Puppet certificate verify failed self signed certificate in certificate chain for CN Puppet CA master-b

Question

I have a puppet setup (A puppet server/master and a linux puppet agent node) and the communication among them was successfully established. I have a change in my requirement for which i had to create a new puppet master and run it in the agent:

sudo puppet agent -t --server master-b

which led to the error mentioned above.

I replicated the folder /var/lib/puppet/ssl from master-a  to master-b, and it was successful.

Is there an approach to avoid an puppet agent node from communicating with the primary master(master a)? How I can remove the certificates of the old master from the agent node and replace it with the certificates of the master-b?

Answer 1

Make new clean master b, and duplicate two records from master b to agent: 

Duplicate record "/var/lib/puppet/ssl/ca/ca_crt.pem"" from master b to agent, and save it as "/var/lib/puppet/ssl/certs/ca.pem". 

Duplicate record "/var/lib/puppet/ssl/ca/ca_crl.pem" from master b to agent, ans save it as "/var/lib/puppet/ssl/crl.pem". 

Erase old authentications in agent. 

sudo find /var/lib/puppet/ssl -name <hostname>.pem -delete