On Puppet Agent nodes
rm -rf /etc/puppetlabs/puppet/ssl/*
puppet agent --test On Puppet Server node
systemctl stop puppetserver
rm -rf /etc/puppetlabs/puppet/ssl/*
rm -rf /etc/puppetlabs/puppetserver/ca/*
puppetserver ca setup
systemctl start puppetserver
puppet agent --test Revoke one cert on Puppet
root@puppetmaster:~# puppetserver ca list --all
Signed Certificates:
chris.mcollective XXXXXXXXXXXXXXXXXXXXXXXXXXX
root@puppetmaster:~# puppetserver ca clean --certname chris.mcollective
Certificate for chris.mcollective has been revoked
Cleaned files related to chris.mcollective
root@puppetmaster:~#