Ubuntu
puppet package

tlsv1 alert decrypt error

Bug #722594 reported by TomDV
10
This bug affects 2 people
Affects Status Importance Assigned to Milestone
puppet (Ubuntu)
Confirmed
Low
Unassigned

Bug Description

Binary package hint: puppet

There is a bug in the default apache puppetmaster vhost that's included in the puppetmaster-passenger package.

# puppetd --server puppet.fqdn --waitforcert 60 --no-usecacheonfailure
err: Could not retrieve catalog from remote server: SSL_connect returned=1 errno=0 state=SSLv3 read server session ticket A: tlsv1 alert decrypt error
warning: Not using cache on failed catalog
err: Could not retrieve catalog; skipping run
#

This is easily fixed but it should be changed in the package too:

# mkdir /var/lib/puppet/ssl/ca/crl
# chown -R puppet:puppet /var/lib/puppet/ssl/ca/crl
# grep -i SSLCARevocation /etc/apache2/sites-enabled/puppetmaster
        # default: SSLCARevocationFile /var/lib/puppet/ssl/ca/ca_crl.pem
        SSLCARevocationPath /var/lib/puppet/ssl/ca/crl

See original description
TomDV (penumbra)
description: updated
Revision history for this message
Chuck Short (zulcss) wrote :

Which version is this with?

Changed in puppet (Ubuntu):
importance: Undecided → Low
status: New → Incomplete
Revision history for this message
TomDV (penumbra) wrote :

The current version in the PPA.

Revision history for this message
TomDV (penumbra) wrote :

Correction:
It's the current version in the Maverick repository.

TomDV (penumbra)
Changed in puppet (Ubuntu):
status: Incomplete → New
Chuck Short (zulcss)
Changed in puppet (Ubuntu):
status: New → Confirmed
Revision history for this message
TomDV (penumbra) wrote :

Why is this bug still open?
The solution has been included in the report.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.