Unisphere for PowerMax：配置 LDAP-SSL 时出现错误，因为“SSL 证书无效，证书不符合算法约束”
Summary: 在 Unsiphere for PowerMax 9.1 中配置 LDAP-SSL 失败，并显示错误消息“SSL 证书无效错误证书不符合算法约束”
This article applies to
This article does not apply to
This article is not tied to any specific product.
Not all product versions are identified in this article.
Symptoms
smas.log中的错误：
Line 160196: Caused by: java.security.cert.CertPathValidatorException: Algorithm constraints check failed on signature algorithm: 1.2.840.113549.1.1.10 Line 160196: Caused by: java.security.cert.CertPathValidatorException: Algorithm constraints check failed on signature algorithm: 1.2.840.113549.1.1.10 Line 160201: 2021-09-01 09:45:37,324 ERROR [em.bp.SECURITY] (default task-57) com.emc.em.sage.usermgmt.AuthenticationConfigCommandProcessor.processValidateLdapConfigCommand:Failed to update LDAP value: com.emc.em.common.security.ldap.LdapConfigurationException: Invalid SSL Certificate Error Certificates do not conform to algorithm constraints
Cause
使用的签名算法是不支持的 RSASSA-PSS 。
错误消息 1.2.840.113549.1.1.10 中的 ID 确认签名算法是 RSASSA-PSS
错误消息 1.2.840.113549.1.1.10 中的 ID 确认签名算法是 RSASSA-PSS
Resolution
客户必须将算法更改为支持的算法 （SHA256） 并续订证书。
使用支持的算法续订证书后，可以成功配置 LDAP-SSL。
使用支持的算法续订证书后，可以成功配置 LDAP-SSL。
Affected Products
Unisphere for PowerMaxArticle Properties
Article Number: 000191548
Article Type: Solution
Last Modified: 12 Oct 2022
Version: 2
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.