从现在开始签署 Puppet-Agents 的 2 天以来，我一直在苦苦挣扎。问题如下：
在主人我删除所有现有的签名
puppet cert clean esx-poc-1.xxx.de
在代理上，我删除了整个 ssl 目录
rm -rf /var/lib/puppet/ssl/
在代理上运行以下命令之一后...
puppet 证书生成 esx-poc-1.xxx.de --ca-location 远程 puppet 代理 --server puppetmaster.int.xxx.com --waitforcert 60 --test
...我可以列出主人的证书：
傀儡证书列表--全部
输出是：
"esx-poc-1.xxx.de" (SHA256) 71:72:D8:3E:09:9E:B1:5C:DA:78:A8:B8:A1:2B:E4:09:B8:00: 8A:AF:49:02:CC:B2:B5:C3:25:79:59:0D:A8:F5 + "puppetmaster.int.xxx.com" (SHA256) 7B:00:8C:4F:CE: B2:0D:2F:A1:BB:A7:C4:25:B0:11:01:2B:EC:90:46:D1:CB:BE:AA:AD:3F:B4:70:0C:83: 3F:78（替代名称：“DNS:puppet”、“DNS:puppet.xxx.de”、“DNS:puppetmaster.int.xxx.com”）
与代理签约后：
puppet 证书签名 esx-poc-1.xxx.de
指纹与上述不同：
- “esx-poc-1.xxx.de”（SHA256）49：F6：59：FD：3C：28：C6：54：7F：6E：A7：56：56：DB：64：9A：E2：08： 10:90:11:83:7A:A6:0E:E1:CD:39:F0:E0:1C:25
那是对的吗？
执行 agent-run aferwards 会导致以下错误：
Warning: Unable to fetch my node definition, but the agent run will continue: Warning: Error 400 on SERVER: Could not retrieve facts for esx-poc-1.xxx.de: Failed to submit 'replace facts' command for esx-poc-1.xxx.de to PuppetDB at puppetmaster.int.xxx.com:8081: SSL_connect returned=1 errno=0 state=SSLv3 read server certificate B: certificate verify failed: [certificate signature failure for /CN=puppetmaster.int.xxx.com] Info: Retrieving plugin Info: Loading facts in /var/lib/puppet/lib/facter/last_run.rb Info: Loading facts in /var/lib/puppet/lib/facter/pe_version.rb Info: Loading facts in /var/lib/puppet/lib/facter/puppi_projects.rb Info: Loading facts in /var/lib/puppet/lib/facter/root_home.rb Info: Loading facts in /var/lib/puppet/lib/facter/facter_dot_d.rb Info: Loading facts in /var/lib/puppet/lib/facter/iptables.rb Info: Loading facts in /var/lib/puppet/lib/facter/puppet_vardir.rb Error: Could not retrieve catalog from remote server: Error 400 on SERVER: Failed to submit 'replace facts' command for esx-poc-1.xxx.de to PuppetDB at puppetmaster.int.xxx.com:8081: SSL_connect returned=1 errno=0 state=SSLv3 read server certificate B: certificate verify failed: [certificate signature failure for /CN=puppetmaster.int.xxx.com] Warning: Not using cache on failed catalog Error: Could not retrieve catalog; skipping run
感谢您的帮助！