使用IBM JDK 1.8的cassandra 3.0.9 internode_encryption?

时间:2018-04-14 11:23:33

标签: cassandra ibm-jdk

除了更改密钥库和信任库密码以及在conf中安装相应的文件外,我对cassandra.yaml进行了以下更改:

internode_encryption: all
algorithm: IbmX509

另外,我设置了以下环境变量:

JAVA_HOME=/share/ibm-jdk1.8
JVM_OPTS=-Dcom.ibm.jsse2.overrideDefaultTLS=true

我调用bin / cassandra并最终看到......

***
SSLContextImpl:  Using X509ExtendedKeyManager com.ibm.jsse2.ay
SSLContextImpl:  Using X509TrustManager com.ibm.jsse2.aC
JsseJCE:  Using SecureRandom SHA2DRBG from provider IBMJCE version 1.8
trigger seeding of SecureRandom
done seeding SecureRandom
JsseJCE:  Using SecureRandom SHA2DRBG from provider IBMJCE version 1.8
JsseJCE:  Using signature SHA1withECDSA from provider TBD via init 
JsseJCE:  Using signature NONEwithECDSA from provider TBD via init 
JsseJCE:  Using KeyAgreement ECDH from provider IBMJCE version 1.8
JsseJCE:  Using KeyFactory EC from provider IBMJCE version 1.8
JsseJCE:  Using KeyPairGenerator EC from provider TBD via init 
JsseJCE:  Using cipher AES/GCM/NoPadding from provider TBD via init 
CipherBox:  Using cipher AES/GCM/NoPadding from provider from init IBMJCE version 1.8
JsseJCE:  Using cipher AES/CBC/NoPadding from provider TBD via init 
CipherBox:  Using cipher AES/CBC/NoPadding from provider from init IBMJCE version 1.8
jdk.tls.client.protocols is defined as null
SSLv3 protocol was requested but was not enabled
SSLv3 protocol was requested but was not enabled
SUPPORTED: [TLSv1, TLSv1.1, TLSv1.2]
SERVER_DEFAULT: [TLSv1, TLSv1.1, TLSv1.2]
CLIENT_DEFAULT: [TLSv1, TLSv1.1, TLSv1.2]
WARN  10:55:39 Filtering out [TLS_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_256_CBC_SHA, TLS_DHE_RSA_WITH_AES_128_CBC_SHA,
     

TLS_DHE_RSA_WITH_AES_256_CBC_SHA,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,   TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA]因为它不受支持   插座       启动期间遇到异常(java.lang.IllegalArgumentException):SSLv2Hello不是可识别的协议。       java.lang.IllegalArgumentException:SSLv2Hello不是公认的协议。

请告知。

0 个答案:

没有答案