java - Liberty Profile 8.5.5.6 - SSL 配置不工作

Question

我正在尝试设置 SSL 配置。我的 server.xml 中的相关行是:

<sslDefault sslRef="defaultSSLSettings" />
<ssl id="defaultSSLSettings" 
     keyStoreRef="defaultKeyStore"
     trustStoreRef="trustedtKeyStore" 
     sslProtocol="TLS"  />

但是，当我的服务器启动时，我收到以下错误消息:

[ERROR   ] CWWKE0701E: [com.ibm.ws.clientcontainer.remote.server.ClientSupportImpl(395)] The activate method has thrown an exception Bundle:com.ibm.ws.clientcontainer.remote.server(id=164) java.lang.IllegalStateException: java.lang.IllegalStateException: No transport addressses configured for sslAlias: defaultSSLSettings with supports: 38 and requires: 6
    at com.ibm.ws.clientcontainer.remote.server.ClientSupportImpl.createMyPoa(ClientSupportImpl.java:328)
    at [internal classes]
Caused by: java.lang.IllegalStateException: No transport addressses configured for sslAlias: defaultSSLSettings with supports: 38 and requires: 6
    at com.ibm.ws.security.csiv2.server.config.tss.ServerConfigHelper.extractSSLTransport(ServerConfigHelper.java:219)
    ... 1 more

[ERROR   ] CWWKE0701E: [com.ibm.ws.clientcontainer.remote.server.ClientSupportImpl(395)] Failed creating the component instance; see log for reason Bundle:com.ibm.ws.clientcontainer.remote.server(id=164)   
[WARNING ] WELD-000411: Observer method [BackedAnnotatedMethod] private com.ibm.ws.beanvalidation.v11.cdi.internal.ValidationExtension.internalProcessAnnotatedType(@Observes ProcessAnnotatedType<Object>) receives events for all annotated types. Consider restricting events using @WithAnnotations or a generic type with bounds.
[WARNING ] WELD-000411: Observer method [BackedAnnotatedMethod] public com.ibm.ws.beanvalidation.v11.cdi.internal.ValidationExtension.processAnnotatedType(@Observes ProcessAnnotatedType<Object>, BeanManager) receives events for all annotated types. Consider restricting events using @WithAnnotations or a generic type with bounds.
[AUDIT   ] CWWKT0016I: Web application available (default_host): http://mq93943q.maple.fg.rbc.com:9080/
[AUDIT   ] CWWKZ0001I: Application SecurityPOC-ear started in 3.574 seconds.
[ERROR   ] CWWKE0701E: [com.ibm.ws.management.j2ee.mejb.service.ManagementEJBService(68)] The setServerStarted method has thrown an exception Bundle:com.ibm.ws.management.j2ee.mejb(id=264) java.lang.IllegalStateException: com.ibm.ws.ejbcontainer.osgi.internal.EJBRuntimeException: com.ibm.ws.exception.RuntimeError: java.lang.IllegalStateException: java.lang.IllegalStateException: No transport addressses configured for sslAlias: defaultSSLSettings with supports: 38 and requires: 6
    at com.ibm.ws.ejbcontainer.osgi.internal.EJBContainerImpl.startSystemModule(EJBContainerImpl.java:225)
    at [internal classes]
Caused by: com.ibm.ws.ejbcontainer.osgi.internal.EJBRuntimeException: com.ibm.ws.exception.RuntimeError: java.lang.IllegalStateException: java.lang.IllegalStateException: No transport addressses configured for sslAlias: defaultSSLSettings with supports: 38 and requires: 6
    at com.ibm.ws.ejbcontainer.osgi.internal.EJBRuntimeImpl.startSystemModule(EJBRuntimeImpl.java:944)
    ... 1 more
Caused by: com.ibm.ws.exception.RuntimeError: java.lang.IllegalStateException: java.lang.IllegalStateException: No transport addressses configured for sslAlias: defaultSSLSettings with supports: 38 and requires: 6
    at com.ibm.ws.ejbcontainer.runtime.AbstractEJBRuntime.startModule(AbstractEJBRuntime.java:587)
    ... 1 more
Caused by: java.lang.IllegalStateException: java.lang.IllegalStateException: No transport addressses configured for sslAlias: defaultSSLSettings with supports: 38 and requires: 6
    at com.ibm.ws.ejbcontainer.remote.internal.EJBRemoteRuntimeImpl.createPOA(EJBRemoteRuntimeImpl.java:294)
    ... 1 more
Caused by: java.lang.IllegalStateException: No transport addressses configured for sslAlias: defaultSSLSettings with supports: 38 and requires: 6
    at com.ibm.ws.security.csiv2.server.config.tss.ServerConfigHelper.extractSSLTransport(ServerConfigHelper.java:219)
    ... 1 more

谷歌搜索失败了。我似乎无法发现根本原因。有谁知道是什么原因造成的以及如何解决？

谢谢。

Answer 1

此时我认为您发现了一个错误。我需要一些时间来验证细节。同时，我认为您可以尝试以下任一方法:

更改您的代码段以仅修改默认的 ssl 条目:

<!-- sslDefault sslRef="defaultSSLConfig" no longer needed, this is the default--/>
<ssl id="defaultSSLConfig" 
     keyStoreRef="defaultKeyStore"
     trustStoreRef="trustedtKeyStore" 
     sslProtocol="TLS"  />

或将其添加到您的 server.xml 中:

<iiopEndpoint id="defaultIiopEndpoint" iiopPort="2809">
    <iiopsOptions  iiopsPort="9402" sslRef="defaultSSLSettings"/>
</iiopEndpoint>

其中任何一个都应该有效。

-- 我还没有能够重现这个问题。你能看出你制作 server.xml 有多简单但仍然有问题，然后发布它吗？非常感谢。