ignite-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Ilya Suntsov (JIRA)" <j...@apache.org>
Subject [jira] [Updated] (IGNITE-1150) Need to change log message about untrusted ssl connection
Date Thu, 23 Jul 2015 14:50:04 GMT

     [ https://issues.apache.org/jira/browse/IGNITE-1150?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]

Ilya Suntsov updated IGNITE-1150:
---------------------------------
    Attachment: node01log.txt
                node02log.txt

> Need to change log message about untrusted ssl connection
> ---------------------------------------------------------
>
>                 Key: IGNITE-1150
>                 URL: https://issues.apache.org/jira/browse/IGNITE-1150
>             Project: Ignite
>          Issue Type: Bug
>          Components: cache
>    Affects Versions: sprint-8
>         Environment: jdk 1.7
> host OS - OS X 10.10.3
> VM - ubuntu 14.04
>            Reporter: Ilya Suntsov
>            Assignee: Nikolay Tikhonov
>         Attachments: node01log.txt, node02log.txt
>
>
> Steps for reproduction:
> 1. Generate key01.jks,  key2.jks, trust.jks (key02 -untrusted)
> 2. Node01 config (key01 + trust):
> {noformat}
> <property name="sslContextFactory">
>             <bean class="org.apache.ignite.ssl.SslContextFactory">
>                 <property name="keyStoreFilePath" value="/Users/gridgain/Downloads/keystore/key01.jks"/>
>                 <property name="keyStorePassword" value="supervis"/>
>                 <property name="trustStoreFilePath" value="/Users/gridgain/Downloads/keystore/trust.jks"/>
>                 <property name="trustStorePassword" value="supervis"/>
>        </bean>
> </property>
> {noformat} 
> Node02 config (untrusted key02):
> {noformat}
>  <property name="sslContextFactory">
>             <bean class="org.apache.ignite.ssl.SslContextFactory">
>                 <property name="keyStoreFilePath" value="/home/isla/GG/keystore/notrust/key02.jks"/>
>                 <property name="keyStorePassword" value="supervis"/>
>                 <property name="trustManagers">
>                     <bean class="org.apache.ignite.ssl.SslContextFactory" factory-method="getDisabledTrustManager"/>
>                 </property>
>             </bean>
>         </property>
> {noformat}
> 3. Start both in mode.
> Result:
> Node01 log:
> {noformat}
> [17:29:51,520][INFO][disco-event-worker-#45%null%][GridDiscoveryManager] Added new node
to topology: TcpDiscoveryNode [id=56ebec66-c2dd-489a-95b7-14ae906c99ee, addrs=[0:0:0:0:0:0:0:1%1,
127.0.0.1, 192.168.3.18], sockAddrs=[192.168.3.18/192.168.3.18:47500, /0:0:0:0:0:0:0:1%1:47500,
/127.0.0.1:47500, /192.168.3.18:47500], discPort=47500, order=286, intOrder=144, loc=false,
ver=1.3.3#20150723-sha1:f49db319, isClient=false]
> [17:29:51,520][WARNING][disco-event-worker-#45%null%][GridDiscoveryManager] Node FAILED:
TcpDiscoveryNode [id=56ebec66-c2dd-489a-95b7-14ae906c99ee, addrs=[0:0:0:0:0:0:0:1%1, 127.0.0.1,
192.168.3.18], sockAddrs=[192.168.3.18/192.168.3.18:47500, /0:0:0:0:0:0:0:1%1:47500, /127.0.0.1:47500,
/192.168.3.18:47500], discPort=47500, order=286, intOrder=144, loc=false, ver=1.3.3#20150723-sha1:f49db319,
isClient=false]
> [17:29:56,530][INFO][disco-event-worker-#45%null%][GridDiscoveryManager] Added new node
to topology: TcpDiscoveryNode [id=56ebec66-c2dd-489a-95b7-14ae906c99ee, addrs=[0:0:0:0:0:0:0:1%1,
127.0.0.1, 192.168.3.18], sockAddrs=[192.168.3.18/192.168.3.18:47500, /0:0:0:0:0:0:0:1%1:47500,
/127.0.0.1:47500, /192.168.3.18:47500], discPort=47500, order=288, intOrder=145, loc=false,
ver=1.3.3#20150723-sha1:f49db319, isClient=false]
> [17:29:56,530][WARNING][disco-event-worker-#45%null%][GridDiscoveryManager] Node FAILED:
TcpDiscoveryNode [id=56ebec66-c2dd-489a-95b7-14ae906c99ee, addrs=[0:0:0:0:0:0:0:1%1, 127.0.0.1,
192.168.3.18], sockAddrs=[192.168.3.18/192.168.3.18:47500, /0:0:0:0:0:0:0:1%1:47500, /127.0.0.1:47500,
/192.168.3.18:47500], discPort=47500, order=288, intOrder=145, loc=false, ver=1.3.3#20150723-sha1:f49db319,
isClient=false]
> [17:30:01,559][INFO][disco-event-worker-#45%null%][GridDiscoveryManager] Added new node
to topology: TcpDiscoveryNode [id=56ebec66-c2dd-489a-95b7-14ae906c99ee, addrs=[0:0:0:0:0:0:0:1%1,
127.0.0.1, 192.168.3.18], sockAddrs=[192.168.3.18/192.168.3.18:47500, /0:0:0:0:0:0:0:1%1:47500,
/127.0.0.1:47500, /192.168.3.18:47500], discPort=47500, order=290, intOrder=146, loc=false,
ver=1.3.3#20150723-sha1:f49db319, isClient=false]
> [17:30:01,560][WARNING][disco-event-worker-#45%null%][GridDiscoveryManager] Node FAILED:
TcpDiscoveryNode [id=56ebec66-c2dd-489a-95b7-14ae906c99ee, addrs=[0:0:0:0:0:0:0:1%1, 127.0.0.1,
192.168.3.18], sockAddrs=[192.168.3.18/192.168.3.18:47500, /0:0:0:0:0:0:0:1%1:47500, /127.0.0.1:47500,
/192.168.3.18:47500], discPort=47500, order=290, intOrder=146, loc=false, ver=1.3.3#20150723-sha1:f49db319,
isClient=false]{noformat}
> Node02 log:
> {noformat}
> [17:31:21,976][WARNING][tcp-disco-sock-reader-#163%null][TcpDiscoverySpi] Failed to initialize
connection. Not encrypted data received. Missed SSL configuration on node? [sock=222f2421[SSL_NULL_WITH_NULL_NULL:
Socket[addr=/192.168.3.7,port=54974,localport=47500]]]
> [17:31:26,989][WARNING][tcp-disco-sock-reader-#164%null][TcpDiscoverySpi] Failed to initialize
connection. Not encrypted data received. Missed SSL configuration on node? [sock=3c94fcb1[SSL_NULL_WITH_NULL_NULL:
Socket[addr=/192.168.3.7,port=54976,localport=47500]]]
> [17:31:32,020][WARNING][tcp-disco-sock-reader-#165%null][TcpDiscoverySpi] Failed to initialize
connection. Not encrypted data received. Missed SSL configuration on node? [sock=5d59a8ed[SSL_NULL_WITH_NULL_NULL:
Socket[addr=/192.168.3.7,port=54978,localport=47500]]]
> [17:31:37,044][WARNING][tcp-disco-sock-reader-#166%null][TcpDiscoverySpi] Failed to initialize
connection. Not encrypted data received. Missed SSL configuration on node? [sock=24384979[SSL_NULL_WITH_NULL_NULL:
Socket[addr=/192.168.3.7,port=54980,localport=47500]]]
> [17:31:42,074][WARNING][tcp-disco-sock-reader-#167%null][TcpDiscoverySpi] Failed to initialize
connection. Not encrypted data received. Missed SSL configuration on node? [sock=299c282e[SSL_NULL_WITH_NULL_NULL:
Socket[addr=/192.168.3.7,port=54982,localport=47500]]]
> [17:31:47,107][WARNING][tcp-disco-sock-reader-#168%null][TcpDiscoverySpi] Failed to initialize
connection. Not encrypted data received. Missed SSL configuration on node? [sock=26620166[SSL_NULL_WITH_NULL_NULL:
Socket[addr=/192.168.3.7,port=54984,localport=47500]]]
> [17:31:52,129][WARNING][tcp-disco-sock-reader-#169%null][TcpDiscoverySpi] Failed to initialize
connection. Not encrypted data received. Missed SSL configuration on node? [sock=b8a7546[SSL_NULL_WITH_NULL_NULL:
Socket[addr=/192.168.3.7,port=54986,localport=47500]]]
> {noformat}
> I guess we should print more informative message on Node01. 



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message