Home / server / Questions / 437642
Accepted
Onitlikesonic
Asked: 2012-10-13 00:10:21 +0800 CST

Could not evaluate: certificate verify failed while using ssl proxy

  • 772

One of our machines was recently put behind an SSL proxy and since then I can't connect to puppet with "Could not evaluate: certificate verify failed."

I have checked that the dates match, regenerated the certificates but to no avail.

Debugging the verification with "openssl s_client -showcerts -connect puppetmaster:puppetmasterport" shows "Verify return code: 0 (ok)"

Initially the Proxy SSL Certificate was not recognized with a "Verify return code: 20 (unable to get local issuer certificate)" problem which was then fixed with the answer in the question: Adding root certificate to CentOS 5

centos5

1 Answers

  1. Best Answer

    This seems to have solved my problem:

    you need to add the top level ca pub key to it to /var/lib/puppet/ssl/certs/ca.pem

    Reference: https://groups.google.com/forum/?fromgroups=#!topic/puppet-users/VVGkYArpYfI

    • 1