gistfile1.txt

root@puppetdb1:/var/lib/puppet# rm -rf ssl
root@puppetdb1:/var/lib/puppet# rm -rf /etc/puppetdb/ssl
root@puppetdb1:/var/lib/puppet# puppet cert generate `facter -p fqdn` # you can use --dns_alt_names=<hostname,hostname2> to add extra cert aliases as well
Notice: Signed certificate request for ca
Notice: Rebuilding inventory file
Notice: puppetdb1.vm has a waiting certificate request
Notice: Signed certificate request for puppetdb1.vm
Notice: Removing file Puppet::SSL::CertificateRequest puppetdb1.vm at '/var/lib/puppet/ssl/ca/requests/puppetdb1.vm.pem'
Notice: Removing file Puppet::SSL::CertificateRequest puppetdb1.vm at '/var/lib/puppet/ssl/certificate_requests/puppetdb1.vm.pem'
root@puppetdb1:/var/lib/puppet# puppetdb-ssl-setup -f
Certificate was added to keystore
Backing up /etc/puppetdb/conf.d/jetty.ini to /etc/puppetdb/conf.d/jetty.ini.bak.1373025820 before making changes
Setting ssl-host in /etc/puppetdb/conf.d/jetty.ini already correct.
Setting ssl-port in /etc/puppetdb/conf.d/jetty.ini already correct.
Updated setting key-password in /etc/puppetdb/conf.d/jetty.ini.
Updated setting trust-password in /etc/puppetdb/conf.d/jetty.ini.
Setting keystore in /etc/puppetdb/conf.d/jetty.ini already correct.
Setting truststore in /etc/puppetdb/conf.d/jetty.ini already correct.
root@puppetdb1:/var/lib/puppet# service puppetdb start
root@puppetdb1:/var/lib/puppet# service apache2 start
[....] Starting web server: apache2apache2: Could not reliably determine the server's fully qualified domain name, using 127.0.1.1 for ServerName
. ok
root@puppetdb1:/var/lib/puppet# puppet agent -t
Info: Retrieving plugin
Info: Caching catalog for puppetdb1.vm
Info: 'replace catalog' command for puppetdb1.vm submitted to PuppetDB with UUID 859525be-7c33-46b4-a7a1-5abbe5124d92
Info: Applying configuration version '1373025862'
Notice: Finished catalog run in 11.62 seconds
root@puppetdb1:/var/lib/puppet#