Search code examples
ssl-certificatepuppetntp

Puppet agent couldn't request certificate: Header too long

Previously, I had the agent working properly, but after a recent power outage, I keep getting this issue.

I run puppet agent -t and get this error:

Error: Could not request certificate: Neither PUB key nor PRIV key: header too long

I've googled the issue, and it sounded like a clock issue (also suspected due to power outage). The time was off by 4 hours, but BIOS time seemed correct when I checked it. ntpdate didn't seem to work, so I synchronized them manually. Additionally, I've looked at the public and private keys after someone mentioned stray characters in their post, but haven't found anything of the sort.

Both master and agent are running Ubuntu, 15.04.

Solution

  • Fixed with help from Puppet IRC

    rm -rf $ssldir ON THE AGENT; puppet cert clean $certname on the master then puppet agent -t on the agent and get new certs

    Due to corruption from power loss.