    10.0.2.2 - - [14/Apr/2019:18:22:14 +0000] "GET /production/certificate/localhost? HTTP/1.1" 404 36 "-" "Ruby" 2
    

    在我的硕士学位上,我只有两个证书,所以很明显,申请通过了:

     "localhost" (SHA256) 1C:E7:D0:FF:35:A3:5B:CA:37:02:13:CC:75:20:B5:54:42:BA:AA:C9:61:9D:02:22:B3:28:E3:C3:4D:FE:5F:CC
      "slave1"    (SHA256) 35:A8:C5:E8:8A:1D:58:F6:DA:EC:8A:4D:9F:30:53:3E:F8:A1:01:27:F4:D7:62:5F:82:1C:E0:6B:37:82:A8:A2
    

    Nothing to do
    waiting to run puppet....
    Info: Creating a new SSL key for localhost
    Info: Caching certificate for ca
    Info: csr_attributes file loading from /etc/puppet/csr_attributes.yaml
    Info: Creating a new SSL certificate request for localhost
    Info: Certificate Request fingerprint (SHA256): 1C:E7:D0:FF:35:A3:5B:CA:37:02:13:CC:75:20:B5:54:42:BA:AA:C9:61:9D:02:22:B3:28:E3:C3:4D:FE:5F:CC
    Info: Caching certificate for ca
    
    Notice: Did not receive certificate
    Notice: Did not receive certificate
    

    如何确定为什么会发生这些404错误?

    0 回复  |  直到 6 年前
        1
  •  1
  •   Alpy    6 年前

    如前所述,你必须在证书上签字。。

    puppetserver ca sign --certname slave1
    

    木偶版<6

    puppet cert sign slave1
    
        2
  •  0
  •   jayunit100    6 年前

    原来我没有在我的请求上签字。

    puppet cert list 然后 puppet cert sign 忍受未完成的请求。此时,服务器将能够输出一个证书,然后代理可以下载并在本地使用该证书。