自由簡介8.5.5.6 - SSL配置不工作

Question

我「米試圖建立一個SSL配置在我的server.xml中培訓相關線路有：

<sslDefault sslRef="defaultSSLSettings" /> 
<ssl id="defaultSSLSettings" 
    keyStoreRef="defaultKeyStore" 
    trustStoreRef="trustedtKeyStore" 
    sslProtocol="TLS" /> 

然而，當我的服務器。啓動時，我得到了以下錯誤消息：

[ERROR ] CWWKE0701E: [com.ibm.ws.clientcontainer.remote.server.ClientSupportImpl(395)] The activate method has thrown an exception Bundle:com.ibm.ws.clientcontainer.remote.server(id=164) java.lang.IllegalStateException: java.lang.IllegalStateException: No transport addressses configured for sslAlias: defaultSSLSettings with supports: 38 and requires: 6 
    at com.ibm.ws.clientcontainer.remote.server.ClientSupportImpl.createMyPoa(ClientSupportImpl.java:328) 
    at [internal classes] 
Caused by: java.lang.IllegalStateException: No transport addressses configured for sslAlias: defaultSSLSettings with supports: 38 and requires: 6 
    at com.ibm.ws.security.csiv2.server.config.tss.ServerConfigHelper.extractSSLTransport(ServerConfigHelper.java:219) 
    ... 1 more 

[ERROR ] CWWKE0701E: [com.ibm.ws.clientcontainer.remote.server.ClientSupportImpl(395)] Failed creating the component instance; see log for reason Bundle:com.ibm.ws.clientcontainer.remote.server(id=164) 
[WARNING ] WELD-000411: Observer method [BackedAnnotatedMethod] private com.ibm.ws.beanvalidation.v11.cdi.internal.ValidationExtension.internalProcessAnnotatedType(@Observes ProcessAnnotatedType<Object>) receives events for all annotated types. Consider restricting events using @WithAnnotations or a generic type with bounds. 
[WARNING ] WELD-000411: Observer method [BackedAnnotatedMethod] public com.ibm.ws.beanvalidation.v11.cdi.internal.ValidationExtension.processAnnotatedType(@Observes ProcessAnnotatedType<Object>, BeanManager) receives events for all annotated types. Consider restricting events using @WithAnnotations or a generic type with bounds. 
[AUDIT ] CWWKT0016I: Web application available (default_host): http://mq93943q.maple.fg.rbc.com:9080/ 
[AUDIT ] CWWKZ0001I: Application SecurityPOC-ear started in 3.574 seconds. 
[ERROR ] CWWKE0701E: [com.ibm.ws.management.j2ee.mejb.service.ManagementEJBService(68)] The setServerStarted method has thrown an exception Bundle:com.ibm.ws.management.j2ee.mejb(id=264) java.lang.IllegalStateException: com.ibm.ws.ejbcontainer.osgi.internal.EJBRuntimeException: com.ibm.ws.exception.RuntimeError: java.lang.IllegalStateException: java.lang.IllegalStateException: No transport addressses configured for sslAlias: defaultSSLSettings with supports: 38 and requires: 6 
    at com.ibm.ws.ejbcontainer.osgi.internal.EJBContainerImpl.startSystemModule(EJBContainerImpl.java:225) 
    at [internal classes] 
Caused by: com.ibm.ws.ejbcontainer.osgi.internal.EJBRuntimeException: com.ibm.ws.exception.RuntimeError: java.lang.IllegalStateException: java.lang.IllegalStateException: No transport addressses configured for sslAlias: defaultSSLSettings with supports: 38 and requires: 6 
    at com.ibm.ws.ejbcontainer.osgi.internal.EJBRuntimeImpl.startSystemModule(EJBRuntimeImpl.java:944) 
    ... 1 more 
Caused by: com.ibm.ws.exception.RuntimeError: java.lang.IllegalStateException: java.lang.IllegalStateException: No transport addressses configured for sslAlias: defaultSSLSettings with supports: 38 and requires: 6 
    at com.ibm.ws.ejbcontainer.runtime.AbstractEJBRuntime.startModule(AbstractEJBRuntime.java:587) 
    ... 1 more 
Caused by: java.lang.IllegalStateException: java.lang.IllegalStateException: No transport addressses configured for sslAlias: defaultSSLSettings with supports: 38 and requires: 6 
    at com.ibm.ws.ejbcontainer.remote.internal.EJBRemoteRuntimeImpl.createPOA(EJBRemoteRuntimeImpl.java:294) 
    ... 1 more 
Caused by: java.lang.IllegalStateException: No transport addressses configured for sslAlias: defaultSSLSettings with supports: 38 and requires: 6 
    at com.ibm.ws.security.csiv2.server.config.tss.ServerConfigHelper.extractSSLTransport(ServerConfigHelper.java:219) 
    ... 1 more 

谷歌搜索失敗我，我似乎無法發現的根本原因是否有人知道是什麼導致了這個問題以及如何解決它。？

謝謝。

Answer 1

Michael，

您會檢查這個URL是否存在問題？
http://www-01.ibm.com/support/knowledgecenter/SSAW57_8.5.5/com.ibm.websphere.wlp.nd.doc/ae/rwlp_restrict.html

Answer 2

在這一點上，我認爲你已經發現了一個錯誤。我需要一些時間來驗證細節。同時，我認爲你可以嘗試兩種：

改變你的片段，只是修改默認的SSL條目：

<!-- sslDefault sslRef="defaultSSLConfig" no longer needed, this is the default--/> 
<ssl id="defaultSSLConfig" 
    keyStoreRef="defaultKeyStore" 
    trustStoreRef="trustedtKeyStore" 
    sslProtocol="TLS" /> 

或添加到您的server.xml：這些

<iiopEndpoint id="defaultIiopEndpoint" iiopPort="2809"> 
    <iiopsOptions iiopsPort="9402" sslRef="defaultSSLSettings"/> 
</iiopEndpoint> 

任一個應該管用。

- 我還沒有能夠重現此問題呢。你能否看到你可以使你的server.xml有多簡單，但仍然存在問題，併發布它？非常感謝。

Answer 3

另外，您的SSL配置顯示 - trustStoreRef =「trusted t KeyStore」。這是一個錯字（額外的t）還是你實際上用這個確切的名字定義了一個trustStore？