zookeeper ssl exception 해결 방법 아시는분 계신가요?ㅠ

Question

zookeeper에 ssl 인증서를 적용하려고 합니다.https://m.blog.naver.com/PostView.naver?isHttpsRedirect&#61;true&blogId&#61;albertx&logNo&#61;100174959744위의 블로그를 통해 생성한 keystore와 truststore, sscCert.cer을 각각 zkServer.sh와 zkCli.sh에 적용하였고 java cacerts에도 sscCert.cer을 추가하였습니다.zoo.cfgtickTime&#61;10000 initLimit&#61;10 syncLimit&#61;5 dataDir&#61;/var/lib/zookeeper/data #clientPort&#61;2181 secureClientPort&#61;2281 admin.enableServer&#61;false server.1&#61;{도메인명}:2888:3888zkServer.shexport SERVER_JVMFLAGS&#61;&#34; -Dzookeeper.serverCnxnFactory&#61;org.apache.zookeeper.server.NettyServerCnxnFactory -Dzookeeper.ssl.keyStore.location&#61;/etc/.keystore/keystore.jks -Dzookeeper.ssl.keyStore.password&#61;pass -Dzookeeper.ssl.trustStore.location&#61;/etc/.keystore/truststore.jks -Dzookeeper.ssl.trustStore.password&#61;pass -Djavax.net.debug&#61;all&#34;zkCli.shexport CLIENT_JVMFLAGS&#61;&#34; -Dzookeeper.clientCnxnSocket&#61;org.apache.zookeeper.ClientCnxnSocketNetty -Dzookeeper.client.secure&#61;true -Dzookeeper.ssl.keyStore.location&#61;/etc/.keystore/keystore.jks -Dzookeeper.ssl.keyStore.password&#61;pass -Dzookeeper.ssl.trustStore.location&#61;/etc/.keystore/truststore.jks -Dzookeeper.ssl.trustStore.password&#61;pass&#34;java cacerts keystore 등록keytool -importcert -alias sscCert.cer -file sscCert.cer -keystore //usr/lib/jvm/java-1.8.0-openjdk/jre/lib/security/cacerts -storepass changeit -noprompt근데 계속해서 아래와 같은 에러가 나오고 있습니다ㅠㅠㅠ./zkServer.sh start로 zookeeper 실행 후 /etc/hosts에 등록한 도메인명과 zkCli.sh으로 접속하였습니다.접속 방법 : ./zkCli.sh -server {도메인명}:22812023-01-05 15:19:06,638 [myid:2] - WARN [nioEventLoopGroup-4-1:X509Util&#64;346] - zookeeper.ssl.keyStore.location not specified 2023-01-05 15:19:06,638 [myid:2] - WARN [nioEventLoopGroup-4-1:X509Util&#64;367] - zookeeper.ssl.trustStore.location not specified 2023-01-05 15:19:07,284 [myid:2] - ERROR [nioEventLoopGroup-4-1:NettyServerCnxnFactory$CertificateVerifier&#64;434] - Unsuccessful handshake with session 0x0 2023-01-05 15:19:07,330 [myid:2] - WARN [nioEventLoopGroup-4-1:NettyServerCnxnFactory$CnxnChannelHandler&#64;273] - Exception caught io.netty.handler.codec.DecoderException: javax.net.ssl.SSLHandshakeException: no cipher suites in common at io.netty.handler.codec.ByteToMessageDecoder.callDecode(ByteToMessageDecoder.java:468) at io.netty.handler.codec.ByteToMessageDecoder.channelRead(ByteToMessageDecoder.java:276) at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:377) at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:363) at io.netty.channel.AbstractChannelHandlerContext.fireChannelRead(AbstractChannelHandlerContext.java:355) at io.netty.channel.DefaultChannelPipeline$HeadContext.channelRead(DefaultChannelPipeline.java:1410) at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:377) at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:363) at io.netty.channel.DefaultChannelPipeline.fireChannelRead(DefaultChannelPipeline.java:919) at io.netty.channel.nio.AbstractNioByteChannel$NioByteUnsafe.read(AbstractNioByteChannel.java:163) at io.netty.channel.nio.NioEventLoop.processSelectedKey(NioEventLoop.java:714) at io.netty.channel.nio.NioEventLoop.processSelectedKeysOptimized(NioEventLoop.java:650) at io.netty.channel.nio.NioEventLoop.processSelectedKeys(NioEventLoop.java:576) at io.netty.channel.nio.NioEventLoop.run(NioEventLoop.java:493) at io.netty.util.concurrent.SingleThreadEventExecutor$4.run(SingleThreadEventExecutor.java:989) at io.netty.util.internal.ThreadExecutorMap$2.run(ThreadExecutorMap.java:74) at io.netty.util.concurrent.FastThreadLocalRunnable.run(FastThreadLocalRunnable.java:30) at java.lang.Thread.run(Thread.java:750) Caused by: javax.net.ssl.SSLHandshakeException: no cipher suites in common at sun.security.ssl.Alert.createSSLException(Alert.java:131) at sun.security.ssl.Alert.createSSLException(Alert.java:117) at sun.security.ssl.TransportContext.fatal(TransportContext.java:311) at sun.security.ssl.TransportContext.fatal(TransportContext.java:267) at sun.security.ssl.TransportContext.fatal(TransportContext.java:258) at sun.security.ssl.ServerHello$T12ServerHelloProducer.chooseCipherSuite(ServerHello.java:461) at sun.security.ssl.ServerHello$T12ServerHelloProducer.produce(ServerHello.java:296) at sun.security.ssl.SSLHandshake.produce(SSLHandshake.java:421) at sun.security.ssl.ClientHello$T12ClientHelloConsumer.consume(ClientHello.java:1020) at sun.security.ssl.ClientHello$ClientHelloConsumer.onClientHello(ClientHello.java:727) at sun.security.ssl.ClientHello$ClientHelloConsumer.consume(ClientHello.java:693) at sun.security.ssl.SSLHandshake.consume(SSLHandshake.java:377) at sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:444) at sun.security.ssl.SSLEngineImpl$DelegatedTask$DelegatedAction.run(SSLEngineImpl.java:981) at sun.security.ssl.SSLEngineImpl$DelegatedTask$DelegatedAction.run(SSLEngineImpl.java:968) at java.security.AccessController.doPrivileged(Native Method) at sun.security.ssl.SSLEngineImpl$DelegatedTask.run(SSLEngineImpl.java:915) at io.netty.handler.ssl.SslHandler.runAllDelegatedTasks(SslHandler.java:1494) at io.netty.handler.ssl.SslHandler.runDelegatedTasks(SslHandler.java:1508) at io.netty.handler.ssl.SslHandler.unwrap(SslHandler.java:1392) at io.netty.handler.ssl.SslHandler.decodeJdkCompatible(SslHandler.java:1219) at io.netty.handler.ssl.SslHandler.decode(SslHandler.java:1266) at io.netty.handler.codec.ByteToMessageDecoder.decodeRemovalReentryProtection(ByteToMessageDecoder.java:498) at io.netty.handler.codec.ByteToMessageDecoder.callDecode(ByteToMessageDecoder.java:437) ... 17 more 2023-01-05 15:19:08,930 [myid:2] - ERROR [nioEventLoopGroup-4-2:NettyServerCnxnFactory$CertificateVerifier&#64;434] - Unsuccessful handshake with session 0x0 2023-01-05 15:19:08,972 [myid:2] - WARN [nioEventLoopGroup-4-2:NettyServerCnxnFactory$CnxnChannelHandler&#64;273] - Exception caught io.netty.handler.codec.DecoderException: javax.net.ssl.SSLHandshakeException: no cipher suites in common at io.netty.handler.codec.ByteToMessageDecoder.callDecode(ByteToMessageDecoder.java:468) at io.netty.handler.codec.ByteToMessageDecoder.channelRead(ByteToMessageDecoder.java:276) at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:377) at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:363) at io.netty.channel.AbstractChannelHandlerContext.fireChannelRead(AbstractChannelHandlerContext.java:355) at io.netty.channel.DefaultChannelPipeline$HeadContext.channelRead(DefaultChannelPipeline.java:1410) at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:377) at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:363) at io.netty.channel.DefaultChannelPipeline.fireChannelRead(DefaultChannelPipeline.java:919) at io.netty.channel.nio.AbstractNioByteChannel$NioByteUnsafe.read(AbstractNioByteChannel.java:163) at io.netty.channel.nio.NioEventLoop.processSelectedKey(NioEventLoop.java:714) at io.netty.channel.nio.NioEventLoop.processSelectedKeysOptimized(NioEventLoop.java:650) at io.netty.channel.nio.NioEventLoop.processSelectedKeys(NioEventLoop.java:576) at io.netty.channel.nio.NioEventLoop.run(NioEventLoop.java:493) at io.netty.util.concurrent.SingleThreadEventExecutor$4.run(SingleThreadEventExecutor.java:989) at io.netty.util.internal.ThreadExecutorMap$2.run(ThreadExecutorMap.java:74) at io.netty.util.concurrent.FastThreadLocalRunnable.run(FastThreadLocalRunnable.java:30) at java.lang.Thread.run(Thread.java:750) Caused by: javax.net.ssl.SSLHandshakeException: no cipher suites in common at sun.security.ssl.Alert.createSSLException(Alert.java:131) at sun.security.ssl.Alert.createSSLException(Alert.java:117) at sun.security.ssl.TransportContext.fatal(TransportContext.java:311) at sun.security.ssl.TransportContext.fatal(TransportContext.java:267) at sun.security.ssl.TransportContext.fatal(TransportContext.java:258) at sun.security.ssl.ServerHello$T12ServerHelloProducer.chooseCipherSuite(ServerHello.java:461) at sun.security.ssl.ServerHello$T12ServerHelloProducer.produce(ServerHello.java:296) at sun.security.ssl.SSLHandshake.produce(SSLHandshake.java:421) at sun.security.ssl.ClientHello$T12ClientHelloConsumer.consume(ClientHello.java:1020) at sun.security.ssl.ClientHello$ClientHelloConsumer.onClientHello(ClientHello.java:727) at sun.security.ssl.ClientHello$ClientHelloConsumer.consume(ClientHello.java:693) at sun.security.ssl.SSLHandshake.consume(SSLHandshake.java:377) at sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:444) at sun.security.ssl.SSLEngineImpl$DelegatedTask$DelegatedAction.run(SSLEngineImpl.java:981) at sun.security.ssl.SSLEngineImpl$DelegatedTask$DelegatedAction.run(SSLEngineImpl.java:968) at java.security.AccessController.doPrivileged(Native Method) at sun.security.ssl.SSLEngineImpl$DelegatedTask.run(SSLEngineImpl.java:915) at io.netty.handler.ssl.SslHandler.runAllDelegatedTasks(SslHandler.java:1494) at io.netty.handler.ssl.SslHandler.runDelegatedTasks(SslHandler.java:1508) at io.netty.handler.ssl.SslHandler.unwrap(SslHandler.java:1392) at io.netty.handler.ssl.SslHandler.decodeJdkCompatible(SslHandler.java:1219) at io.netty.handler.ssl.SslHandler.decode(SslHandler.java:1266) at io.netty.handler.codec.ByteToMessageDecoder.decodeRemovalReentryProtection(ByteToMessageDecoder.java:498) at io.netty.handler.codec.ByteToMessageDecoder.callDecode(ByteToMessageDecoder.java:437) ... 17 more ^C 해결 방법 알고 계시다면 답글 부탁드립니다...(일주일 넘게 해당 문제로 고군분투 하고 있습니다)

zookeeper ssl exception 해결 방법 아시는분 계신가요?ㅠ

0개의 답변

#zookeeper 목록