自由简介8.5.5.6 - SSL配置不工作

Question

我“米试图建立一个SSL配置在我的server.xml中培训相关线路有：

<sslDefault sslRef="defaultSSLSettings" /> 
<ssl id="defaultSSLSettings" 
    keyStoreRef="defaultKeyStore" 
    trustStoreRef="trustedtKeyStore" 
    sslProtocol="TLS" /> 

然而，当我的服务器。启动时，我得到了以下错误消息：

[ERROR ] CWWKE0701E: [com.ibm.ws.clientcontainer.remote.server.ClientSupportImpl(395)] The activate method has thrown an exception Bundle:com.ibm.ws.clientcontainer.remote.server(id=164) java.lang.IllegalStateException: java.lang.IllegalStateException: No transport addressses configured for sslAlias: defaultSSLSettings with supports: 38 and requires: 6 
    at com.ibm.ws.clientcontainer.remote.server.ClientSupportImpl.createMyPoa(ClientSupportImpl.java:328) 
    at [internal classes] 
Caused by: java.lang.IllegalStateException: No transport addressses configured for sslAlias: defaultSSLSettings with supports: 38 and requires: 6 
    at com.ibm.ws.security.csiv2.server.config.tss.ServerConfigHelper.extractSSLTransport(ServerConfigHelper.java:219) 
    ... 1 more 

[ERROR ] CWWKE0701E: [com.ibm.ws.clientcontainer.remote.server.ClientSupportImpl(395)] Failed creating the component instance; see log for reason Bundle:com.ibm.ws.clientcontainer.remote.server(id=164) 
[WARNING ] WELD-000411: Observer method [BackedAnnotatedMethod] private com.ibm.ws.beanvalidation.v11.cdi.internal.ValidationExtension.internalProcessAnnotatedType(@Observes ProcessAnnotatedType<Object>) receives events for all annotated types. Consider restricting events using @WithAnnotations or a generic type with bounds. 
[WARNING ] WELD-000411: Observer method [BackedAnnotatedMethod] public com.ibm.ws.beanvalidation.v11.cdi.internal.ValidationExtension.processAnnotatedType(@Observes ProcessAnnotatedType<Object>, BeanManager) receives events for all annotated types. Consider restricting events using @WithAnnotations or a generic type with bounds. 
[AUDIT ] CWWKT0016I: Web application available (default_host): http://mq93943q.maple.fg.rbc.com:9080/ 
[AUDIT ] CWWKZ0001I: Application SecurityPOC-ear started in 3.574 seconds. 
[ERROR ] CWWKE0701E: [com.ibm.ws.management.j2ee.mejb.service.ManagementEJBService(68)] The setServerStarted method has thrown an exception Bundle:com.ibm.ws.management.j2ee.mejb(id=264) java.lang.IllegalStateException: com.ibm.ws.ejbcontainer.osgi.internal.EJBRuntimeException: com.ibm.ws.exception.RuntimeError: java.lang.IllegalStateException: java.lang.IllegalStateException: No transport addressses configured for sslAlias: defaultSSLSettings with supports: 38 and requires: 6 
    at com.ibm.ws.ejbcontainer.osgi.internal.EJBContainerImpl.startSystemModule(EJBContainerImpl.java:225) 
    at [internal classes] 
Caused by: com.ibm.ws.ejbcontainer.osgi.internal.EJBRuntimeException: com.ibm.ws.exception.RuntimeError: java.lang.IllegalStateException: java.lang.IllegalStateException: No transport addressses configured for sslAlias: defaultSSLSettings with supports: 38 and requires: 6 
    at com.ibm.ws.ejbcontainer.osgi.internal.EJBRuntimeImpl.startSystemModule(EJBRuntimeImpl.java:944) 
    ... 1 more 
Caused by: com.ibm.ws.exception.RuntimeError: java.lang.IllegalStateException: java.lang.IllegalStateException: No transport addressses configured for sslAlias: defaultSSLSettings with supports: 38 and requires: 6 
    at com.ibm.ws.ejbcontainer.runtime.AbstractEJBRuntime.startModule(AbstractEJBRuntime.java:587) 
    ... 1 more 
Caused by: java.lang.IllegalStateException: java.lang.IllegalStateException: No transport addressses configured for sslAlias: defaultSSLSettings with supports: 38 and requires: 6 
    at com.ibm.ws.ejbcontainer.remote.internal.EJBRemoteRuntimeImpl.createPOA(EJBRemoteRuntimeImpl.java:294) 
    ... 1 more 
Caused by: java.lang.IllegalStateException: No transport addressses configured for sslAlias: defaultSSLSettings with supports: 38 and requires: 6 
    at com.ibm.ws.security.csiv2.server.config.tss.ServerConfigHelper.extractSSLTransport(ServerConfigHelper.java:219) 
    ... 1 more 

谷歌搜索失败我，我似乎无法发现的根本原因是否有人知道是什么导致了这个问题以及如何解决它。？

谢谢。

Answer 1

Michael，

您会检查这个URL是否存在问题？
http://www-01.ibm.com/support/knowledgecenter/SSAW57_8.5.5/com.ibm.websphere.wlp.nd.doc/ae/rwlp_restrict.html

Answer 2

在这一点上，我认为你已经发现了一个错误。我需要一些时间来验证细节。同时，我认为你可以尝试两种：

改变你的片段，只是修改默认的SSL条目：

<!-- sslDefault sslRef="defaultSSLConfig" no longer needed, this is the default--/> 
<ssl id="defaultSSLConfig" 
    keyStoreRef="defaultKeyStore" 
    trustStoreRef="trustedtKeyStore" 
    sslProtocol="TLS" /> 

或添加到您的server.xml：这些

<iiopEndpoint id="defaultIiopEndpoint" iiopPort="2809"> 
    <iiopsOptions iiopsPort="9402" sslRef="defaultSSLSettings"/> 
</iiopEndpoint> 

任一个应该管用。

- 我还没有能够重现此问题呢。你能否看到你可以使你的server.xml有多简单，但仍然存在问题，并发布它？非常感谢。

Answer 3

另外，您的SSL配置显示 - trustStoreRef =“trusted t KeyStore”。这是一个错字（额外的t）还是你实际上用这个确切的名字定义了一个trustStore？