【问题标题】:SSL Connectivity fails between corda node and artemis deployed in kubernetes clusterKubernetes集群中部署的corda节点和artemis之间的SSL连接失败
【发布时间】:2020-03-08 21:56:34
【问题描述】:

我们正在尝试将 Corda 节点连接到独立的 Artemis 服务器(两者都部署在 kubernetes 集群中),如 Corda documentation 中所述。启动 Corda 节点后,我们得到以下错误:

Caused by: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid cert ification path to requested target
        at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:397)~[?:1.8.0_212]
        at sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:302)~[?:1.8.0_212]
        at sun.security.validator.Validator.validate(Validator.java:262)~[?:1.8.0_212]
        at sun.security.ssl.X509TrustManagerImpl.validate(X509TrustManagerImpl.java:324)~[?:1.8.0_212]
        at sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:281)~[?:1.8.0_212]
        at sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:136)~[?:1.8.0_212]
        at sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1626)~[?:1.8.0_212]
        at sun.security.ssl.ClientHandshaker.processMessage(ClientHandshaker.java:223)~[?:1.8.0_212]
        at sun.security.ssl.Handshaker.processLoop(Handshaker.java:1037)~[?:1.8.0_212]
        at sun.security.ssl.Handshaker$1.run(Handshaker.java:970) ~[?:1.8.0_212]
        at sun.security.ssl.Handshaker$1.run(Handshaker.java:967) ~[?:1.8.0_212]
        at java.security.AccessController.doPrivileged(Native Method) ~[?:1.8.0_212]
        at sun.security.ssl.Handshaker$DelegatedTask.run(Handshaker.java:1459)~[?:1.8.0_212]
        at io.netty.handler.ssl.SslHandler.runDelegatedTasks(SslHandler.java:1457)~[netty-handler-4.1.29.Final.jar:4.1.29.Final]
        at io.netty.handler.ssl.SslHandler.unwrap(SslHandler.java:1365)~[netty-handler-4.1.29.Final.jar:4.1.29.Final]
        ... 17 more
Caused by: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
        at sun.security.provider.certpath.SunCertPathBuilder.build(SunCertPathBuilder.java:141)~[?:1.8.0_212]
        at sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathBuilder.java:126)~[?:1.8.0_212]
        at java.security.cert.CertPathBuilder.build(CertPathBuilder.java:280)~[?:1.8.0_212]
        at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:392)~[?:1.8.0_212]
        at sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:302)~[?:1.8.0_212]
        at sun.security.validator.Validator.validate(Validator.java:262)~[?:1.8.0_212]
        at sun.security.ssl.X509TrustManagerImpl.validate(X509TrustManagerImpl.java:324)~[?:1.8.0_212]
        at sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:281)~[?:1.8.0_212]
        at sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:136)~[?:1.8.0_212]
        at sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1626)~[?:1.8.0_212]
        at sun.security.ssl.ClientHandshaker.processMessage(ClientHandshaker.java:223)~[?:1.8.0_212]
        at sun.security.ssl.Handshaker.processLoop(Handshaker.java:1037)~[?:1.8.0_212]
        at sun.security.ssl.Handshaker$1.run(Handshaker.java:970) ~[?:1.8.0_212]
        at sun.security.ssl.Handshaker$1.run(Handshaker.java:967) ~[?:1.8.0_212]
        at java.security.AccessController.doPrivileged(Native Method) ~[?:1.8.0_212]
        at sun.security.ssl.Handshaker$DelegatedTask.run(Handshaker.java:1459)~[?:1.8.0_212]
        at io.netty.handler.ssl.SslHandler.runDelegatedTasks(SslHandler.java:1457)~[netty-handler-4.1.29.Final.jar:4.1.29.Final]
        at io.netty.handler.ssl.SslHandler.unwrap(SslHandler.java:1365)~[netty-handler-4.1.29.Final.jar:4.1.29.Final]
        ... 17 more

【问题讨论】:

  • 能否提供来自 ActiveMQ Artemis 的 broker.xml 以及 Corda 配置?

标签: docker ssl corda activemq-artemis


【解决方案1】:

请参阅我们关于通过 kubernetes 部署 Corda 节点的教程,地址为 Part1Part2

很可能,您在设置过程中遗漏了一些步骤,并且您的节点甚至还没有真正启动。

【讨论】:

    猜你喜欢
    • 2023-01-30
    • 2018-10-17
    • 2021-06-23
    • 1970-01-01
    • 1970-01-01
    • 2020-03-22
    • 2018-12-30
    • 2023-01-29
    • 1970-01-01
    相关资源
    最近更新 更多