ssl - PKIX 路径构建失败 : sun. security.provider.certpath.SunCertPathBuilderException

标签 ssl wso2 paas

我试图在 HP Helion 公共(public)云(以前称为 HP Cloud)上安装 WSO2 Private PaaS 4.0.0。安装完成并出现以下错误

Starting WSO2 IS core service...
nohup: ignoring input and redirecting stderr to stdout
Restoring from the Original template file /home/ubuntu/paas/resources/json/os/partition.json
Deploying partition at /home/ubuntu/paas/resources/json/os/partition.json
{"Error":{ "errorCode": " 400", "errorMessage": " Invalid Partition Detected : P1. Cause: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target connecting to POST https://region-a.geo-1.identity.hpcloudsvc.com:35357/v2.0/tokens HTTP/1.1"}}Deploying autoscale policy at /home/ubuntu/paas/resources/json/os/autoscale-policy.json
{"stratosAdminResponse":{"message":"Successfully deployed autoscaling policy definition with id economy"}}Deploying deployment policy at /home/ubuntu/paas/resources/json/os/deployment-policy.json
{"Error":{ "errorCode": " 400", "errorMessage": " Deployment policy is invalid: [id] deployp"}}Deploying deployment policy at /home/ubuntu/paas/resources/json/os/deployment-flat.json
{"Error":{ "errorCode": " 400", "errorMessage": " Deployment policy is invalid: [id] deployf"}}Deploying LB cartridge at /home/ubuntu/paas/resources/json/os/lb-cart.json
{"Error":{ "errorCode": " 400", "errorMessage": " Unable to build the jclouds object for iaas of type: openstack"}}Deploying Aplication Server (AS) cartridge at /home/ubuntu/paas/resources/json/os/appserver-cart.json
{"Error":{ "errorCode": " 400", "errorMessage": " Unable to build the jclouds object for iaas of type: openstack"}}Deploying Application Service service
{"Error":{ "errorCode": " 400", "errorMessage": " Failed to deploy the Service [Cartridge type] appserver [alias] b25aa290-4d15-4160-ab29-3fb65450a50c . Cause: appserver is not a valid cartridgeSubscription type. Please try again with a valid cartridgeSubscription type."}}Deploying Business Process Server (BPS) cartridge at /home/ubuntu/paas/resources/json/os/bps-cart.json
{"Error":{ "errorCode": " 400", "errorMessage": " Unable to build the jclouds object for iaas of type: openstack"}}Deploying Business Process Server service
{"Error":{ "errorCode": " 400", "errorMessage": " Failed to deploy the Service [Cartridge type] bps [alias] 9f8501bd-2707-41b8-8169-575f76e80e74 . Cause: bps is not a valid cartridgeSubscription type. Please try again with a valid cartridgeSubscription type."}}

conf.sh

# IaaS configuration
export iaas="os"
# Region Name
export region="region-a.geo-1"
# Cartridge base image
export cartridge_base_img_id="xxxxxxxa2-bff1-41cf-8f92-c3xxxxxxx5b"

# OpenStack
export os_identity="1XXXXXXXXXX:XXXXX5BL7VXXXXXXXXX"
export os_credentials="AMXXXXXXXXXXXXXXXXXX"
export os_jclouds_endpoint="https://region-a.geo-1.identity.hpcloudsvc.com:35357/v2.0/"
export os_keypair_name="xxxxxx"
export os_security_groups="xxxxxxx"

我四处搜索,发现问题的原因是 PaaS 无法找到 jcloud 端点 ( https://region-a.geo-1.identity.hpcloudsvc.com:35357/v2.0 ) 的证书。

我首先尝试使用 keytool -import -keystore 命令将端点证书导入/usr/lib/jvm/java-7-oracle/jre/lib/security/cacerts。是行不通的,同样的问题仍然存在

然后我尝试将端点证书导入/home/ubuntu/.keystore。同样的问题仍然存在。

请指教

谢谢

乔治

最佳答案

后端(jclouds 端点)的 Cetifacte 应该添加到 WSO2 Private PaaS 的 client-truststore.jks。看看[1]

[1] http://evanthika.blogspot.com/2014/01/how-to-solve-pkix-path-building-failed.html

关于ssl - PKIX 路径构建失败 : sun. security.provider.certpath.SunCertPathBuilderException,我们在Stack Overflow上找到一个类似的问题: https://stackoverflow.com/questions/31311647/

相关文章:

WSO2Apimanager 补丁还原

c# - 如何监控Azure云服务辅助角色-PAAS上的本地存储磁盘空间

web-applications - Cloud Foundry 解释

iOS - 如何限制特定用户在不同设备上的应用程序安装

node.js - 为什么 requestjs 拒绝适用于 Firefox 的自签名 SSL 证书?

java - 读取 SSL 证书时 X509Certificate.getSubjectDN()' 出现空指针异常

java - PAAS 能否解决 BlazeDS 的可扩展性问题?

WCF net.tcp SSL、证书和用户名+密码认证

java - 如何在 WSO2 ESB 中运行自定义应用程序

wso2 - 无法使用 WSO2 ESB 控制台浏览基于 ActiveMQ 的消息存储中的消息