如何配置启用SSL
为提高效率,提问时请提供以下信息,问题描述清晰可优先响应。
【GBase版本】:GBaseV8.8_TL_3.5.1_3X2
【操作系统】: Ubuntu22.04
【CPU】: Intel x86
【问题描述】*: 如何在服务端开启SSL,我当前参考CSDN博客做法:
1. onconfig配置参数encrypt VP和相应的网络类型
DBSERVERALIASES gbase01_ssl
VPCLASS encrypt,num=1
NETTYPE socssl,1,150,NET
2. ${GBASEDBTSQLHOSTS}.ext,指向数据加密传输的配置文件
# ${GBASEDBTSQLHOSTS}.ext
[config]
GBS_TYPE=gbasessl
# DBSERVERNAME or DBSERVERALIASES with onsocssl
[gbase01_ssl]
server=gbase_ssl_server
client=gbase_ssl_client
[gbase_ssl_server]
TLSCACertificateFile=/opt/gbase/certs/ca/ca-cert.pem
TLSCertificateFile=/opt/gbase/certs/server/server-cert.pem
TLSCertificateKeyFile=/opt/gbase/certs/server/server-key.pem
TLSCertificateKeyFilePasswd=DqOUlNa1c2OMcEEbvTG30w==
TLSVerifyCert=never
[gbase_ssl_client]
TLSCACertificateFile=/opt/gbase/certs/ca/ca-cert.pem
TLSCertificateFile=/opt/gbase/certs/dba1/dba1-cert.pem
TLSCertificateKeyFile=/opt/gbase/certs/dba1/dba1-key.pem
TLSCertificateKeyFilePasswd=DqOUlNa1c2OMcEEbvTG30w==
TLSVerifyCert=never
3. GBASEDBTSQLHOSTS文件中有一项配置是服务端实例或实例别名的连接类型
gbase01_ssl onsocssl 0.0.0.0 9089
上述配置完成后,重启了服务器,使用gabse data studio客户端连接9089端口,连接卡住,抓包发现客户端发送client hello报文后,服务器没有任何回复,怀疑是服务端ssl相关配置出错,希望能帮忙看看
评论










热门帖子
- 12025-12-01浏览数:182759
- 22023-05-09浏览数:25044
- 42023-09-25浏览数:18519
- 52020-05-11浏览数:17526