在 ONTAP 中重新启动后， HTTPS/SSL 连接失败

最后更新
另存为PDF

Views:: 17

Visibility:: Public

Votes:: 0

Category:: ontap-9

Specialty:: CORE

Last Updated:

适用场景

ONTAP 9
HTTPS/SSL
- 创建集群对等关系
- AutoSupport
- System Manager

问题描述

节点重新启动后，使用 HTTPS/SSL 的服务无法连接。
出现故障的位置可以是（但不限于）：
- AutoSupport
- 创建集群对等关系
- System Manager
在各种日志和命令输出中显示 SSL 错误消息：

AutoSupport check show-details 命令：

Cluster::> autosupport check show-details Node: cluster-01 Category: http-https Component: http-put-destination Status: failed Detail: HTTP/S PUT connectivity check failed for destination: https://support.netapp.com/put/AsupPut/. Error: SSL connect error Component: http-post-destination Status: failed Detail: HTTP/S POST connectivity check failed for destination: https://support.netapp.com/asupprod/post/1.0/postAsup. Error: SSL connect error

Notifyd.log

[kern_notifyd:info:1530] (category: 1530:0:deliver) (emittime: 8/31/2021 01:44:52) (message: TLSv1.2 (OUT), TLS header, Certificate Status (22):) [kern_notifyd:info:1530] (category: 1530:0:deliver) (emittime: 8/31/2021 01:44:52) (message: TLSv1.2 (OUT), TLS handshake, Client hello (1):) [kern_notifyd:info:1530] (category: 1530:0:deliver) (emittime: 8/31/2021 01:44:52) (message: error:0E065068:configuration file routines:STR_COPY:variable has no value) [kern_notifyd:info:1530] (category: 1530:0:deliver) (emittime: 8/31/2021 01:44:52) (message: Marked for [closure]: Failed HTTPS connection) [kern_notifyd:info:1530] (category: 1530:0:deliver) (emittime: 8/31/2021 01:44:52) (message: multi_done) 00000015.0062e0fa 001c17d5 Tue Aug 31 2021 01:44:53 -04:00 [kern_notifyd:info:1530] (category: 1530:0:deliver) (emittime: 8/31/2021 01:44:52) (message: The cache now contains 0 members) [kern_notifyd:info:1530] (category: 1530:0:deliver) (emittime: 8/31/2021 01:44:52) (message: Closing connection 0)

APACHE-ERROR 日志：

[ssl:emerg] [pid 67509:tid 34389163776] AH02562: Failed to configure certificate 127.0.0.1:0 (with chain), check /mroot/etc/vserver_0000000000/certificates/ssl/server/UUID/server.crt [ssl:emerg] [pid 67509:tid 34389163776] SSL Library Error: error:0E065068:configuration file routines:STR_COPY:variable has no value (line 12) {ssl:error] [pid 67509:tid 34389163776] [client 10.0.0.5:30001] [vserver 0000000000] Failed to initialize SSL context [ssl:notice] [pid 67509:tid 34389171456] [client 10.0.0.5:30001] [vserver 0000000000] No server certificate chain is configured for this vserver [ssl:notice] [pid 67509:tid 34389171456] [client 10.0.0.5:30001] [vserver 0000000000] Certificate-based client authentication is not configured for this vserver