PKIX路径验证失败：java.security.cert.CertPathValidatorException：签名检查失败异常，同时连接memsql ssl db

Question

我正在尝试通过mule-soft应用程序连接到SSL MySQL数据库，我有所需的证书并添加了相同但我收到以下错误。请帮帮我。

%% Invalidated:  [Session-1, TLS_RSA_WITH_AES_128_CBC_SHA]  
[Memsql_ssl].TEST.worker.01, SEND TLSv1 ALERT:  fatal, description = 
certificate_unknown  
[Memsql_ssl].TEST.worker.01, WRITE: TLSv1 Alert, length = 2  
[Memsql_ssl].TEST.worker.01, called closeSocket()  
[Memsql_ssl].TEST.worker.01, handling exception: 
javax.net.ssl.SSLHandshakeException: 
sun.security.validator.ValidatorException: PKIX path validation failed: 
java.security.cert.CertPathValidatorException: **signature check failed** 
[Memsql_ssl].TEST.worker.01, called close()  
[Memsql_ssl].TEST.worker.01, called closeInternal(true)  
ERROR 2017-05-17 16:17:17,268 [[Memsql_ssl].TEST.worker.01] 
org.mule.exception.DefaultMessagingExceptionStrategy:

这里签名检查失败的含义是什么？

Answer 1

证书的CN是否与您要访问的主机名匹配？您是否在Mule中输入了IP而不是在证书中声明的确切主机名？您确定将正确的证书导入Mule应用信任库吗？您的MySQL服务器可能有不同的SSL证书。问候。