跳转到主内容

在 ONTAP 中重新启动后, HTTPS/SSL 连接失败

Views:
12
Visibility:
Public
Votes:
0
Category:
ontap-9
Specialty:
core
Last Updated:

适用场景

  • ONTAP 9
  • HTTPS/SSL
    • 创建集群对等关系
    • AutoSupport
    • System Manager

问题描述

  • 节点重新启动后,使用 HTTPS/SSL 的服务无法连接。
  • 出现故障的位置可以是(但不限于):
    • AutoSupport
    • 创建集群对等关系
    • System Manager
  • 在各种日志和命令输出中显示 SSL 错误消息:

 

AutoSupport check show-details 命令:

Cluster::> autosupport check show-details
Node: cluster-01
Category: http-https
          Component: http-put-destination
             Status: failed
             Detail: HTTP/S PUT connectivity check failed for destination:
                     https://support.netapp.com/put/AsupPut/. Error: SSL
                     connect error
          Component: http-post-destination
             Status: failed
             Detail: HTTP/S POST connectivity check failed for destination:
                     https://support.netapp.com/asupprod/post/1.0/postAsup.
                     Error: SSL connect error

Notifyd.log

[kern_notifyd:info:1530] (category: 1530:0:deliver) (emittime: 8/31/2021 01:44:52) (message: TLSv1.2 (OUT), TLS header, Certificate Status (22):)
[kern_notifyd:info:1530] (category: 1530:0:deliver) (emittime: 8/31/2021 01:44:52) (message: TLSv1.2 (OUT), TLS handshake, Client hello (1):)
[kern_notifyd:info:1530] (category: 1530:0:deliver) (emittime: 8/31/2021 01:44:52) (message: error:0E065068:configuration file routines:STR_COPY:variable has no value)
[kern_notifyd:info:1530] (category: 1530:0:deliver) (emittime: 8/31/2021 01:44:52) (message: Marked for [closure]: Failed HTTPS connection)
[kern_notifyd:info:1530] (category: 1530:0:deliver) (emittime: 8/31/2021 01:44:52) (message: multi_done)
00000015.0062e0fa 001c17d5 Tue Aug 31 2021 01:44:53 -04:00 [kern_notifyd:info:1530] (category: 1530:0:deliver) (emittime: 8/31/2021 01:44:52) (message: The cache now contains 0 members)
[kern_notifyd:info:1530] (category: 1530:0:deliver) (emittime: 8/31/2021 01:44:52) (message: Closing connection 0)

APACHE-ERROR 日志:

[ssl:emerg] [pid 67509:tid 34389163776] AH02562: Failed to configure certificate 127.0.0.1:0 (with chain), check /mroot/etc/vserver_0000000000/certificates/ssl/server/UUID/server.crt
[ssl:emerg] [pid 67509:tid 34389163776] SSL Library Error: error:0E065068:configuration file routines:STR_COPY:variable has no value (line 12)
{ssl:error] [pid 67509:tid 34389163776] [client 10.0.0.5:30001] [vserver 0000000000] Failed to initialize SSL context
[ssl:notice] [pid 67509:tid 34389171456] [client 10.0.0.5:30001] [vserver 0000000000] No server certificate chain is configured for this vserver
[ssl:notice] [pid 67509:tid 34389171456] [client 10.0.0.5:30001] [vserver 0000000000] Certificate-based client authentication is not configured for this vserver

Sign in to view the entire content of this KB article.

New to NetApp?

Learn more about our award-winning Support

NetApp provides no representations or warranties regarding the accuracy or reliability or serviceability of any information or recommendations provided in this publication or with respect to any results that may be obtained by the use of the information or observance of any recommendations provided herein. The information in this document is distributed AS IS and the use of this information or the implementation of any recommendations or techniques herein is a customer's responsibility and depends on the customer's ability to evaluate and integrate them into the customer's operational environment. This document and the information contained herein may be used solely in connection with the NetApp products discussed in this document.