由于证书链中的自签名证书、集群审核日志转发失败
适用场景
- ONTAP 9
- 集群审核日志转发
- TLS/SSL
问题描述
- 在使用TCP加密协议创建集群审核日志转发配置时、由于证书链中存在自签名证书、命令失败。
::>cluster log-forwarding create -destination splunk.domain.com -port 514 -protocol tcp-encrypted -verify-server true -facility user
Testing network connectivity to the destination host splunk.domain.com.
Error: command failed: Cannot connect to destination host splunk.domain.com, port 514 from node "cluster01-01". Reason: Failed TLS/SSL handshake: certificate verify failed: self signed certificate in certificate chain. Verify connectivity to desired host or skip the connectivity check with the "-force" parameter.
- 检查已安装的证书、显示所有必需的证书均已安装在管理SVM中。
::>security certifiate show-user-installed -type server-ca -vserver <adminSVM>