启用 OCSP 后无法发送 ASUP
适用于
- ONATP 9
- AutoSupport (ASUP)
问题描述
- 在 AutoSupport 中启用 OCSP 后，您将收到以下错误
dazuavs00519788::*> autosupport check show-details Node: dazuavs00519788-02 Category: http-https Component: http-put-destination Status: failed Detail: HTTP/S PUT connectivity check failed for destination: https://support.netapp.com/put/AsupPut/ via proxy - X.X.X.X:89. Error: Peer certificate can not be authenticated with given Certificate Authority certificates.. Failed to send OCSP request to OCSP responder: host:"X.X.X.X:89", port:"80", path:http://ocsp.usertrust.com. Corrective Action: Certificate issue. Please make sure you have the correct Root Certificate installed
- 在 notifyd 日志中可以看到以下内容：
0000005b.000054c1 00012076 Wed Aug 27 2025 11:41:42 +10:00 [kern_notifyd:info:2866] 0x80f005400: 0: ERR: AutoSupport::StatusCheck: Unable to send AOD request to OnDemand Server: SSL peer certificate or SSH remote key was not OK 0000005b.000054c2 00012076 Wed Aug 27 2025 11:41:42 +10:00 [kern_notifyd:info:2866] SSL certificate problem: unspecified certificate verification error 0000005b.000054c3 00012076 Wed Aug 27 2025 11:41:42 +10:00 [kern_notifyd:info:2866] Failed to send OCSP request to OCSP responder: host:"X.X.X.X:89", port:"80", path:http://ocsp.usertrust.com.