gondoi · August 14, 2014 20:53 · Aug 14, 2014
diff --git a/client.log b/client.log
@@ -0,0 +1,38 @@
+[2014-08-14T20:23:26+00:00] INFO: Daemonizing..
+[2014-08-14T20:23:26+00:00] INFO: Forked, in 1507. Privileges: 0 0
+[2014-08-14T20:23:37+00:00] INFO: SIGTERM received, exiting gracefully
+[2014-08-14T20:23:37+00:00] FATAL: Chef is already running pid 1507
+[2014-08-14T20:27:33+00:00] INFO: Forking chef instance to converge...
+[2014-08-14T20:27:33+00:00] WARN:
+* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *
+SSL validation of HTTPS requests is disabled. HTTPS connections are still
+encrypted, but chef is not able to detect forged replies or man in the middle
+attacks.
+
+To fix this issue add an entry like this to your configuration file:
+
+```
+  # Verify all HTTPS connections (recommended)
+  ssl_verify_mode :verify_peer
+
+  # OR, Verify only connections to chef-server
+  verify_api_cert true
+```
+
+To check your SSL configuration, or troubleshoot errors, you can use the
+`knife ssl check` command like so:
+
+```
+  knife ssl check -c /etc/chef/client.rb
+```
+
+* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *
+
+[2014-08-14T20:27:33+00:00] INFO: *** Chef 11.12.0 ***
+[2014-08-14T20:27:33+00:00] INFO: Chef-client pid: 1736
+[2014-08-14T20:27:35+00:00] INFO: Client key /etc/chef/client.pem is not present - registering
+[2014-08-14T20:27:35+00:00] WARN: Failed to read the private key /etc/chef/validation.pem: #<Errno::ENOENT: No such file or directory - /etc/chef/validation.pem>
+[2014-08-14T20:27:35+00:00] FATAL: Stacktrace dumped to /var/chef/cache/chef-stacktrace.out
+[2014-08-14T20:27:35+00:00] ERROR: I cannot read /etc/chef/validation.pem, which you told me to use to sign requests!
+[2014-08-14T20:27:35+00:00] ERROR: Chef::Exceptions::ChildConvergeError: Chef run process exited unsuccessfully (exit code 1)
+[2014-08-14T20:27:35+00:00] ERROR: Sleeping for 1800 seconds before trying again