Chef.io certificate error causing client install error


#1

Connecting to 10.161.66.83
10.161.66.83 Installing Chef Client…
10.161.66.83 --2015-03-20 20:15:34-- https://www.chef.io/chef/install.sh
10.161.66.83 Resolving www.chef.io… 199.27.79.65
10.161.66.83 Connecting to www.chef.io|199.27.79.65|:443… connected.
10.161.66.83 ERROR: certificate common name “g.ssl.fastly.net” doesn’t match requested host name “www.chef.io”.
10.161.66.83 To connect to www.chef.io insecurely, use ‘–no-check-certificate’.
10.161.66.83 Starting first Chef Client run…
10.161.66.83 bash: line 96: chef-client: command not found?

Errrr… ummm…


Justin Franks
Lead Operations Engineer
SaaS, Cloud, Data Centers & Infrastructure
Lithium Technologies, Inc
225 Bush St., 15th Floor
San Francisco, CA 94104
tel: +1 415 757 3100 x3219


#2

Hey Justin,

Sorry you are having issues with this. While we work on a fix for this the workaround is to call --bootstrap-url https://www.opscode.com/chef/install.sh https://www.opscode.com/chef/install.sh with your knife bootstrap command.

Please let me know if you have any questions.

— cwebber

On Mar 20, 2015, at 13:30, Justin Franks justin.franks@lithium.com wrote:

Connecting to 10.161.66.83
10.161.66.83 Installing Chef Client…
10.161.66.83 --2015-03-20 20:15:34-- https://www.chef.io/chef/install.sh https://www.chef.io/chef/install.sh
10.161.66.83 Resolving www.chef.io http://www.chef.io/… 199.27.79.65
10.161.66.83 Connecting to www.chef.io http://www.chef.io/|199.27.79.65|:443… connected.
10.161.66.83 ERROR: certificate common name “g.ssl.fastly.net http://g.ssl.fastly.net/” doesn’t match requested host name “www.chef.io http://www.chef.io/”.
10.161.66.83 To connect to www.chef.io http://www.chef.io/ insecurely, use ‘–no-check-certificate’.
10.161.66.83 Starting first Chef Client run…
10.161.66.83 bash: line 96: chef-client: command not found​
Errrr… ummm…


Justin Franks
Lead Operations Engineer
SaaS, Cloud, Data Centers & Infrastructure
Lithium Technologies, Inc
225 Bush St., 15th Floor
San Francisco, CA 94104
tel: +1 415 757 3100 x3219


#3

?I would like to tell our chef servers to pull the client from out repo and not from a public place. What do I edit on the server?


Justin Franks
Lead Operations Engineer
SaaS, Cloud, Data Centers & Infrastructure
Lithium Technologies, Inc
225 Bush St., 15th Floor
San Francisco, CA 94104
tel: +1 415 757 3100 x3219


From: Christopher Webber cwebber@chef.io
Sent: Friday, March 20, 2015 1:33 PM
To: chef@lists.opscode.com
Subject: [chef] Re: Chef.io certificate error causing client install error

Hey Justin,

Sorry you are having issues with this. While we work on a fix for this the workaround is to call --bootstrap-url https://www.opscode.com/chef/install.sh with your knife bootstrap command.

Please let me know if you have any questions.

  • cwebber

On Mar 20, 2015, at 13:30, Justin Franks <justin.franks@lithium.commailto:justin.franks@lithium.com> wrote:

Connecting to 10.161.66.83
10.161.66.83 Installing Chef Client…
10.161.66.83 --2015-03-20 20:15:34-- https://www.chef.io/chef/install.sh
10.161.66.83 Resolving www.chef.iohttp://www.chef.io/… 199.27.79.65
10.161.66.83 Connecting to www.chef.iohttp://www.chef.io/|199.27.79.65|:443… connected.
10.161.66.83 ERROR: certificate common name “g.ssl.fastly.nethttp://g.ssl.fastly.net/” doesn’t match requested host name “www.chef.iohttp://www.chef.io/”.
10.161.66.83 To connect to www.chef.iohttp://www.chef.io/ insecurely, use ‘–no-check-certificate’.
10.161.66.83 Starting first Chef Client run…
10.161.66.83 bash: line 96: chef-client: command not found?
Errrr… ummm…


Justin Franks
Lead Operations Engineer
SaaS, Cloud, Data Centers & Infrastructure
Lithium Technologies, Inc
225 Bush St., 15th Floor
San Francisco, CA 94104
tel: +1 415 757 3100 x3219


#4

You can get the packages from here:
https://packagecloud.io/chef/stable then add to a local repository
with createrepo or reprepro, aptly, type stuff.

You can even add the packagecloud repos to your system with the
packagecloud_repo lwrp.

cheers,

–aj

On Sat, Mar 21, 2015 at 9:43 AM, Justin Franks
justin.franks@lithium.com wrote:

I would like to tell our chef servers to pull the client from out repo and
not from a public place. What do I edit on the server?


Justin Franks
Lead Operations Engineer
SaaS, Cloud, Data Centers & Infrastructure
Lithium Technologies, Inc
225 Bush St., 15th Floor
San Francisco, CA 94104
tel: +1 415 757 3100 x3219


From: Christopher Webber cwebber@chef.io
Sent: Friday, March 20, 2015 1:33 PM
To: chef@lists.opscode.com
Subject: [chef] Re: Chef.io certificate error causing client install error

Hey Justin,

Sorry you are having issues with this. While we work on a fix for this the
workaround is to call --bootstrap-url
https://www.opscode.com/chef/install.sh with your knife bootstrap command.

Please let me know if you have any questions.

— cwebber

On Mar 20, 2015, at 13:30, Justin Franks justin.franks@lithium.com wrote:

Connecting to 10.161.66.83
10.161.66.83 Installing Chef Client…
10.161.66.83 --2015-03-20 20:15:34-- https://www.chef.io/chef/install.sh
10.161.66.83 Resolving www.chef.io… 199.27.79.65
10.161.66.83 Connecting to www.chef.io|199.27.79.65|:443… connected.
10.161.66.83 ERROR: certificate common name “g.ssl.fastly.net” doesn’t match
requested host name “www.chef.io”.
10.161.66.83 To connect to www.chef.io insecurely, use
‘–no-check-certificate’.
10.161.66.83 Starting first Chef Client run…
10.161.66.83 bash: line 96: chef-client: command not found
Errrr… ummm…


Justin Franks
Lead Operations Engineer
SaaS, Cloud, Data Centers & Infrastructure
Lithium Technologies, Inc
225 Bush St., 15th Floor
San Francisco, CA 94104
tel: +1 415 757 3100 x3219


#5

–bootstrap-install-command on the CLI or
knife[:bootstrap_install_command] in knife.rb can be used to bypass
install.sh entirely and you can dpkg install or rpm install straight
from a URL.

On 3/20/15 1:43 PM, Justin Franks wrote:

​I would like to tell our chef servers to pull the client from out
repo and not from a public place. What do I edit on the server?


Justin Franks
Lead Operations Engineer
SaaS, Cloud, Data Centers & Infrastructure
Lithium Technologies, Inc
225 Bush St., 15th Floor
San Francisco, CA 94104
tel: +1 415 757 3100 x3219

From: Christopher Webber cwebber@chef.io
Sent: Friday, March 20, 2015 1:33 PM
To: chef@lists.opscode.com
Subject: [chef] Re: Chef.io certificate error causing client install
error
Hey Justin,

Sorry you are having issues with this. While we work on a fix for this
the workaround is to call --bootstrap-url
https://www.opscode.com/chef/install.sh with your knife bootstrap command.

Please let me know if you have any questions.

— cwebber

On Mar 20, 2015, at 13:30, Justin Franks <justin.franks@lithium.com
mailto:justin.franks@lithium.com> wrote:

Connecting to 10.161.66.83
10.161.66.83 Installing Chef Client…
10.161.66.83 --2015-03-20 20:15:34-- https://www.chef.io/chef/install.sh
10.161.66.83 Resolvingwww.chef.io http://www.chef.io/… 199.27.79.65
10.161.66.83 Connecting towww.chef.io
http://www.chef.io/|199.27.79.65|:443… connected.
10.161.66.83 ERROR: certificate common name “g.ssl.fastly.net
http://g.ssl.fastly.net/” doesn’t match requested host name
www.chef.io http://www.chef.io/”.
10.161.66.83 To connect towww.chef.io
http://www.chef.io/insecurely, use ‘–no-check-certificate’.
10.161.66.83 Starting first Chef Client run…
10.161.66.83 bash: line 96: chef-client: command not found​
Errrr… ummm…


Justin Franks
Lead Operations Engineer
SaaS, Cloud, Data Centers & Infrastructure
Lithium Technologies, Inc
225 Bush St., 15th Floor
San Francisco, CA 94104
tel: +1 415 757 3100 x3219


#6

https://docs.chef.io/config_rb_knife.html

Where is this documented? That option is not in the list above.

Chris

From: Lamont Granquist [mailto:lamont@chef.io]
Sent: Friday, March 20, 2015 5:11 PM
To: chef@lists.opscode.com
Cc: Justin Franks
Subject: [chef] Re: Re: Re: Chef.io certificate error causing client install error

–bootstrap-install-command on the CLI or knife[:bootstrap_install_command] in knife.rb can be used to bypass install.sh entirely and you can dpkg install or rpm install straight from a URL.

On 3/20/15 1:43 PM, Justin Franks wrote:

​I would like to tell our chef servers to pull the client from out repo and not from a public place. What do I edit on the server?


Justin Franks
Lead Operations Engineer
SaaS, Cloud, Data Centers & Infrastructure
Lithium Technologies, Inc
225 Bush St., 15th Floor
San Francisco, CA 94104
tel: +1 415 757 3100 x3219


From: Christopher Webber cwebber@chef.iomailto:cwebber@chef.io
Sent: Friday, March 20, 2015 1:33 PM
To: chef@lists.opscode.commailto:chef@lists.opscode.com
Subject: [chef] Re: Chef.io certificate error causing client install error

Hey Justin,

Sorry you are having issues with this. While we work on a fix for this the workaround is to call --bootstrap-url https://www.opscode.com/chef/install.sh with your knife bootstrap command.

Please let me know if you have any questions.

— cwebber

On Mar 20, 2015, at 13:30, Justin Franks <justin.franks@lithium.commailto:justin.franks@lithium.com> wrote:

Connecting to 10.161.66.83
10.161.66.83 Installing Chef Client…
10.161.66.83 --2015-03-20 20:15:34-- https://www.chef.io/chef/install.sh
10.161.66.83 Resolving www.chef.iohttp://www.chef.io/… 199.27.79.65
10.161.66.83 Connecting to www.chef.iohttp://www.chef.io/|199.27.79.65|:443… connected.
10.161.66.83 ERROR: certificate common name “g.ssl.fastly.nethttp://g.ssl.fastly.net/” doesn’t match requested host name “www.chef.iohttp://www.chef.io/”.
10.161.66.83 To connect to www.chef.iohttp://www.chef.io/ insecurely, use ‘–no-check-certificate’.
10.161.66.83 Starting first Chef Client run…
10.161.66.83 bash: line 96: chef-client: command not found​
Errrr… ummm…


Justin Franks
Lead Operations Engineer
SaaS, Cloud, Data Centers & Infrastructure
Lithium Technologies, Inc
225 Bush St., 15th Floor
San Francisco, CA 94104
tel: +1 415 757 3100 x3219


#7

Probably missing from the docs.


On 3/21/15 9:10 AM, Fouts, Chris wrote:

https://docs.chef.io/config_rb_knife.html

Where is this documented? That option is not in the list above.

Chris

*From:*Lamont Granquist [mailto:lamont@chef.io]
Sent: Friday, March 20, 2015 5:11 PM
To: chef@lists.opscode.com
Cc: Justin Franks
Subject: [chef] Re: Re: Re: Chef.io certificate error causing client
install error

–bootstrap-install-command on the CLI or
knife[:bootstrap_install_command] in knife.rb can be used to bypass
install.sh entirely and you can dpkg install or rpm install straight
from a URL.

On 3/20/15 1:43 PM, Justin Franks wrote:

​ I would like to tell our chef servers to pull the client from
out repo and not from a public place. What do I edit on the server?


*************************
Justin Franks
Lead Operations Engineer
SaaS, Cloud, Data Centers & Infrastructure
Lithium Technologies, Inc
225 Bush St., 15th Floor
San Francisco, CA 94104
tel: +1 415 757 3100 x3219

------------------------------------------------------------------------

*From:*Christopher Webber <cwebber@chef.io> <mailto:cwebber@chef.io>
*Sent:* Friday, March 20, 2015 1:33 PM
*To:* chef@lists.opscode.com <mailto:chef@lists.opscode.com>
*Subject:* [chef] Re: Chef.io certificate error causing client
install error

Hey Justin,

Sorry you are having issues with this. While we work on a fix for
this the workaround is to call --bootstrap-url
https://www.opscode.com/chef/install.sh with your knife bootstrap
command.

Please let me know if you have any questions.

— cwebber

    On Mar 20, 2015, at 13:30, Justin Franks
    <justin.franks@lithium.com <mailto:justin.franks@lithium.com>>
    wrote:

    Connecting to 10.161.66.83

    10.161.66.83 Installing Chef Client...

    10.161.66.83 --2015-03-20 20:15:34--
    https://www.chef.io/chef/install.sh

    10.161.66.83 Resolvingwww.chef.io <http://www.chef.io/>...
    199.27.79.65

    10.161.66.83 Connecting towww.chef.io
    <http://www.chef.io/>|199.27.79.65|:443... connected.

    10.161.66.83 ERROR: certificate common name “g.ssl.fastly.net
    <http://g.ssl.fastly.net/>” doesn’t match requested host name
    “www.chef.io <http://www.chef.io/>”.

    10.161.66.83 To connect towww.chef.io
    <http://www.chef.io/>insecurely, use ‘--no-check-certificate’.

    10.161.66.83 Starting first Chef Client run...

    10.161.66.83 bash: line 96: chef-client: command not found​

    Errrr... ummm...


    *************************
    Justin Franks
    Lead Operations Engineer
    SaaS, Cloud, Data Centers & Infrastructure
    Lithium Technologies, Inc
    225 Bush St., 15th Floor
    San Francisco, CA 94104
    tel: +1 415 757 3100 x3219