HomePhorge

maint: Suggest where to start troubleshooting SSL error message
1d4acb5afda6Unpublished

Unpublished Commit ยท Learn More

Repository Importing: This repository is still importing.

Description

maint: Suggest where to start troubleshooting SSL error message

Much like the infamous "hostname was not match" error message, there's
another SSL error that people run into that isn't clear how to
troubleshoot.

err: Could not send report: SSL_connect returned=1 errno=0
state=SSLv3 read server certificate B: certificate verify failed.

As far as I can tell this only ever happens when the clock is off on the
master or client. People seem to think it will happen other times, but
I haven't been able to reproduce it other ways - missing private key,
revoked cert, offline CA all have their own errors. I googled around
and the only thing I've seen for this error in relation to puppet is the
time sync problem.

So the error message text just has some additional info to suggest you
check your clocks.

Reviewed-by: Nick Lewis <nick@puppetlabs.com>

Details

Provenance
Matt Robinson <matt@puppetlabs.com>Authored on
vanmeeuwenPushed on Jun 2 2015, 2:22 PM
Parents
rPU8baa4897e777: Merge branch '2.6.x' into 2.7.x
Branches
Unknown
Tags
Unknown

Event Timeline

Matt Robinson <matt@puppetlabs.com> committed rPU1d4acb5afda6: maint: Suggest where to start troubleshooting SSL error message (authored by Matt Robinson <matt@puppetlabs.com>).Jul 26 2011, 9:57 PM