最近接触Puppet:
在一台全新的机器上运行puppet agent -t，得到一下信息：

➜  / puppet agent -t Info: Creating a new SSL key for docker.1476842591 Error: Could not request certificate: Neither PUB key nor PRIV key:: header too long Exiting; failed to retrieve certificate and waitforcert is disabled 

根据网上的做法，删除本地/var/lib/puppet/ssl文件夹无效。

agent端，puppet.conf配置如下：

[main] logdir=/var/log/puppet vardir=/var/lib/puppet ssldir=/var/lib/puppet/ssl rundir=/var/run/puppet factpath=$vardir/lib/facter environmentpath=/etc/puppet/environments  [master] # These are needed when the puppetmaster is run by passenger # and can safely be removed if webrick is used. ssl_client_header = SSL_CLIENT_S_DN ssl_client_verify_header = SSL_CLIENT_VERIFY  [agent] server=【master所在域名】 pluginsync = true