puppet 遇到 Neither PUB key nor PRIV key:: header too long

Question

最近接触Puppet:
在一台全新的机器上运行puppet agent -t，得到一下信息：

➜  / puppet agent -t
Info: Creating a new SSL key for docker.1476842591
Error: Could not request certificate: Neither PUB key nor PRIV key:: header too long
Exiting; failed to retrieve certificate and waitforcert is disabled

根据网上的做法，删除本地/var/lib/puppet/ssl文件夹无效。

agent端，puppet.conf配置如下：

[main]
logdir=/var/log/puppet
vardir=/var/lib/puppet
ssldir=/var/lib/puppet/ssl
rundir=/var/run/puppet
factpath=$vardir/lib/facter
environmentpath=/etc/puppet/environments

[master]
# These are needed when the puppetmaster is run by passenger
# and can safely be removed if webrick is used.
ssl_client_header = SSL_CLIENT_S_DN
ssl_client_verify_header = SSL_CLIENT_VERIFY

[agent]
server=【master所在域名】
pluginsync = true