{"record":{"id":"1ce3a39a06a77f7b","repo":"puppetlabs/puppet","slug":"csr-sign-verification-failed-you-need-to-clean-th","errorCode":null,"errorMessage":"CSR sign verification failed; you need to clean the certificate request for %{name} on the server","messagePattern":"CSR sign verification failed; you need to clean the certificate request for %(.+?) on the server","errorType":"exception","errorClass":"Puppet::Error","httpStatus":null,"severity":"error","filePath":"lib/puppet/ssl/certificate_request.rb","lineNumber":91,"sourceCode":"                       # EC#public_key doesn't follow the PKey API,\n                       # see https://github.com/ruby/openssl/issues/29\n                       key\n                     else\n                       key.public_key\n                     end\n\n    if options[:csr_attributes]\n      add_csr_attributes(csr, options[:csr_attributes])\n    end\n\n    if (ext_req_attribute = extension_request_attribute(options))\n      csr.add_attribute(ext_req_attribute)\n    end\n\n    signer = Puppet::SSL::CertificateSigner.new\n    signer.sign(csr, key)\n\n    raise Puppet::Error, _(\"CSR sign verification failed; you need to clean the certificate request for %{name} on the server\") % { name: name } unless csr.verify(csr.public_key)\n\n    @content = csr\n\n    # we won't be able to get the digest on jruby\n    if @content.signature_algorithm\n      Puppet.info _(\"Certificate Request fingerprint (%{digest}): %{hex_digest}\") % { digest: digest.name, hex_digest: digest.to_hex }\n    end\n    @content\n  end\n\n  def ext_value_to_ruby_value(asn1_arr)\n    # A list of ASN1 types than can't be directly converted to a Ruby type\n    @non_convertible ||= [OpenSSL::ASN1::EndOfContent,\n                          OpenSSL::ASN1::BitString,\n                          OpenSSL::ASN1::Null,\n                          OpenSSL::ASN1::Enumerated,\n                          OpenSSL::ASN1::UTCTime,\n                          OpenSSL::ASN1::GeneralizedTime,","sourceCodeStart":73,"sourceCodeEnd":109,"githubUrl":"https://github.com/puppetlabs/puppet/blob/e227c27540975c25aa22d533a52424a9d2fc886a/lib/puppet/ssl/certificate_request.rb#L73-L109","documentation":"Error \"CSR sign verification failed; you need to clean the certificate request for %{name} on the server\" thrown in puppetlabs/puppet.","triggerScenarios":"Thrown at lib/puppet/ssl/certificate_request.rb:91 when the library encounters an invalid state.","commonSituations":"See trigger scenarios.","solutions":[],"exampleFix":null,"handlingStrategy":null,"validationCode":null,"typeGuard":null,"tryCatchPattern":null,"preventionTips":[],"tags":[],"backgroundTag":null,"analyzedSha":"e227c27540975c25aa22d533a52424a9d2fc886a","analyzedAt":"2026-08-21T20:49:46.650Z","schemaVersion":2},"datasetVersion":"2026-08-21T23:17:16.201Z"}