Question

我试图设置SSL配置。我的server.xml中的相关行是：

<sslDefault sslRef="defaultSSLSettings" />
<ssl id="defaultSSLSettings" 
     keyStoreRef="defaultKeyStore"
     trustStoreRef="trustedtKeyStore" 
     sslProtocol="TLS"  />

但是，当我的服务器启动时，我收到以下错误消息：

[ERROR   ] CWWKE0701E: [com.ibm.ws.clientcontainer.remote.server.ClientSupportImpl(395)] The activate method has thrown an exception Bundle:com.ibm.ws.clientcontainer.remote.server(id=164) java.lang.IllegalStateException: java.lang.IllegalStateException: No transport addressses configured for sslAlias: defaultSSLSettings with supports: 38 and requires: 6
    at com.ibm.ws.clientcontainer.remote.server.ClientSupportImpl.createMyPoa(ClientSupportImpl.java:328)
    at [internal classes]
Caused by: java.lang.IllegalStateException: No transport addressses configured for sslAlias: defaultSSLSettings with supports: 38 and requires: 6
    at com.ibm.ws.security.csiv2.server.config.tss.ServerConfigHelper.extractSSLTransport(ServerConfigHelper.java:219)
    ... 1 more

[ERROR   ] CWWKE0701E: [com.ibm.ws.clientcontainer.remote.server.ClientSupportImpl(395)] Failed creating the component instance; see log for reason Bundle:com.ibm.ws.clientcontainer.remote.server(id=164)   
[WARNING ] WELD-000411: Observer method [BackedAnnotatedMethod] private com.ibm.ws.beanvalidation.v11.cdi.internal.ValidationExtension.internalProcessAnnotatedType(@Observes ProcessAnnotatedType<Object>) receives events for all annotated types. Consider restricting events using @WithAnnotations or a generic type with bounds.
[WARNING ] WELD-000411: Observer method [BackedAnnotatedMethod] public com.ibm.ws.beanvalidation.v11.cdi.internal.ValidationExtension.processAnnotatedType(@Observes ProcessAnnotatedType<Object>, BeanManager) receives events for all annotated types. Consider restricting events using @WithAnnotations or a generic type with bounds.
[AUDIT   ] CWWKT0016I: Web application available (default_host): http://mq93943q.maple.fg.rbc.com:9080/
[AUDIT   ] CWWKZ0001I: Application SecurityPOC-ear started in 3.574 seconds.
[ERROR   ] CWWKE0701E: [com.ibm.ws.management.j2ee.mejb.service.ManagementEJBService(68)] The setServerStarted method has thrown an exception Bundle:com.ibm.ws.management.j2ee.mejb(id=264) java.lang.IllegalStateException: com.ibm.ws.ejbcontainer.osgi.internal.EJBRuntimeException: com.ibm.ws.exception.RuntimeError: java.lang.IllegalStateException: java.lang.IllegalStateException: No transport addressses configured for sslAlias: defaultSSLSettings with supports: 38 and requires: 6
    at com.ibm.ws.ejbcontainer.osgi.internal.EJBContainerImpl.startSystemModule(EJBContainerImpl.java:225)
    at [internal classes]
Caused by: com.ibm.ws.ejbcontainer.osgi.internal.EJBRuntimeException: com.ibm.ws.exception.RuntimeError: java.lang.IllegalStateException: java.lang.IllegalStateException: No transport addressses configured for sslAlias: defaultSSLSettings with supports: 38 and requires: 6
    at com.ibm.ws.ejbcontainer.osgi.internal.EJBRuntimeImpl.startSystemModule(EJBRuntimeImpl.java:944)
    ... 1 more
Caused by: com.ibm.ws.exception.RuntimeError: java.lang.IllegalStateException: java.lang.IllegalStateException: No transport addressses configured for sslAlias: defaultSSLSettings with supports: 38 and requires: 6
    at com.ibm.ws.ejbcontainer.runtime.AbstractEJBRuntime.startModule(AbstractEJBRuntime.java:587)
    ... 1 more
Caused by: java.lang.IllegalStateException: java.lang.IllegalStateException: No transport addressses configured for sslAlias: defaultSSLSettings with supports: 38 and requires: 6
    at com.ibm.ws.ejbcontainer.remote.internal.EJBRemoteRuntimeImpl.createPOA(EJBRemoteRuntimeImpl.java:294)
    ... 1 more
Caused by: java.lang.IllegalStateException: No transport addressses configured for sslAlias: defaultSSLSettings with supports: 38 and requires: 6
    at com.ibm.ws.security.csiv2.server.config.tss.ServerConfigHelper.extractSSLTransport(ServerConfigHelper.java:219)
    ... 1 more

谷歌搜索让我失望了。我似乎无法揭示根本原因。有人知道造成这种情况的原因以及如何解决这个问题吗？

感谢。

Answer 1

此时我认为您发现了一个错误。我需要一些时间来验证细节。同时我认为你可以尝试：

更改您的代码段，只需修改默认的ssl条目：

<!-- sslDefault sslRef="defaultSSLConfig" no longer needed, this is the default--/>
<ssl id="defaultSSLConfig" 
     keyStoreRef="defaultKeyStore"
     trustStoreRef="trustedtKeyStore" 
     sslProtocol="TLS"  />

或将其添加到您的server.xml：

<iiopEndpoint id="defaultIiopEndpoint" iiopPort="2809">
    <iiopsOptions  iiopsPort="9402" sslRef="defaultSSLSettings"/>
</iiopEndpoint>

其中任何一个都应该有用。

- 我还没有能够重现这个问题。你能看到你制作server.xml并且仍然有问题并发布它有多简单吗？非常感谢。

Answer 2

迈克尔，

您是否会检查此网址以查找您的问题？ http://www-01.ibm.com/support/knowledgecenter/SSAW57_8.5.5/com.ibm.websphere.wlp.nd.doc/ae/rwlp_restrict.html

Answer 3

此外，您的SSL配置显示 - trustStoreRef =＆＃34; trusted t KeyStore＆＃34; 。这是一个错字（附加 t ）还是你真的用这个确切的名字定义了一个trustStore？

Liberty Profile 8.5.5.6 - SSL配置不起作用

3 个答案: