HTTPS 憑證變更後，PowerFlex 閘道無法使用

Summary: 問題說明： 將 PowerFlex Gateway 用於瀏覽器存取的 SSL 憑證從自我簽署憑證變更為自訂後，網頁將無法再存取。

This article applies to This article does not apply to This article is not tied to any specific product. Not all product versions are identified in this article.
Check out other resources

Symptoms

症狀

 - 使用閘道的IP或DNS名稱表示無法訪問網站。

 - 服務正在成功運行。

# systemctl status scaleio-gateway
● scaleio-gateway.service - EMC ScaleIO Gateway service
   Loaded: loaded (/etc/systemd/system/scaleio-gateway.service; enabled; vendor preset: disabled)
   Active: active (running) since Mon 2023-11-06 13:21:11 EST; 3min 44s ago
  Process: 23621 ExecStart=/opt/emc/scaleio/gateway/bin/startup.sh > /dev/null 2> /dev/null (code=exited, status=0/SUCCESS)
 Main PID: 23635 (java)
   CGroup: /system.slice/scaleio-gateway.service
           └─23635 /usr/bin/java -Djava.util.logging.config.file=/opt/emc/scaleio/gateway/conf/logging.properties -Djava.util.logging.manager=org.apache.jul...

Nov 06 13:21:11 rhel-79 systemd[1]: Starting EMC ScaleIO Gateway service...
Nov 06 13:21:11 rhel-79 startup.sh[23621]: Tomcat started.
Nov 06 13:21:11 rhel-79 systemd[1]: Started EMC ScaleIO Gateway service.


 - Catalina 紀錄檔顯示無法開啟金鑰庫：

06-Nov-2023 11:59:04.189 SEVERE [main] org.apache.catalina.core.StandardService.initInternal Failed to initialize connector [Connector[HTTP/1.1-443]]
        org.apache.catalina.LifecycleException: Protocol handler initialization failed
                at org.apache.catalina.connector.Connector.initInternal(Connector.java:1075)
                at org.apache.catalina.util.LifecycleBase.init(LifecycleBase.java:136)
        Caused by: java.lang.IllegalArgumentException: Keystore was tampered with, or password was incorrect
 

影響

閘道 UI 無法使用。 

Cause

根本原因

在這種情況下，/opt/emc/scaleio/gateway/conf/catalina.properties 檔案有兩個值會在將自訂憑證新增至閘道時進行編輯：
keystore.file = <keystore location>
keystore.password = <password>

金鑰存放區密碼在行結尾有額外空格。 

Resolution

因應措施

刪除密碼行末尾的多餘空格，然後重新啟動閘道服務。

service scaleio-gateway restart

 

使用此命令確認是否可以按預期開啟金鑰庫：

keytool -list -keystore <keystore location> -storepass <password>
如果打開，則表示密碼正確。

受影響的版本

PowerFlex 3.x

已修正問題的版本

N/A - 不是 PowerFlex 問題

Products

PowerFlex rack, VxFlex Ready Nodes, PowerFlex custom node, PowerFlex appliance R650, PowerFlex appliance R6525, PowerFlex appliance R660, PowerFlex appliance R6625, Powerflex appliance R750, PowerFlex appliance R760, PowerFlex appliance R7625 , PowerFlex custom node, PowerFlex custom node R650, PowerFlex custom node R6525, PowerFlex custom node R660, PowerFlex custom node R6625, PowerFlex custom node R750, PowerFlex custom node R760, PowerFlex custom node R7625, PowerFlex custom node R860, PowerFlex appliance R640, PowerFlex appliance R740XD, PowerFlex appliance R7525, PowerFlex appliance R840 ...
Article Properties
Article Number: 000263856
Article Type: Solution
Last Modified: 24 Dec 2024
Version:  1
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.