gistfile1.txt

Resolving settings from section 'agent' in environment 'production'
Resolving settings from section 'agent' in environment 'production'
Resolving settings from section 'agent' in environment 'production'
Resolving settings from section 'agent' in environment 'production'
Resolving settings from section 'agent' in environment 'production'
Warning: Downgrading to PSON for future requests
Error: Could not request certificate: The CSR retrieved from the master does not match the agent's public key.
CSR fingerprint: 4B:3A:9F:EA:63:3D:44:93:2F:D1:67:C6:72:FC:24:A6:48:BB:69:50:51:EB:D3:9C:60:78:EC:09:DE:D7:AD:B4
CSR public key: Public-Key: (4096 bit)
Modulus:
    00:ad:d2:92:bc:f1:4b:d2:a6:0c:d8:79:19:2c:ca:
    af:1f:ac:d9:20:7c:20:86:dc:ef:fa:e9:c5:75:03:
    58:dd:df:cc:58:f0:8d:8c:8a:c4:eb:25:d8:27:54:
    57:ba:9d:28:d8:e1:d3:1d:d2:52:11:9f:bf:ac:d7:
    c7:1e:52:18:2b:99:e2:cd:4d:22:3a:20:5d:37:7f:
    58:4a:5c:30:25:7a:45:1f:e4:e5:b6:89:8a:48:8b:
    a3:79:d2:d1:64:d6:65:f7:76:e5:02:cd:26:4f:e2:
    9d:fa:56:de:4d:d3:08:13:9e:c5:04:28:8c:ea:19:
    48:94:72:58:c3:b1:f8:c5:88:1f:59:2f:59:9a:d1:
    9a:70:46:af:eb:2b:92:9c:2e:0d:31:37:8b:d1:fd:
    5c:0a:55:bc:fe:35:2b:13:ab:5e:c3:e8:3d:a2:d8:
    eb:19:99:3e:20:ea:d0:6d:79:8c:4d:2a:37:59:64:
    ea:a3:f2:2d:46:07:8a:8e:ac:db:2c:59:ad:ed:85:
    a0:09:02:96:ed:80:59:af:7d:f1:73:aa:14:8e:69:
    60:cf:57:75:18:6f:b1:2f:7f:a8:3a:80:80:3c:d6:
    cb:84:22:ac:a1:96:ad:5d:ca:b1:0d:28:a3:66:e5:
    92:ac:d1:10:14:f9:31:4c:25:6a:0d:81:ec:6b:a8:
    63:76:84:78:fb:11:8f:8d:81:ef:04:00:01:ac:f9:
    fe:b0:b7:ae:02:b2:28:bc:4a:d2:d9:71:05:6a:72:
    c6:25:65:f6:5e:49:db:e4:88:21:8f:50:9f:37:23:
    45:f2:83:4c:9d:96:67:74:c2:95:63:ca:aa:bd:41:
    3a:0e:65:23:9d:3e:b5:ce:c7:1c:76:f5:98:05:83:
    8c:9b:86:68:20:ee:fe:c7:6a:45:93:59:98:66:36:
    29:ad:d2:b2:38:a2:5b:7d:11:37:eb:92:13:f3:be:
    6e:c8:5c:1a:2a:3d:79:a5:73:b6:24:e0:d4:e6:57:
    6b:b3:77:2a:87:28:69:26:07:49:11:bb:94:f8:00:
    52:39:82:03:31:40:68:81:13:8e:25:7d:f1:ac:e5:
    74:63:a0:7f:c0:cf:c7:82:6b:72:9a:8b:5c:0f:ce:
    ce:5b:1f:18:e8:46:26:50:85:35:11:72:7c:57:38:
    01:a8:f9:69:bd:03:ef:b8:e6:9e:ed:22:22:29:ba:
    92:27:78:8c:67:23:00:10:f1:5a:2f:62:73:92:95:
    c6:9b:29:78:ff:7c:d9:d8:82:f7:b6:9e:4f:02:0d:
    d8:c3:fc:98:db:6e:5a:e6:4d:38:71:9e:b5:8b:9f:
    fc:e5:63:06:db:1b:a2:50:6d:99:fa:22:71:94:fb:
    d4:c7:3f
Exponent: 65537 (0x10001)

Agent public key: Public-Key: (4096 bit)
Modulus:
    00:d0:f6:a9:c5:d3:5e:6b:be:ef:78:e4:de:8e:cf:
    bb:2f:42:ac:d4:a8:5b:57:f8:34:5a:bf:bf:9a:ea:
    db:52:26:3a:a2:01:79:ae:5c:20:5c:9f:f1:99:90:
    d8:50:1c:55:1f:35:91:d7:61:9d:99:6e:e8:6a:fa:
    85:4c:38:99:91:52:67:5a:dd:ac:49:93:7e:3a:dc:
    42:88:be:05:dd:04:df:d4:95:18:35:00:98:1d:04:
    f2:bd:39:38:5d:69:20:77:63:36:66:00:d5:ba:b6:
    6d:3a:45:e0:60:95:c6:07:b1:6b:1c:34:2e:85:7c:
    09:98:18:35:80:79:e5:84:95:c7:1c:a1:6f:51:03:
    8f:06:5f:45:c9:80:f3:f4:39:5d:01:f2:b0:06:84:
    91:70:bc:e4:ed:d5:eb:7b:94:e8:c8:6e:44:81:ce:
    2c:3d:d3:d2:32:d0:e2:07:f1:2b:f0:1d:25:3b:fa:
    b5:21:24:0f:9c:a5:f3:4f:be:5e:a4:af:6a:2d:3f:
    f4:b7:f4:73:fb:33:3a:ef:40:eb:8c:87:59:f6:f8:
    10:d7:92:75:ba:38:b6:3a:9f:d5:0c:c0:5b:0f:3d:
    76:01:c9:bd:ee:9b:05:e5:a3:05:26:0d:9e:12:48:
    dd:76:3f:59:b7:df:0f:81:25:b6:45:38:67:c1:9c:
    71:72:fb:c0:ae:52:99:29:5a:57:7b:93:e3:2a:b2:
    39:6a:1b:1f:1b:cd:5b:89:04:51:51:75:ec:e4:81:
    91:dd:f7:50:cb:dd:65:16:93:6e:8c:8c:86:12:ac:
    a4:5b:07:ca:23:29:ce:9e:8d:08:02:af:26:ec:50:
    ef:68:b3:c5:6b:ac:64:2a:99:15:49:9d:4e:b2:b3:
    76:ff:0a:ee:a0:90:ab:25:c4:5a:f2:79:60:45:39:
    f5:71:13:ef:c4:76:fc:b5:b1:f8:e6:f9:e6:f4:51:
    58:90:fa:76:e2:bb:79:62:61:b1:16:70:b9:77:15:
    e9:b2:aa:13:db:c8:69:1b:33:28:fc:40:56:aa:68:
    b7:bd:f5:9e:4d:24:7c:91:a2:27:ab:66:58:53:43:
    46:89:ae:d8:98:c9:db:1a:2f:c6:5c:07:37:35:6c:
    07:51:77:4f:57:de:6e:2d:76:70:3a:77:8a:d9:9c:
    a1:f7:aa:f2:08:81:b9:31:fb:00:ea:77:20:2a:34:
    b4:c2:7c:67:40:e5:0a:78:c2:e2:b8:40:05:df:5c:
    67:9f:78:27:bb:82:0c:44:04:b0:61:9a:e9:e4:91:
    02:ba:32:7b:c9:11:c5:d2:46:86:59:10:98:ae:ee:
    c3:06:fe:e6:d2:0a:17:29:36:eb:66:92:05:3c:d4:
    16:d9:3d
Exponent: 65537 (0x10001)

To fix this, remove the CSR from both the master and the agent and then start a puppet run, which will automatically regenerate a CSR.
On the master:
  puppet cert clean foo.bar.ch
On the agent:
  1a. On most platforms: find /etc/puppetlabs/puppet/ssl -name foo.bar.ch.pem -delete
  1b. On Windows: del "\etc\puppetlabs\puppet\ssl\certs\foo.bar.ch.pem" /f
  2. puppet agent -t

Error: Could not request certificate: The certificate retrieved from the master does not match the agent's private key. Did you forget to run as root?
Certificate fingerprint: 34:DE:4F:A6:A6:77:F2:90:19:51:A4:8E:18:5A:95:8A:80:8A:FC:85:46:A6:6A:73:79:7C:FA:B1:9B:7F:CE:30
To fix this, remove the certificate from both the master and the agent and then start a puppet run, which will automatically regenerate a certificate.
On the master:
  puppet cert clean foo.bar.ch
On the agent:
  1a. On most platforms: find /etc/puppetlabs/puppet/ssl -name foo.bar.ch.pem -delete
  1b. On Windows: del "\etc\puppetlabs\puppet\ssl\certs\foo.bar.ch.pem" /f
  2. puppet agent -t