Geode SSL导致JmxManagerLocatorResponse ClassCastException

时间:2017-09-22 13:47:14

标签: gemfire geode

如果您将ss-enabled-components设置为all,然后启动定位器:

gfsh>start locator --name=IsLocator --bind-address=#.#.#.# --port=10334 --properties-file=..\config\gemfire.properties --security-properties-file=..\confi g\gfsecurity.properties --J=-Dgemfire.jmx-manager-start=true --J=-Dgemfire.jmx-manager=true

定位器开始正常。所以我尝试使用SSL连接将GFSH连接到定位器:

gfsh>connect --locator=#.#.#.#[10334] --use-ssl Please specify these SSL Configuration properties: key-store: trusted.keystore key-store-password: ******** trust-store: trusted.keystore trust-store-password: ******** ciphers: protocols: Connecting to Locator at [host=#.#.#.#, port=10334] ..

有错误

java.lang.ClassCastException: java.lang.Class cannot be cast to org.apache.geode.management.internal.JmxManagerLocatorResponse

此外,定位器日志显示Cluster configuration service start up completed successfully and is now running ....信息,但随后会出现重复错误,如下所示:

[info 2017/09/22 14:35:10.213 BST IsLocator <locator request thread[3]> tid=0x58] Exception in processing request from #.#.#.# javax.net.ssl.SSLException: Unrecognized SSL message, plaintext connection? at sun.security.ssl.InputRecord.handleUnknownRecord(InputRecord.java:710) at sun.security.ssl.InputRecord.read(InputRecord.java:527) at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:983) at sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1385) at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1413) at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1397) at org.apache.geode.internal.net.SocketCreator.configureServerSSLSocket(SocketCreator.java:1011) at org.apache.geode.distributed.internal.tcpserver.TcpServer.lambda$processRequest$0(TcpServer.java:345) at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149) at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624) at java.lang.Thread.run(Thread.java:748)

尝试与之通信的定位器是什么?

1 个答案:

答案 0 :(得分:0)

我认为这与未按照this question

在SSL证书中设置keyalg=EC有关