Skip to content

Instantly share code, notes, and snippets.

@aespinosa
Created April 21, 2016 00:12
Show Gist options
  • Save aespinosa/62bf4801ac570ab76f47a644b793b194 to your computer and use it in GitHub Desktop.
Save aespinosa/62bf4801ac570ab76f47a644b793b194 to your computer and use it in GitHub Desktop.
disabling ssl_verify_mode
Recipe: chef-server::default
* ruby_block[ensure node can resolve API FQDN] action run (skipped due to not_if)
* chef_ingredient[chef-server] action install
Recipe: <Dynamically Defined Resource>
* chef_gem[mixlib-install] action install (up to date)
* ruby_block[stop chef run] action nothing (skipped due to action :nothing)
* apt_package[chef-server] action install (up to date)
(up to date)
Recipe: chef-server::default
* file[/tmp/kitchen/cache/chef-server-core.firstrun] action create (up to date)
* ingredient_config[chef-server] action render
* directory[/etc/opscode] action create (up to date)
* file[/etc/opscode/chef-server.rb] action create (up to date)
(up to date)
Recipe: wrapped_chef-server::default
* chef_user[someone] action create[2016-04-21T00:10:15+00:00] ERROR: SSL Validation failure connecting to host: localhost - SSL_connect returned=1 errno=0 state=error: certificate verify failed
================================================================================
Error executing action `create` on resource 'chef_user[someone]'
================================================================================
OpenSSL::SSL::SSLError
----------------------
SSL Error connecting to https://localhost/users/someone - SSL_connect returned=1 errno=0 state=error: certificate verify failed
Resource Declaration:
---------------------
# In /opt/chef/embedded/lib/ruby/gems/2.1.0/gems/chef-12.9.38/lib/chef/dsl/cheffish.rb
50: self.#{method_name}(*args, &block)
51: end
Compiled Resource:
------------------
# Declared in /opt/chef/embedded/lib/ruby/gems/2.1.0/gems/chef-12.9.38/lib/chef/dsl/cheffish.rb:50:in `chef_user'
chef_user("someone") do
action [:create]
retries 0
retry_delay 2
default_guard_interpreter :default
chef_server {:chef_server_url=>"https://localhost", :signing_key_filename=>"/etc/opscode/pivotal.pem", :client_name=>"pivotal", :options=>{:api_version=>"0"}}
declared_type :chef_user
cookbook_name "dockerhp_chef-server"
recipe_name "default"
source_key "-----BEGIN PUBLIC KEY-----\nxxxx\n-----END PUBLIC KEY-----\n"
end
Platform:
---------
x86_64-linux
Running handlers:
[2016-04-21T00:10:15+00:00] ERROR: Running exception handlers
Running handlers complete
[2016-04-21T00:10:15+00:00] ERROR: Exception handlers complete
Chef Client failed. 0 resources updated in 06 seconds
[2016-04-21T00:10:15+00:00] FATAL: Stacktrace dumped to /tmp/kitchen/cache/chef-stacktrace.out
[2016-04-21T00:10:15+00:00] FATAL: Please provide the contents of the stacktrace.out file if you file a bug report
[2016-04-21T00:10:15+00:00] ERROR: chef_user[someone] (dockerhp_chef-server::default line 50) had an error: OpenSSL::SSL::SSLError: SSL Error connecting to https://localhost/users/someone - SSL_connect returned=1 errno=0 state=error: certificate verify failed
[2016-04-21T00:10:17+00:00] FATAL: Chef::Exceptions::ChildConvergeError: Chef run process exited unsuccessfully (exit code 1)
>>>>>> Converge failed on instance <chefserver-debian-84>.
>>>>>> Please see .kitchen/logs/chefserver-debian-84.log for more details
>>>>>> ------Exception-------
>>>>>> Class: Kitchen::ActionFailed
>>>>>> Message: SSH exited (1) for command: [sh -c '
sudo -E /opt/chef/bin/chef-client --local-mode --config /tmp/kitchen/client.rb --log_level auto --force-formatter --no-color --json-attributes /tmp/kitchen/dna.json --chef-zero-port 8889
']
>>>>>> ----------------------
zlib(finalizer): the stream was freed prematurely.
include_recipe 'chef-server::default'
Chef::Config.ssl_verify_mode :verify_none
chef_user 'someone' do
chef_server chef_server_url: 'https://localhost',
signing_key_filename: '/etc/opscode/pivotal.pem',
client_name: 'pivotal'
source_key <<-eos
-----BEGIN PUBLIC KEY-----
xxxx
-----END PUBLIC KEY-----
eos
end
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment