How to manually create Puppet CA and certificates?
Solution 1:
The agent is not using the pregenerated client certificate. It created a CSR (with a new key) instead, so the master will not trust the agent.
Make sure that the files found in
`puppet agent --configprint ssldir`/{certs,private_keys}/`puppet agent --configprint certname`
are identical to those that you pregenerated and put on your master as well. (The master should not receive a copy of the agent's private key.)