troubleshoot case

Owned by Jean-luc KRIKER
Last updated: Nov 08, 2022
2 min read


StandAlone conductor


pki key
On the Router:
[root@lr202007009846 ~]# ll /etc/salt/pki/minion/
total 12
-rw-r--r-- 1 root root  451 Oct 24 12:36 minion_master.pub
-r-------- 1 root root 1675 Oct 24 10:38 minion.pem
-rw-r--r-- 1 root root  451 Oct 24 10:38 minion.pub


[root@conductor ~]# ll /etc/salt/pki/minion/
total 12
-rw-r--r-- 1 root root  451 May 26 06:59 minion_master.pub
-r-------- 1 root root 1679 Dec  2  2021 minion.pem
-rw-r--r-- 1 root root  451 Dec  2  2021 minion.pub
HA Conductor



Option 1
check fro key issuejournalctl

could be: remove the key
Option 2stop / delete /  start

pki file are corrupted, missing  or = 0000000

delete .pub and .pem ( /etc/salt/pki/minion/ )  and restart salt minion


Option 3

check time of file creation ( /etc/salt/pki/minion/ )  .pub and .pem

should be the same

check keys with openssl

and diff