伪主证书生成不起作用

Question

傀儡主人：

• 带有分号的码头集装箱-OS-6
• 在/etc/主机中配置
• 配置/etc/puppet.conf(服务器、dns_alt_names和certname )

傀儡代理：

• 带有ubuntu OS的码头集装箱
• 在/etc/主机中配置服务器和代理ip
• 配置具有服务器值的/etc/puppet.conf

现在尝试用

在服务器机器中生成证书

sudo -u puppet puppet master --no-daemonize --verbose

显示：Notice: Starting Puppet master version 3.8.7

与证书生成相关的任何事情都不会发生。

我相信在主机文件和其他配置中没有遗漏任何错误。这里可能出了问题。

在客户端机器中，如果我运行这个命令傀儡代理-t。我得到以下错误。因为证书不是在服务器中生成的。我想我得先解决这个问题。

Warning: Unable to fetch my node definition, but the agent run will continue:
Warning: Server hostname 'www.puppetmaster.com' did not match server certificate; expected one of puppetcertificate, DNS:puppet www.puppetmaster.com, DNS:puppetcertificate
Info: Retrieving pluginfacts
Error: /File[/var/lib/puppet/facts.d]: Failed to generate additional resources using 'eval_generate': Server hostname 'www.puppetmaster.com' did not match server certificate; expected one of puppetcertificate, DNS:puppet www.puppetmaster.com, DNS:puppetcertificate
Error: /File[/var/lib/puppet/facts.d]: Could not evaluate: Could not retrieve file metadata for puppet://www.puppetmaster.com/pluginfacts: Server hostname 'www.puppetmaster.com' did not match server certificate; expected one of puppetcertificate, DNS:puppet www.puppetmaster.com, DNS:puppetcertificate
Info: Retrieving plugin
Error: /File[/var/lib/puppet/lib]: Failed to generate additional resources using 'eval_generate': Server hostname 'www.puppetmaster.com' did not match server certificate; expected one of puppetcertificate, DNS:puppet www.puppetmaster.com, DNS:puppetcertificate
Error: /File[/var/lib/puppet/lib]: Could not evaluate: Could not retrieve file metadata for puppet://www.puppetmaster.com/plugins: Server hostname 'www.puppetmaster.com' did not match server certificate; expected one of puppetcertificate, DNS:puppet www.puppetmaster.com, DNS:puppetcertificate
Error: Could not retrieve catalog from remote server: Server hostname 'www.puppetmaster.com' did not match server certificate; expected one of puppetcertificate, DNS:puppet www.puppetmaster.com, DNS:puppetcertificate
Warning: Not using cache on failed catalog
Error: Could not retrieve catalog; skipping run
Error: Could not send report: Server hostname 'www.puppetmaster.com' did not match server certificate; expected one of puppetcertificate, DNS:puppet www.puppetmaster.com, DNS:puppetcertificate

Answer 1

首先，尝试在/etc/puppet.conf中设置dns_丙氨酸氨基转移酶_名字：

[main]
    dns_alt_names = www.puppetmaster.com
[master]
    autosign = true

然后看看您的傀儡代理-t运行是否正常。请确保您已经在/etc/puppet.conf中正确设置了傀儡客户端上的服务器：

[agent]
    server = www.puppetmaster.com