删除所有TLS PSK密码套件后、如果启用FIPS、则SnapMirror将失败

最后更新
另存为PDF

Views:: 32

Visibility:: Public

Votes:: 0

Category:: snapmirror<a>2009年692053</a>

Specialty:: core

Last Updated:

适用场景

ONTAP
SnapMirror

问题描述

-在启用FIPS的情况下删除所有非迪法-赫尔曼(DHE) TLS PSK密码套件会导致在启用加密后所有SnapMirror传输失败。在中可能会出现以下错误

Messages.log

==============================================================================================

0000001f.000b6012 0a1a82d8 Thu Aug 24 2023 15:30:23 -04:00 [kern_ktlsd:info:2395] [Aug 24 15:30:23]: 0x808bf8500: 0: INFO: ktlsd: serviceNetworkBio:src/tables/net_ssl_handshake.cc:1999 Enter 0000001f.000b6040 0a1a82d8 Thu Aug 24 2023 15:30:23 -04:00 [kern_ktlsd:info:2395] [Aug 24 15:30:23]: 0x808bf8500: 0: DEBUG: ktlsd: serviceNetworkBio:src/tables/net_ssl_handshake.cc:2036 BIO_read, no data 0000001f.000b6041 0a1a82d8 Thu Aug 24 2023 15:30:23 -04:00 [kern_ktlsd:info:2395] [Aug 24 15:30:23]: 0x808bf8500: 0: DEBUG: ktlsd: serviceNetworkBio:src/tables/net_ssl_handshake.cc:2045 BIO_get_read_request: wanted=5 0000001f.000b6042 0a1a82d8 Thu Aug 24 2023 15:30:23 -04:00 [kern_ktlsd:info:2395] [Aug 24 15:30:23]: 0x808bf8500: 0: DEBUG: ktlsd: serviceNetworkBio:src/tables/net_ssl_handshake.cc:2086 wanted 5, _wantPending 0, delta 5 0000001f.000b6053 0a1a82d8 Thu Aug 24 2023 15:30:23 -04:00 [kern_ktlsd:info:2395] [Aug 24 15:30:23]: 0x808bf8500: 0: INFO: ktlsd: serviceNetworkBio:src/tables/net_ssl_handshake.cc:2138 Exit 0000001f.000b6054 0a1a82d8 Thu Aug 24 2023 15:30:23 -04:00 [kern_ktlsd:info:2395] [Aug 24 15:30:23]: 0x808bf8500: 0: INFO: ktlsd: _serviceThread:src/tables/net_ssl_handshake.cc:2642 SSL service thread: vserver 4294967295, handle 42949674910 0000001f.000b6055 0a1a82d8 Thu Aug 24 2023 15:30:23 -04:00 [kern_ktlsd:info:2395] [Aug 24 15:30:23]: 0x808bf8500: 0: INFO: ktlsd: serviceNetworkBio:src/tables/net_ssl_handshake.cc:1999 Enter 0000001f.000b6056 0a1a82d8 Thu Aug 24 2023 15:30:23 -04:00 [kern_ktlsd:info:2395] [Aug 24 15:30:23]: 0x808bf8500: 0: DEBUG: ktlsd: serviceNetworkBio:src/tables/net_ssl_handshake.cc:2036 BIO_read, no data 0000001f.000b6057 0a1a82d8 Thu Aug 24 2023 15:30:23 -04:00 [kern_ktlsd:info:2395] [Aug 24 15:30:23]: 0x808bf8500: 0: DEBUG: ktlsd: serviceNetworkBio:src/tables/net_ssl_handshake.cc:2045 BIO_get_read_request: wanted=5 0000001f.000b6058 0a1a82d8 Thu Aug 24 2023 15:30:23 -04:00 [kern_ktlsd:info:2395] [Aug 24 15:30:23]: 0x808bf8500: 0: INFO: ktlsd: serviceNetworkBio:src/tables/net_ssl_handshake.cc:2138 Exit

==============================================================================================