This message was deleted.

curl https://puppet.lab:8140/puppet-ca/v1/certificate_status/all curl: (60) SSL certificate problem: unable to get local issuer certificate More details here: https://curl.haxx.se/docs/sslcerts.html curl failed to verify the legitimacy of the server and therefore could not establish a secure connection to it. To learn more about this situation and how to fix it, please visit the web page mentioned above.

you need to provide the correct certificates for curl

I also recommend taking a look at this Bolt Task for some other options around solving that problem: https://forge.puppetlabs.com/modules/nate/purge_node/readme If you have Puppet Enterprise, you can run that via the Orchestrator API to clean certs and remove a node from PuppetDB all at once. With open-source Puppet, you would run it as a Bolt Task against your CA to clean a node's cert.

I did find the api request, but only works on localhost(master node) when I try from remote node I get connection refuse on port 8080

the plaintext port 8080 is only listening on localhost

hmmm, ok.. thanks for this info, used the non secure approach but i will rollback now

yeah you dont want the http listener public

🥶🥶