由于找不到有效的证书路径、E系列无法提供AutoSupport
适用场景
- E 系列
- SANtricity OS 11.70.4R1P1
- StorageGRID设备SG5760
- 使用HTTPS协议配置的Auto支持
问题描述
- 无法使用HTTPS协议配置AutoSupport、测试失败。
- Web-Server跟踪日志:
2024-02-13 16:45:13,021 INFO [SMMonitorTask-479] trace [ASUPTask.java:1282] [requestId=0, deviceId=N/A] ASUP task start, task: AUTO_SUPPORT_AOD_QUERY, source: AUTO_SUPPORT_DAILY_SCHEDULE
2024-02-13 16:45:15,136 INFO [SMMonitorTask-479] trace [ASUPHTTPClient.java:1022] [requestId=0, deviceId=N/A] Connecting to HTTPS server: support.netapp.com:443, IP 216.240.21.18
2024-02-13 16:46:38,876 WARN [SMMonitorTask-479] c.l.a.w.u.ChainedTrustManager [ChainedTrustManager.java:239] [requestId=0, deviceId=N/A] CertificateException caught:
sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
at java.base/sun.security.provider.certpath.SunCertPathBuilder.build(SunCertPathBuilder.java:141)
at java.base/sun.security.provider.certpath.RevocationChecker.checkOCSP(RevocationChecker.java:743)
Wrapped by: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
at java.base/sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:439)
at java.base/sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:306)
at java.base/sun.security.validator.Validator.validate(Validator.java:264)
- 已验证 E系列AutoSupport交付因防火墙阻止 以及未观察到防火墙或网络问题描述而失败。
- 测试
wget https://support.netapp.com/put/AsupPut/
wget http://support.netapp.com/put/AsupPut/
成功。 - 经验证、 E系列AutoSupport不支持任何协议