validation - 进行 Chef 客户端设置时出现 ssl 验证错误

Question

我是 Chef 的新手，在 Node1 上安装了 Chef 服务器 11，我已经在 Node2 上成功设置了工作站，当我获得用户列表时，我得到了所有用户列表

[root@Staging3 .chef]# knife user list
admin
root

但是当我发出 knife bootstrap 时，我遇到了以下错误。

[root@Staging3 .chef]# knife bootstrap 10.4.6.214 -x root -N slave1 --sudo
Doing old-style registration with the validation key at /opt/chef/chef-repo/.chef/chef-validator.pem...
Delete your validation key in order to use your user credentials instead

Connecting to X.X.X.X
root@X.X.X.X's password: 
X.X.X.X Starting first Chef Client run...
X.X.X.X Starting Chef Client, version 12.1.1
X.X.X.X Creating a new client identity for slave1 using the validator key.
X.X.X.X [2015-03-19T00:42:00+05:30] ERROR: SSL Validation failure connecting to host: staging4.akosha.com - SSL_connect returned=1 errno=0 state=SSLv3 read server certificate B: certificate verify failed
X.X.X.X 
X.X.X.X ================================================================================
X.X.X.X Chef encountered an error attempting to create the client "slave1"
X.X.X.X ================================================================================
X.X.X.X 
X.X.X.X [2015-03-19T00:42:00+05:30] FATAL: Stacktrace dumped to /var/chef/cache/chef-stacktrace.out
X.X.X.X Chef Client failed. 0 resources updated in 6.045009421 seconds
X.X.X.X [2015-03-19T00:42:00+05:30] ERROR: SSL_connect returned=1 errno=0 state=SSLv3 read server certificate B: certificate verify failed
X.X.X.X [2015-03-19T00:42:00+05:30] FATAL: Chef::Exceptions::ChildConvergeError: Chef run process exited unsuccessfully (exit code 1)

我已经阅读了所有关于客户端设置的博客，但还没有找到任何解决方案，在此方面任何帮助将不胜感激....

我以为我的 Chef 工作站可能有问题，但事实并非如此

[root@Staging3 chef-repo]# knife ssl check -s https://staging4.akosha.com
Connecting to host staging4.akosha.com:443
Successfully verified certificates from `staging4.akosha.com'

Answer 1

这里有一些信息你可以看看:

https://docs.chef.io/chef_client_security.html

对于 Chef 12，您需要运行命令:

knife ssl fetch

或者，您可以使用以下设置在 knife.rb 文件中关闭 ssl 验证:

ssl_verify_mode    :verify_none