Jul 26 08:26:52 cp5011 puppet-agent[41102]: (/Stage[main]/Profile::Cache::Ssl::Unified/Tlsproxy::Localssl[unified]/Acme_chief::Cert[unified]/File[/etc/acmecerts/unified/a40ba19e20ff4516bb7906d154cf5539]/ensure) created Jul 26 08:26:52 cp5011 puppet-agent[41102]: (/Stage[main]/Profile::Cache::Ssl::Unified/Tlsproxy::Localssl[unified]/Acme_chief::Cert[unified]/File[/etc/acmecerts/unified/a40ba19e20ff4516bb7906d154cf5539/ec-prime256v1.chained.crt]/ensure) defined content as '{md5}cdcd9230dad16d13d2c9225a15d02a5a' Jul 26 08:26:52 cp5011 puppet-agent[41102]: (/Stage[main]/Profile::Cache::Ssl::Unified/Tlsproxy::Localssl[unified]/Acme_chief::Cert[unified]/File[/etc/acmecerts/unified/a40ba19e20ff4516bb7906d154cf5539/ec-prime256v1.key]/ensure) defined content as '{md5}6a5cf5b2d62ee17036133a6d54a259e0' Jul 26 08:26:52 cp5011 puppet-agent[41102]: (/Stage[main]/Profile::Cache::Ssl::Unified/Tlsproxy::Localssl[unified]/Acme_chief::Cert[unified]/File[/etc/acmecerts/unified/a40ba19e20ff4516bb7906d154cf5539/rsa-2048.chained.crt]/ensure) defined content as '{md5}e064a89c1281057e44973cd5f73b8037' Jul 26 08:26:53 cp5011 puppet-agent[41102]: (/Stage[main]/Profile::Cache::Ssl::Unified/Tlsproxy::Localssl[unified]/Acme_chief::Cert[unified]/File[/etc/acmecerts/unified/a40ba19e20ff4516bb7906d154cf5539/rsa-2048.key]/ensure) defined content as '{md5}21dc517379d4502d7e59b9916f712113' Jul 26 08:26:53 cp5011 puppet-agent[41102]: (/Stage[main]/Profile::Cache::Ssl::Unified/Tlsproxy::Localssl[unified]/Acme_chief::Cert[unified]/File[/etc/acmecerts/unified/new]/target) target changed '/etc/acmecerts/unified/7342d4c2c8fa4e5ba2264a3f13000fae' to '/etc/acmecerts/unified/a40ba19e20ff4516bb7906d154cf5539' Jul 26 08:26:53 cp5011 puppet-agent[41102]: (/Stage[main]/Profile::Cache::Ssl::Unified/Tlsproxy::Localssl[unified]/Acme_chief::Cert[unified]/Exec[unified-new-ec-prime256v1-create-ocsp]/returns) Traceback (most recent call last): Jul 26 08:26:53 cp5011 puppet-agent[41102]: (/Stage[main]/Profile::Cache::Ssl::Unified/Tlsproxy::Localssl[unified]/Acme_chief::Cert[unified]/Exec[unified-new-ec-prime256v1-create-ocsp]/returns) File "/usr/local/sbin/update-ocsp", line 290, in Jul 26 08:26:53 cp5011 puppet-agent[41102]: (/Stage[main]/Profile::Cache::Ssl::Unified/Tlsproxy::Localssl[unified]/Acme_chief::Cert[unified]/Exec[unified-new-ec-prime256v1-create-ocsp]/returns) main() Jul 26 08:26:53 cp5011 puppet-agent[41102]: (/Stage[main]/Profile::Cache::Ssl::Unified/Tlsproxy::Localssl[unified]/Acme_chief::Cert[unified]/Exec[unified-new-ec-prime256v1-create-ocsp]/returns) File "/usr/local/sbin/update-ocsp", line 283, in main Jul 26 08:26:53 cp5011 puppet-agent[41102]: (/Stage[main]/Profile::Cache::Ssl::Unified/Tlsproxy::Localssl[unified]/Acme_chief::Cert[unified]/Exec[unified-new-ec-prime256v1-create-ocsp]/returns) certs_fetch_ocsp(out_tempfile, args) Jul 26 08:26:53 cp5011 puppet-agent[41102]: (/Stage[main]/Profile::Cache::Ssl::Unified/Tlsproxy::Localssl[unified]/Acme_chief::Cert[unified]/Exec[unified-new-ec-prime256v1-create-ocsp]/returns) File "/usr/local/sbin/update-ocsp", line 170, in certs_fetch_ocsp Jul 26 08:26:53 cp5011 puppet-agent[41102]: (/Stage[main]/Profile::Cache::Ssl::Unified/Tlsproxy::Localssl[unified]/Acme_chief::Cert[unified]/Exec[unified-new-ec-prime256v1-create-ocsp]/returns) issuer_path = cert_get_issuer_filename(certs[0], cadir) Jul 26 08:26:53 cp5011 puppet-agent[41102]: (/Stage[main]/Profile::Cache::Ssl::Unified/Tlsproxy::Localssl[unified]/Acme_chief::Cert[unified]/Exec[unified-new-ec-prime256v1-create-ocsp]/returns) File "/usr/local/sbin/update-ocsp", line 136, in cert_get_issuer_filename Jul 26 08:26:53 cp5011 puppet-agent[41102]: (/Stage[main]/Profile::Cache::Ssl::Unified/Tlsproxy::Localssl[unified]/Acme_chief::Cert[unified]/Exec[unified-new-ec-prime256v1-create-ocsp]/returns) issuer_subject = cert_x509_option_kv(cert, "issuer") Jul 26 08:26:53 cp5011 puppet-agent[41102]: (/Stage[main]/Profile::Cache::Ssl::Unified/Tlsproxy::Localssl[unified]/Acme_chief::Cert[unified]/Exec[unified-new-ec-prime256v1-create-ocsp]/returns) File "/usr/local/sbin/update-ocsp", line 124, in cert_x509_option_kv Jul 26 08:26:53 cp5011 puppet-agent[41102]: (/Stage[main]/Profile::Cache::Ssl::Unified/Tlsproxy::Localssl[unified]/Acme_chief::Cert[unified]/Exec[unified-new-ec-prime256v1-create-ocsp]/returns) k, v = cert_x509_option(filename, attrib).split("=", 1) Jul 26 08:26:53 cp5011 puppet-agent[41102]: (/Stage[main]/Profile::Cache::Ssl::Unified/Tlsproxy::Localssl[unified]/Acme_chief::Cert[unified]/Exec[unified-new-ec-prime256v1-create-ocsp]/returns) File "/usr/local/sbin/update-ocsp", line 117, in cert_x509_option Jul 26 08:26:53 cp5011 puppet-agent[41102]: (/Stage[main]/Profile::Cache::Ssl::Unified/Tlsproxy::Localssl[unified]/Acme_chief::Cert[unified]/Exec[unified-new-ec-prime256v1-create-ocsp]/returns) "-" + attrib, Jul 26 08:26:53 cp5011 puppet-agent[41102]: (/Stage[main]/Profile::Cache::Ssl::Unified/Tlsproxy::Localssl[unified]/Acme_chief::Cert[unified]/Exec[unified-new-ec-prime256v1-create-ocsp]/returns) File "/usr/local/sbin/update-ocsp", line 101, in check_output_errtext Jul 26 08:26:53 cp5011 puppet-agent[41102]: (/Stage[main]/Profile::Cache::Ssl::Unified/Tlsproxy::Localssl[unified]/Acme_chief::Cert[unified]/Exec[unified-new-ec-prime256v1-create-ocsp]/returns) (" ".join(args), p.returncode, p_err)) Jul 26 08:26:53 cp5011 puppet-agent[41102]: (/Stage[main]/Profile::Cache::Ssl::Unified/Tlsproxy::Localssl[unified]/Acme_chief::Cert[unified]/Exec[unified-new-ec-prime256v1-create-ocsp]/returns) Exception: Command openssl x509 -noout -in /etc/acmecerts/unified/new/ec-prime256v1.crt -issuer failed with exit code 1, stderr: Jul 26 08:26:53 cp5011 puppet-agent[41102]: (/Stage[main]/Profile::Cache::Ssl::Unified/Tlsproxy::Localssl[unified]/Acme_chief::Cert[unified]/Exec[unified-new-ec-prime256v1-create-ocsp]/returns) x509: Cannot open input file /etc/acmecerts/unified/new/ec-prime256v1.crt, No such file or directory Jul 26 08:26:53 cp5011 puppet-agent[41102]: (/Stage[main]/Profile::Cache::Ssl::Unified/Tlsproxy::Localssl[unified]/Acme_chief::Cert[unified]/Exec[unified-new-ec-prime256v1-create-ocsp]/returns) x509: Use -help for summary. Jul 26 08:26:53 cp5011 puppet-agent[41102]: '/usr/local/sbin/update-ocsp --config /etc/update-ocsp.d/unified-new-ec-prime256v1.conf' returned 1 instead of one of [0] Jul 26 08:26:53 cp5011 puppet-agent[41102]: (/Stage[main]/Profile::Cache::Ssl::Unified/Tlsproxy::Localssl[unified]/Acme_chief::Cert[unified]/Exec[unified-new-ec-prime256v1-create-ocsp]/returns) change from 'notrun' to ['0'] failed: '/usr/local/sbin/update-ocsp --config /etc/update-ocsp.d/unified-new-ec-prime256v1.conf' returned 1 instead of one of [0] Jul 26 08:26:53 cp5011 puppet-agent[41102]: (/Stage[main]/Profile::Cache::Ssl::Unified/Tlsproxy::Localssl[unified]/Acme_chief::Cert[unified]/Exec[unified-new-rsa-2048-create-ocsp]/returns) Traceback (most recent call last): Jul 26 08:26:53 cp5011 puppet-agent[41102]: (/Stage[main]/Profile::Cache::Ssl::Unified/Tlsproxy::Localssl[unified]/Acme_chief::Cert[unified]/Exec[unified-new-rsa-2048-create-ocsp]/returns) File "/usr/local/sbin/update-ocsp", line 290, in Jul 26 08:26:53 cp5011 puppet-agent[41102]: (/Stage[main]/Profile::Cache::Ssl::Unified/Tlsproxy::Localssl[unified]/Acme_chief::Cert[unified]/Exec[unified-new-rsa-2048-create-ocsp]/returns) main() Jul 26 08:26:53 cp5011 puppet-agent[41102]: (/Stage[main]/Profile::Cache::Ssl::Unified/Tlsproxy::Localssl[unified]/Acme_chief::Cert[unified]/Exec[unified-new-rsa-2048-create-ocsp]/returns) File "/usr/local/sbin/update-ocsp", line 283, in main Jul 26 08:26:53 cp5011 puppet-agent[41102]: (/Stage[main]/Profile::Cache::Ssl::Unified/Tlsproxy::Localssl[unified]/Acme_chief::Cert[unified]/Exec[unified-new-rsa-2048-create-ocsp]/returns) certs_fetch_ocsp(out_tempfile, args) Jul 26 08:26:53 cp5011 puppet-agent[41102]: (/Stage[main]/Profile::Cache::Ssl::Unified/Tlsproxy::Localssl[unified]/Acme_chief::Cert[unified]/Exec[unified-new-rsa-2048-create-ocsp]/returns) File "/usr/local/sbin/update-ocsp", line 170, in certs_fetch_ocsp Jul 26 08:26:53 cp5011 puppet-agent[41102]: (/Stage[main]/Profile::Cache::Ssl::Unified/Tlsproxy::Localssl[unified]/Acme_chief::Cert[unified]/Exec[unified-new-rsa-2048-create-ocsp]/returns) issuer_path = cert_get_issuer_filename(certs[0], cadir) Jul 26 08:26:53 cp5011 puppet-agent[41102]: (/Stage[main]/Profile::Cache::Ssl::Unified/Tlsproxy::Localssl[unified]/Acme_chief::Cert[unified]/Exec[unified-new-rsa-2048-create-ocsp]/returns) File "/usr/local/sbin/update-ocsp", line 136, in cert_get_issuer_filename Jul 26 08:26:53 cp5011 puppet-agent[41102]: (/Stage[main]/Profile::Cache::Ssl::Unified/Tlsproxy::Localssl[unified]/Acme_chief::Cert[unified]/Exec[unified-new-rsa-2048-create-ocsp]/returns) issuer_subject = cert_x509_option_kv(cert, "issuer") Jul 26 08:26:53 cp5011 puppet-agent[41102]: (/Stage[main]/Profile::Cache::Ssl::Unified/Tlsproxy::Localssl[unified]/Acme_chief::Cert[unified]/Exec[unified-new-rsa-2048-create-ocsp]/returns) File "/usr/local/sbin/update-ocsp", line 124, in cert_x509_option_kv Jul 26 08:26:53 cp5011 puppet-agent[41102]: (/Stage[main]/Profile::Cache::Ssl::Unified/Tlsproxy::Localssl[unified]/Acme_chief::Cert[unified]/Exec[unified-new-rsa-2048-create-ocsp]/returns) k, v = cert_x509_option(filename, attrib).split("=", 1) Jul 26 08:26:53 cp5011 puppet-agent[41102]: (/Stage[main]/Profile::Cache::Ssl::Unified/Tlsproxy::Localssl[unified]/Acme_chief::Cert[unified]/Exec[unified-new-rsa-2048-create-ocsp]/returns) File "/usr/local/sbin/update-ocsp", line 117, in cert_x509_option Jul 26 08:26:53 cp5011 puppet-agent[41102]: (/Stage[main]/Profile::Cache::Ssl::Unified/Tlsproxy::Localssl[unified]/Acme_chief::Cert[unified]/Exec[unified-new-rsa-2048-create-ocsp]/returns) "-" + attrib, Jul 26 08:26:53 cp5011 puppet-agent[41102]: (/Stage[main]/Profile::Cache::Ssl::Unified/Tlsproxy::Localssl[unified]/Acme_chief::Cert[unified]/Exec[unified-new-rsa-2048-create-ocsp]/returns) File "/usr/local/sbin/update-ocsp", line 101, in check_output_errtext Jul 26 08:26:53 cp5011 puppet-agent[41102]: (/Stage[main]/Profile::Cache::Ssl::Unified/Tlsproxy::Localssl[unified]/Acme_chief::Cert[unified]/Exec[unified-new-rsa-2048-create-ocsp]/returns) (" ".join(args), p.returncode, p_err)) Jul 26 08:26:53 cp5011 puppet-agent[41102]: (/Stage[main]/Profile::Cache::Ssl::Unified/Tlsproxy::Localssl[unified]/Acme_chief::Cert[unified]/Exec[unified-new-rsa-2048-create-ocsp]/returns) Exception: Command openssl x509 -noout -in /etc/acmecerts/unified/new/rsa-2048.crt -issuer failed with exit code 1, stderr: Jul 26 08:26:53 cp5011 puppet-agent[41102]: (/Stage[main]/Profile::Cache::Ssl::Unified/Tlsproxy::Localssl[unified]/Acme_chief::Cert[unified]/Exec[unified-new-rsa-2048-create-ocsp]/returns) x509: Cannot open input file /etc/acmecerts/unified/new/rsa-2048.crt, No such file or directory Jul 26 08:26:53 cp5011 puppet-agent[41102]: (/Stage[main]/Profile::Cache::Ssl::Unified/Tlsproxy::Localssl[unified]/Acme_chief::Cert[unified]/Exec[unified-new-rsa-2048-create-ocsp]/returns) x509: Use -help for summary. Jul 26 08:26:53 cp5011 puppet-agent[41102]: '/usr/local/sbin/update-ocsp --config /etc/update-ocsp.d/unified-new-rsa-2048.conf' returned 1 instead of one of [0] Jul 26 08:26:53 cp5011 puppet-agent[41102]: (/Stage[main]/Profile::Cache::Ssl::Unified/Tlsproxy::Localssl[unified]/Acme_chief::Cert[unified]/Exec[unified-new-rsa-2048-create-ocsp]/returns) change from 'notrun' to ['0'] failed: '/usr/local/sbin/update-ocsp --config /etc/update-ocsp.d/unified-new-rsa-2048.conf' returned 1 instead of one of [0] Jul 26 08:26:53 cp5011 puppet-agent[41102]: (Acme_chief::Cert[unified]) Unscheduling all events on Acme_chief::Cert[unified] Jul 26 08:26:53 cp5011 puppet-agent[41102]: (Tlsproxy::Localssl[unified]) Unscheduling all events on Tlsproxy::Localssl[unified] Jul 26 08:26:53 cp5011 puppet-agent[41102]: (/Stage[main]/Nginx/Service[nginx]) Dependency Exec[unified-new-ec-prime256v1-create-ocsp] has failures: true Jul 26 08:26:53 cp5011 puppet-agent[41102]: (/Stage[main]/Nginx/Service[nginx]) Dependency Exec[unified-new-rsa-2048-create-ocsp] has failures: true