配置

Question

我们在存储端（8.1.4P1 7-模式）具有以下安全配置

配置

tls.enable on
ssl.enable on
ssl.v2.enable off
ssl.v3.enable off

我们尝试使用NetApp Manageability SDK 5.7访问存储，并且它与jdk1.8.0_161一起正常工作。

我们将JDK升级到jdk1.8.0_181，然后我们无法访问它，它的抛出异常

`2018-08-03 05:06:27,071 [Thread-1469] app-ERROR-javax.net.ssl.SSLException: Connection has been shutdown: `javax.net.ssl.SSLHandshakeException`: Received fatal alert: handshake_failure at` `sun.security.ssl.SSLSocketImpl.checkEOF(SSLSocketImpl.java:1551)`

    at sun.security.ssl.AppInputStream.read(AppInputStream.java:95)

    at sun.security.ssl.AppInputStream.read(AppInputStream.java:71)

    at netapp.manage.http.HTTPMessage.readLine(HTTPMessage.java:245)

    at netapp.manage.http.HTTPResponse.read(HTTPResponse.java:74)

    at netapp.manage.http.HTTPClient.doRequest(HTTPClient.java:772)

    at netapp.manage.NaServer.invokeHTTP(NaServer.java:955)

根据jdk“ jdk1.8.0_181”的发行说明，JDK 181禁用了“ 3DES密码套件”。

有什么办法可以从NetApp端对其进行修复？

Answer 1

尽管不能从NetApp方面直接回答如何解决此问题，但可以通过在运行时从jdk.tls.disabledAlgorithms安全属性中删除“ 3DES_EDE_CBC”来解决该问题。像这样：

<script src="https://cdnjs.cloudflare.com/ajax/libs/knockout/3.4.2/knockout-min.js"></script>
<script src="https://cdnjs.cloudflare.com/ajax/libs/knockout.mapping/2.4.1/knockout.mapping.min.js"></script>

<div class="col-md-4" style="text-align: left">
                    <select data-bind="options: PropertyTypes, optionsText: 'Type', optionsValue: 'PropertyTypeId', value: selectedPropertyType, optionsCaption: '<-- Select Property Type -->'"></select>
                </div>
<br/><br/>

<span data-bind="text: ko.toJSON(PropertyTypes)"></span>
<br/><br/>

<span data-bind="text: 'Selected: ' + ko.toJSON(selectedPropertyType)"></span>

无法将Netapp（8.1.4P1 7-模式）与jdk1.8.0_181连接

配置

1 个答案: