theforeman/foreman · error · ProxyException

Unable to sign PuppetCA certificate for %s

Error message

Unable to sign PuppetCA certificate for %s

What it means

Error "Unable to sign PuppetCA certificate for %s" thrown in theforeman/foreman.

Source

Thrown at app/services/proxy_api/puppet_ca.rb:32

    def set_autosign(certname)
      parse(post("", "autosign/#{certname}"))
    rescue => e
      raise ProxyException.new(url, e, N_("Unable to set PuppetCA autosign for %s"), certname)
    end

    def del_autosign(certname)
      parse(delete("autosign/#{certname}"))
    rescue RestClient::ResourceNotFound
      # entry doesn't exists anyway
      true
    rescue => e
      raise ProxyException.new(url, e, N_("Unable to delete PuppetCA autosign for %s"), certname)
    end

    def sign_certificate(certname)
      parse(post("", certname))
    rescue => e
      raise ProxyException.new(url, e, N_("Unable to sign PuppetCA certificate for %s"), certname)
    end

    def del_certificate(certname)
      parse(delete(certname.to_s))
    rescue RestClient::ResourceNotFound
      # entry doesn't exists anyway
      true
    rescue => e
      raise ProxyException.new(url, e, N_("Unable to delete PuppetCA certificate for %s"), certname)
    end

    def all
      parse(get)
    rescue => e
      raise ProxyException.new(url, e, N_("Unable to get PuppetCA certificates"))
    end
  end
end

View on GitHub (pinned to 6b05625475)

When it happens

Trigger: Thrown at app/services/proxy_api/puppet_ca.rb:32 when the library encounters an invalid state.

Common situations: See trigger scenarios.

Understand the failure class

• SSL/TLS and certificate errors — how TLS handshakes and certificate validation fail.

AI-assisted analysis of theforeman/foreman@6b05625475 (2026-08-23). Data as JSON: /api/errors/d6429bb9e1261e37. Report an issue: GitHub.