Question

我正在使用cassandra 1.2 datastax社区版。我正在尝试启用client_encryption_options，并且服务器没有启动。我得到以下例外。

cassnadra.yaml配置

client_encryption_options: 
enabled: true 
keystore: C:/Projects/MainApp/cassandrakeystore.jks
keystore_password: cassandra 
require_client_auth: true 
# Set trustore and truststore_password if require_client_auth is true 
truststore: C:/Projects/MainApp/cassandratruststore.jks 
truststore_password: cassandra

启动时的例外

    ERROR [main] 2014-07-08 10:41:09,006 CassandraDaemon.java (line 464) Exception encountered during startup
 java.lang.RuntimeException: Unable to create thrift socket to localhost/127.0.0.1:9160
    at org.apache.cassandra.thrift.CustomTThreadPoolServer$Factory.buildTServer(CustomTThreadPoolServer.java:267)
    at org.apache.cassandra.thrift.TServerCustomFactory.buildTServer(TServerCustomFactory.java:46)
    at org.apache.cassandra.thrift.ThriftServer$ThriftServerThread.<init>(ThriftServer.java:105)
    at org.apache.cassandra.thrift.ThriftServer.start(ThriftServer.java:52)
    at org.apache.cassandra.service.CassandraDaemon.start(CassandraDaemon.java:400)
    at org.apache.cassandra.service.CassandraDaemon.activate(CassandraDaemon.java:460)
    at org.apache.cassandra.service.CassandraDaemon.main(CassandraDaemon.java:490)
Caused by: org.apache.thrift.transport.TTransportException: Could not bind to port 9160
    at org.apache.thrift.transport.TSSLTransportFactory.createServer(TSSLTransportFactory.java:117)
    at org.apache.thrift.transport.TSSLTransportFactory.getServerSocket(TSSLTransportFactory.java:103)
    at org.apache.cassandra.thrift.CustomTThreadPoolServer$Factory.buildTServer(CustomTThreadPoolServer.java:257)
    ... 6 more
Caused by: java.lang.IllegalArgumentException: Cannot support TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA with currently installed providers
    at com.sun.net.ssl.internal.ssl.CipherSuiteList.<init>(Unknown Source)
    at com.sun.net.ssl.internal.ssl.SSLServerSocketImpl.setEnabledCipherSuites(Unknown Source)
    at org.apache.thrift.transport.TSSLTransportFactory.createServer(TSSLTransportFactory.java:113)
    ... 8 more

Answer 1

乍一看，以下行让我觉得您需要安装JCE：引起：java.lang.IllegalArgumentException：无法支持当前安装的提供程序的TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA

请参阅：http://www.oracle.com/technetwork/java/javase/downloads/jce-7-download-432124.html

启用ssl启动时cassandra 1.2错误

1 个答案: