Puppet

Server

delete client ssl-stuff on server (in case of ssl-signing problems):

Before retrying connect, do the SSL stuff on client, too

puppetca list --all
puppetca clean CLIENT-Hostname

'kick' client to pull new configs

puppet kick CLIENT-Hostname

Client

delete ssl-stuff (in case of ssl-signing problems):

Before retrying connect, do the SSL stuff on server, too

cd /var/lib/puppet/ssl
find . -type f -exec rm -f \{\} \;

pull new configs (old style):

puppetd --fqdn=CLIENT-Hostname --test --no-splay --server=SERVER-Hostname --onetime --verbose --pluginsync

pull new configs:

puppet agent --test --verbose