跳转到主内容

使用 HTTPS 时 ONTAP AutoSupport 消息失败: SSL 证书问题

Views:
103
Visibility:
Public
Votes:
0
Category:
ontap-9
Specialty:
core
Last Updated:

适用场景

  • ONTAP 9
  •  用于AutoSupport消息的HTTPS传输协议

问题描述

  • 使用HTTPS作为传输的AutoSupport消息失败:

::> system node autosupport history show -node node_name -seq-num <seq_num> -instance
                 Node: node_name
     AutoSupport Sequence Number: seq_num
   Destination for This AutoSupport: https
            Trigger Event: callhome.management.log
         Time of Last Update: 1/12/2021 02:58:59
          Status of Delivery: transmission-failed
          Delivery Attempts: 15
         AutoSupport Subject: MANAGEMENT_LOG
             Delivery URI: 10.106.130.129:8080(support.netapp.com/put/AsupPut)
              Last Error: SSL certificate problem: unable to get local issuer certificate

::> autosupport check show-details -node node_name
      Node: node_name
    Category: http-https
   Component: http-put-destination
     Status: failed
     Detail: HTTP/S PUT connectivity check failed for destination:
           https://support.netapp.com/put/AsupPut/ via proxy -
           123.123.123.123:8080. Error: Peer certificate can not be
           authenticated with given Certificate Authority
           certificates.
 Corrective Action: Certificate issue. Please make sure you have the correct
           Root Certificate installed
   Component: http-post-destination
     Status: failed
     Detail: HTTP/S POST connectivity check failed for destination:
           https://support.netapp.com/asupprod/post/1.0/postAsup
           via proxy - 123.123.123.123:8080. Error: Peer certificate
           can not be authenticated with given Certificate
           Authority certificates.
 Corrective Action: Certificate issue. Please make sure you have the correct
           Root Certificate installed

  • 使用HTTP作为传输协议、AutoSupport消息可以成功传送到NetApp。
  • 类似的错误消息: 

message: SSL certificate problem: self signed certificate in certificate chain

Error: Peer certificate 无法使用给定进行身份验证 Certificate Authority certificates.

Error: asup.post.drop: AutoSupport message (HA Group Notification from node01 (USER_TRIGGERED (TEST:Test)) NOTICE) was not posted to NetApp. The system will drop the message.

  • 在中找到其他错误消息  /mroot/etc/log/mlog/notifyd.log:

::> system node run -node <node_name> -command rdfile /etc/log/mlog/notifyd.log

Sign in to view the entire content of this KB article.

New to NetApp?

Learn more about our award-winning Support

NetApp provides no representations or warranties regarding the accuracy or reliability or serviceability of any information or recommendations provided in this publication or with respect to any results that may be obtained by the use of the information or observance of any recommendations provided herein. The information in this document is distributed AS IS and the use of this information or the implementation of any recommendations or techniques herein is a customer's responsibility and depends on the customer's ability to evaluate and integrate them into the customer's operational environment. This document and the information contained herein may be used solely in connection with the NetApp products discussed in this document.