If you don’t know what PuppetDB is, this post probably will not be useful to you. But if you want to learn about it, you can visit the official documentation: http://docs.puppetlabs.com/puppetdb/latest/index.html.

For PuppetDB to work, it needs SSL certificates generated by a Puppet master. In my case, I needed to reconfigure an existing PuppetDB instance to use a new Puppet master that was running on the same server. Here’s how I did it:

  1. Stop the PuppetDB service:

    # service puppetdb stop
    
  2. Generate the new SSL certificates. This command uses the Puppet master’s certificates on the local machine to generate new ones for PuppetDB.

    # puppetdb ssl-setup
    
  3. Restart the PuppetDB service:

    # service puppetdb restart
    

As mentioned, my PuppetDB and Puppet master were on the same server. If your Puppet master is on a different server, you will need to copy the certificates from the master manually before running the ssl-setup command.

You can find more detailed instructions in the official documentation: Manually Generating and Preparing Certificates.