Troubleshoot a “returned 60: curl: (60) SSL certificate problem: self signed certificate” error in Puppet Comply

You get a curl: (60) SSL error when upgrading the CIS-CAT assessor in Comply.

Error messages

Error: /Stage[main]/Comply::Scanners::Ciscat/Archive[Assessor-CLI-4.14.0.zip]/ensure: change from 'absent' to 'present' failed: Execution of '/usr/bin/curl https://comply. puppet.com/assessor -o /tmp/Assessor-CLI-4.14.0.zip_9fa58ef73c4266dfd260b8cd071855030497a5bf251ece9dbe30521739645ec620220228-3044367-1ovm6wi -fsSLg --max-redirs 5 -E /etc/puppetlabs/puppet/ssl/certs/puppet001.puppet.com.pem --key /etc/puppetlabs/puppet/ssl/private_keys/puppet002.puppet.com.pem --cacert /etc/puppetlabs/puppet/ssl/certs/ca.pem' returned 60: curl: (60) SSL certificate problem: self signed certificate

You get this error when Comply TLS certificates are misconfigured.

Version and installation information

Product: Puppet Comply

Version: All supported versions.

Solution

To make sure Comply TLS certificates are properly configured, choose one of these options based on your deployment.

• Configure Comply TLS certificates
• Configure Comply TLS certificates for a custom NGINX ingress

If you can’t resolve the issue, open a ticket.