Question

我正在创建包含3个文件的Erlang服务器：cowbow-ca.crt，我猜是CA的证书，server.key和server.crt，但我在我看到此错误消息日志中。

=ERROR REPORT==== 3-Feb-2016::13:00:13 ===
Error in process <0.31594.15> on node 'node1@web02.example.lab' with exit value:
{closed,[{ranch_ssl,accept_ack,2,
                    [{file,"/www/web/staging/postman.example.lab/deps/ranch/src/ranch_ssl.erl"},
                     {line,115}]},
         {cowboy_protocol,init,4,
                          [{file,"/www/web/staging/postman.example.lab/deps/cowboy/src/cowboy_protocol.erl"},
                           {line,91}]}]}

=ERROR REPORT==== 3-Feb-2016::13:00:13 ===
Ranch listener https had connection process started with cowboy_protocol:start_link/4 at <0.31594.15> exit with reason: {closed,[{ranch_ssl,accept_ack,2,[{file,"/www/web/staging/postman.example.lab/deps/ranch/src/ranch_ssl.erl"},{line,115}]},{cowboy_protocol,init,4,[{file,"/www/web/staging/postman.example.lab/deps/cowboy/src/cowboy_protocol.erl"},{line,91}]}]}

=ERROR REPORT==== 3-Feb-2016::13:00:18 ===
SSL: certify: ssl_alert.erl:93:Fatal error: unknown ca

=ERROR REPORT==== 3-Feb-2016::13:01:11 ===
SSL: certify: ssl_alert.erl:93:Fatal error: unknown ca

=ERROR REPORT==== 3-Feb-2016::13:01:18 ===
SSL: certify: ssl_alert.erl:93:Fatal error: unknown ca

Answer 1

ssl_alert.erl:93中的致命错误表示这是通过TLS连接收到的警报。因此，这意味着连接到服务器的客户端无法识别颁发证书的CA.您可以通过将CA证书添加到客户端的可信证书颁发者列表来避免这种情况。

erlang日志中的未知ca.

1 个答案: