Comment 11 for bug 1417875

Was able to reproduce the issue. The certificates are only a problem when you use ensure-availability. Since each state machine generates its own certificate, the result is the client can only connect to the state server that gave the node its client key.

Solution is to ensure that all bootstrap nodes share the master nodes rsyslog-cert.pem and rsyslog-key.pem files.