当enablesslcertificateverification设置为true(confluent kafka)时-证书验证失败

zf9nrax1  于 2021-06-04  发布在  Kafka
关注(0)|答案(1)|浏览(551)

我正在windows上运行我的客户机，并且我能够验证ca授权存在并且在受信任的根证书授权中有效。

"Dev-on-Windows": {
      "commandName": "Project",
      "environmentVariables": {
        "Kafka__BootstrapServers": "myloadbalancer.myhost.corp:9094",
        "Kafka__EnableSslCertificateVerification": "true",
        "Kafka__SchemaRegistryUrl": "myschemareg.myhost.corp:8081,myschemreg2.myhost.corp:8081",
        "Kafka__SecurityProtocol": "SaslSsl",
        "Kafka__SaslMechanism": "Gssapi",       
        "Kafka__ClientId": "DotNetCoreReferenceApplication",
        "Kafka__ErrorTolerance": "Moderate",
        "Kafka__Debug" : "all",
        "ASPNETCORE_ENVIRONMENT": "Development"
      },
      "applicationUrl": "https://localhost:5001;http://localhost:5000"
    },

当我禁用ssl验证时，发布和消费消息非常有效。但是，当启用时，我会得到错误

SSL handshake failed: .\ssl\s3_clnt.c:1269: error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed:  (after 73ms in state CONNECT)

我尝试的是：
我怀疑用户帐户可能无法访问ca store，因此我使用我的个人帐户（与服务主体）运行应用程序，并遇到了相同的问题。
我还尝试导出该证书并将其放在运行.net核心应用程序的目录中，但也失败了。我试着用 SslCaLocation 但没用。
更新这里是调试日志

[18:12:40 Debug][1]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:app]: Selected provider Win32 SSPI for SASL mechanism GSSAPI

[18:12:40 Debug][1]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:app]: librdkafka built with OpenSSL version 0x1000212f

[18:12:40 Debug][1]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:app]: 72/73 certificate(s) successfully added from Windows Certificate Root store

[18:12:44 Debug][1]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:app]: Group "BL-9HQ76S2.consumerGroup1": updating member id "(not-set)" -> ""

[18:12:44 Debug][1]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:app]: GroupCoordinator: Enabled low-latency ops queue wake-ups

[18:12:44 Debug][1]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:app]: GroupCoordinator: Added new broker with NodeId -1

[18:12:44 Debug][8]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:GroupCoordinator]: GroupCoordinator: Enter main broker thread

[18:12:44 Debug][9]  MyService.Messaging.Kafka.EventBusConsumer
[thrd::0/internal]: :0/internal: Enter main broker thread

[18:12:44 Debug][1]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:app]: sasl_ssl://brokern20p.domain.MyService.corp:9094/bootstrap: Enabled low-latency ops queue wake-ups

[18:12:44 Debug][1]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:app]: sasl_ssl://brokern20p.domain.MyService.corp:9094/bootstrap: Added new broker with NodeId -1

[18:12:44 Debug][10]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:sasl_ssl://brokern20p.domain.MyService.corp:9094/bootstrap]: sasl_ssl://brokern20p.domain.MyService.corp:9094/bootstrap: Enter main broker thread

[18:12:44 Debug][1]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:app]: sasl_ssl://brokern21p.domain.MyService.corp:9094/bootstrap: Enabled low-latency ops queue wake-ups

[18:12:44 Debug][1]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:app]: sasl_ssl://brokern21p.domain.MyService.corp:9094/bootstrap: Added new broker with NodeId -1

[18:12:44 Debug][11]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:sasl_ssl://brokern21p.domain.MyService.corp:9094/bootstrap]: sasl_ssl://brokern21p.domain.MyService.corp:9094/bootstrap: Enter main broker thread

[18:12:44 Debug][1]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:app]: sasl_ssl://brokern22p.domain.MyService.corp:9094/bootstrap: Enabled low-latency ops queue wake-ups

[18:12:44 Debug][1]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:app]: sasl_ssl://brokern22p.domain.MyService.corp:9094/bootstrap: Added new broker with NodeId -1

[18:12:44 Debug][1]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:app]: librdkafka v1.4.2 (0x10402ff) DotNetCoreReferenceApplication-BL-9HQ76S2#consumer-1 initialized (builtin.features gzip,snappy,ssl,sasl,regex,lz4,sasl_gssapi,sasl_plain,sasl_scram,plugins,zstd,sasl_oauthbearer, SSL ZLIB SNAPPY SASL_SCRAM PLUGINS HDRHISTOGRAM, debug 0xfffff)

[18:12:44 Debug][12]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:sasl_ssl://brokern22p.domain.MyService.corp:9094/bootstrap]: sasl_ssl://brokern22p.domain.MyService.corp:9094/bootstrap: Enter main broker thread

[18:12:44 Debug][13]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:main]: Group "BL-9HQ76S2.consumerGroup1" received op SUBSCRIBE (v0) in state init (join state init, v1 vs 0)

[18:12:44 Debug][13]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:main]: Group "BL-9HQ76S2.consumerGroup1": subscribe to new subscription of 1 topics (join state init)

[18:12:44 Debug][13]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:main]: Group "BL-9HQ76S2.consumerGroup1": unsubscribe from current unset subscription of 0 topics (leave group=no, join state init, v1)

[18:12:44 Debug][13]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:main]: Group "BL-9HQ76S2.consumerGroup1": resetting group leader info: unsubscribe

[18:12:44 Debug][13]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:main]: Group "BL-9HQ76S2.consumerGroup1" is rebalancing in state init (join-state init) without assignment: unsubscribe

[18:12:44 Debug][13]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:main]: Group "BL-9HQ76S2.consumerGroup1" changed join state init -> wait-unassign (v1, state init)

[18:12:44 Debug][13]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:main]: Group "BL-9HQ76S2.consumerGroup1": unassign done in state init (join state wait-unassign): without new assignment: unassign (no previous assignment)

[18:12:44 Debug][13]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:main]: Group "BL-9HQ76S2.consumerGroup1" changed join state wait-unassign -> init (v1, state init)

[18:12:44 Debug][13]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:main]: Group "BL-9HQ76S2.consumerGroup1" changed state init -> query-coord (v1, join-state init)

[18:12:44 Debug][13]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:main]: Broadcasting state change

[18:12:44 Debug][13]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:main]: sasl_ssl://brokern22p.domain.MyService.corp:9094/bootstrap: Selected for cluster connection: coordinator query (broker has 0 connection attempt(s))

[18:12:44 Debug][13]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:main]: Group "BL-9HQ76S2.consumerGroup1": no broker available for coordinator query: intervaled in state query-coord

[18:12:44 Debug][12]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:sasl_ssl://brokern22p.domain.MyService.corp:9094/bootstrap]: sasl_ssl://brokern22p.domain.MyService.corp:9094/bootstrap: Received CONNECT op

[18:12:44 Debug][13]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:main]: Group "BL-9HQ76S2.consumerGroup1" received op GET_SUBSCRIPTION (v0) in state query-coord (join state init, v1 vs 0)

[18:12:44 Debug][12]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:sasl_ssl://brokern22p.domain.MyService.corp:9094/bootstrap]: sasl_ssl://brokern22p.domain.MyService.corp:9094/bootstrap: Broker changed state INIT -> TRY_CONNECT

[18:12:44 Debug][12]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:sasl_ssl://brokern22p.domain.MyService.corp:9094/bootstrap]: Broadcasting state change

[18:12:44 Debug][1]  MyService.Messaging.Kafka.EventBusConsumer
Confluent.Kafka.Consumer`2[System.String,System.String] subscribed to: [SchemaLess_v1]

[18:12:44 Debug][12]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:sasl_ssl://brokern22p.domain.MyService.corp:9094/bootstrap]: sasl_ssl://brokern22p.domain.MyService.corp:9094/bootstrap: broker in state TRY_CONNECT connecting

[18:12:44 Debug][12]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:sasl_ssl://brokern22p.domain.MyService.corp:9094/bootstrap]: sasl_ssl://brokern22p.domain.MyService.corp:9094/bootstrap: Broker changed state TRY_CONNECT -> CONNECT

[18:12:44 Debug][12]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:sasl_ssl://brokern22p.domain.MyService.corp:9094/bootstrap]: Broadcasting state change

[18:12:44 Debug][1]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:app]: Selected provider Win32 SSPI for SASL mechanism GSSAPI

[18:12:44 Debug][1]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:app]: librdkafka built with OpenSSL version 0x1000212f

[18:12:44 Debug][1]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:app]: 72/73 certificate(s) successfully added from Windows Certificate Root store

[18:12:44 Debug][12]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:sasl_ssl://brokern22p.domain.MyService.corp:9094/bootstrap]: sasl_ssl://brokern22p.domain.MyService.corp:9094/bootstrap: Connecting to ipv4#10.3.232.208:9094 (sasl_ssl) with socket 2448

[18:12:44 Debug][1]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:app]: Group "BL-9HQ76S2.cheetahConsumerGroup1": updating member id "(not-set)" -> ""

[18:12:44 Debug][1]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:app]: GroupCoordinator: Enabled low-latency ops queue wake-ups

[18:12:44 Debug][1]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:app]: GroupCoordinator: Added new broker with NodeId -1

[18:12:44 Debug][14]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:GroupCoordinator]: GroupCoordinator: Enter main broker thread

[18:12:44 Debug][15]  MyService.Messaging.Kafka.EventBusConsumer
[thrd::0/internal]: :0/internal: Enter main broker thread

[18:12:44 Debug][1]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:app]: sasl_ssl://brokern20p.domain.MyService.corp:9094/bootstrap: Enabled low-latency ops queue wake-ups

[18:12:44 Debug][1]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:app]: sasl_ssl://brokern20p.domain.MyService.corp:9094/bootstrap: Added new broker with NodeId -1

[18:12:44 Debug][16]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:sasl_ssl://brokern20p.domain.MyService.corp:9094/bootstrap]: sasl_ssl://brokern20p.domain.MyService.corp:9094/bootstrap: Enter main broker thread

[18:12:44 Debug][1]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:app]: sasl_ssl://brokern21p.domain.MyService.corp:9094/bootstrap: Enabled low-latency ops queue wake-ups

[18:12:44 Debug][12]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:sasl_ssl://brokern22p.domain.MyService.corp:9094/bootstrap]: sasl_ssl://brokern22p.domain.MyService.corp:9094/bootstrap: Connected to ipv4#10.3.232.208:9094

[18:12:44 Debug][1]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:app]: sasl_ssl://brokern21p.domain.MyService.corp:9094/bootstrap: Added new broker with NodeId -1

[18:12:44 Debug][17]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:sasl_ssl://brokern21p.domain.MyService.corp:9094/bootstrap]: sasl_ssl://brokern21p.domain.MyService.corp:9094/bootstrap: Enter main broker thread

[18:12:44 Debug][1]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:app]: sasl_ssl://brokern22p.domain.MyService.corp:9094/bootstrap: Enabled low-latency ops queue wake-ups

[18:12:44 Debug][1]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:app]: sasl_ssl://brokern22p.domain.MyService.corp:9094/bootstrap: Added new broker with NodeId -1

[18:12:44 Debug][1]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:app]: librdkafka v1.4.2 (0x10402ff) DotNetCoreReferenceApplication-BL-9HQ76S2#consumer-2 initialized (builtin.features gzip,snappy,ssl,sasl,regex,lz4,sasl_gssapi,sasl_plain,sasl_scram,plugins,zstd,sasl_oauthbearer, SSL ZLIB SNAPPY SASL_SCRAM PLUGINS HDRHISTOGRAM, debug 0xfffff)

[18:12:44 Debug][18]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:sasl_ssl://brokern22p.domain.MyService.corp:9094/bootstrap]: sasl_ssl://brokern22p.domain.MyService.corp:9094/bootstrap: Enter main broker thread

[18:12:44 Debug][19]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:main]: Group "BL-9HQ76S2.cheetahConsumerGroup1" received op SUBSCRIBE (v0) in state init (join state init, v1 vs 0)

[18:12:44 Debug][19]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:main]: Group "BL-9HQ76S2.cheetahConsumerGroup1": subscribe to new subscription of 1 topics (join state init)

[18:12:44 Debug][19]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:main]: Group "BL-9HQ76S2.cheetahConsumerGroup1": unsubscribe from current unset subscription of 0 topics (leave group=no, join state init, v1)

[18:12:44 Debug][19]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:main]: Group "BL-9HQ76S2.cheetahConsumerGroup1": resetting group leader info: unsubscribe

[18:12:44 Debug][19]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:main]: Group "BL-9HQ76S2.cheetahConsumerGroup1" is rebalancing in state init (join-state init) without assignment: unsubscribe

[18:12:44 Debug][12]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:sasl_ssl://brokern22p.domain.MyService.corp:9094/bootstrap]: sasl_ssl://brokern22p.domain.MyService.corp:9094/bootstrap: failed: err: Local: SSL error: (errno: No error)

[18:12:44 Debug][19]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:main]: Group "BL-9HQ76S2.cheetahConsumerGroup1" changed join state init -> wait-unassign (v1, state init)

[18:12:44 Debug][12]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:sasl_ssl://brokern22p.domain.MyService.corp:9094/bootstrap]: sasl_ssl://brokern22p.domain.MyService.corp:9094/bootstrap: Broker changed state CONNECT -> DOWN

[18:12:44 Debug][19]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:main]: Group "BL-9HQ76S2.cheetahConsumerGroup1": unassign done in state init (join state wait-unassign): without new assignment: unassign (no previous assignment)

[18:12:44 Debug][12]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:sasl_ssl://brokern22p.domain.MyService.corp:9094/bootstrap]: Broadcasting state change

[18:12:44 Debug][19]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:main]: Group "BL-9HQ76S2.cheetahConsumerGroup1" changed join state wait-unassign -> init (v1, state init)

[18:12:44 Debug][12]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:sasl_ssl://brokern22p.domain.MyService.corp:9094/bootstrap]: sasl_ssl://brokern22p.domain.MyService.corp:9094/bootstrap: Purging bufq with 0 buffers

[18:12:44 Debug][19]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:main]: Group "BL-9HQ76S2.cheetahConsumerGroup1" changed state init -> query-coord (v1, join-state init)

[18:12:44 Debug][12]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:sasl_ssl://brokern22p.domain.MyService.corp:9094/bootstrap]: sasl_ssl://brokern22p.domain.MyService.corp:9094/bootstrap: Purging bufq with 0 buffers

[18:12:44 Debug][19]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:main]: Broadcasting state change

[18:12:44 Debug][12]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:sasl_ssl://brokern22p.domain.MyService.corp:9094/bootstrap]: sasl_ssl://brokern22p.domain.MyService.corp:9094/bootstrap: Updating 0 buffers on connection reset

[18:12:44 Debug][19]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:main]: sasl_ssl://brokern22p.domain.MyService.corp:9094/bootstrap: Selected for cluster connection: coordinator query (broker has 0 connection attempt(s))

[18:12:44 Debug][12]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:sasl_ssl://brokern22p.domain.MyService.corp:9094/bootstrap]: sasl_ssl://brokern22p.domain.MyService.corp:9094/bootstrap: Broker changed state DOWN -> INIT

[18:12:44 Debug][19]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:main]: Group "BL-9HQ76S2.cheetahConsumerGroup1": no broker available for coordinator query: intervaled in state query-coord

[18:12:44 Debug][18]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:sasl_ssl://brokern22p.domain.MyService.corp:9094/bootstrap]: sasl_ssl://brokern22p.domain.MyService.corp:9094/bootstrap: Received CONNECT op

[18:12:44 Debug][12]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:sasl_ssl://brokern22p.domain.MyService.corp:9094/bootstrap]: Broadcasting state change

[18:12:44 Debug][19]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:main]: Group "BL-9HQ76S2.cheetahConsumerGroup1" received op GET_SUBSCRIPTION (v0) in state query-coord (join state init, v1 vs 0)

[18:12:44 Debug][18]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:sasl_ssl://brokern22p.domain.MyService.corp:9094/bootstrap]: sasl_ssl://brokern22p.domain.MyService.corp:9094/bootstrap: Broker changed state INIT -> TRY_CONNECT

[18:12:44 Debug][1]  MyService.Messaging.Kafka.EventBusConsumer
Confluent.Kafka.Consumer`2[System.String,MyService.sample_app.Sample] subscribed to: [bl-cheetah]

[18:12:44 Debug][18]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:sasl_ssl://brokern22p.domain.MyService.corp:9094/bootstrap]: Broadcasting state change

[18:12:44 Debug][1]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:app]: Selected provider Win32 SSPI for SASL mechanism GSSAPI

[18:12:44 Debug][18]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:sasl_ssl://brokern22p.domain.MyService.corp:9094/bootstrap]: sasl_ssl://brokern22p.domain.MyService.corp:9094/bootstrap: broker in state TRY_CONNECT connecting

[18:12:44 Debug][1]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:app]: librdkafka built with OpenSSL version 0x1000212f

[18:12:44 Debug][18]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:sasl_ssl://brokern22p.domain.MyService.corp:9094/bootstrap]: sasl_ssl://brokern22p.domain.MyService.corp:9094/bootstrap: Broker changed state TRY_CONNECT -> CONNECT

[18:12:44 Debug][18]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:sasl_ssl://brokern22p.domain.MyService.corp:9094/bootstrap]: Broadcasting state change

[18:12:44 Debug][18]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:sasl_ssl://brokern22p.domain.MyService.corp:9094/bootstrap]: sasl_ssl://brokern22p.domain.MyService.corp:9094/bootstrap: Connecting to ipv4#10.3.232.208:9094 (sasl_ssl) with socket 2740

[18:12:44 Debug][1]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:app]: 72/73 certificate(s) successfully added from Windows Certificate Root store

[18:12:44 Debug][1]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:app]: Group "BL-9HQ76S2.pumaConsumerGroup1": updating member id "(not-set)" -> ""

[18:12:44 Debug][1]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:app]: GroupCoordinator: Enabled low-latency ops queue wake-ups

[18:12:44 Debug][1]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:app]: GroupCoordinator: Added new broker with NodeId -1

[18:12:44 Debug][20]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:GroupCoordinator]: GroupCoordinator: Enter main broker thread

[18:12:44 Debug][21]  MyService.Messaging.Kafka.EventBusConsumer
[thrd::0/internal]: :0/internal: Enter main broker thread

[18:12:44 Debug][1]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:app]: sasl_ssl://brokern20p.domain.MyService.corp:9094/bootstrap: Enabled low-latency ops queue wake-ups

[18:12:44 Debug][1]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:app]: sasl_ssl://brokern20p.domain.MyService.corp:9094/bootstrap: Added new broker with NodeId -1

[18:12:44 Debug][22]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:sasl_ssl://brokern20p.domain.MyService.corp:9094/bootstrap]: sasl_ssl://brokern20p.domain.MyService.corp:9094/bootstrap: Enter main broker thread

[18:12:44 Debug][1]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:app]: sasl_ssl://brokern21p.domain.MyService.corp:9094/bootstrap: Enabled low-latency ops queue wake-ups

[18:12:44 Debug][1]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:app]: sasl_ssl://brokern21p.domain.MyService.corp:9094/bootstrap: Added new broker with NodeId -1

[18:12:44 Debug][23]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:sasl_ssl://brokern21p.domain.MyService.corp:9094/bootstrap]: sasl_ssl://brokern21p.domain.MyService.corp:9094/bootstrap: Enter main broker thread

[18:12:44 Debug][1]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:app]: sasl_ssl://brokern22p.domain.MyService.corp:9094/bootstrap: Enabled low-latency ops queue wake-ups

[18:12:44 Debug][1]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:app]: sasl_ssl://brokern22p.domain.MyService.corp:9094/bootstrap: Added new broker with NodeId -1

[18:12:44 Debug][1]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:app]: librdkafka v1.4.2 (0x10402ff) DotNetCoreReferenceApplication-BL-9HQ76S2#consumer-3 initialized (builtin.features gzip,snappy,ssl,sasl,regex,lz4,sasl_gssapi,sasl_plain,sasl_scram,plugins,zstd,sasl_oauthbearer, SSL ZLIB SNAPPY SASL_SCRAM PLUGINS HDRHISTOGRAM, debug 0xfffff)

[18:12:44 Debug][24]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:sasl_ssl://brokern22p.domain.MyService.corp:9094/bootstrap]: sasl_ssl://brokern22p.domain.MyService.corp:9094/bootstrap: Enter main broker thread

[18:12:44 Debug][25]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:main]: Group "BL-9HQ76S2.pumaConsumerGroup1" received op SUBSCRIBE (v0) in state init (join state init, v1 vs 0)

[18:12:44 Debug][18]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:sasl_ssl://brokern22p.domain.MyService.corp:9094/bootstrap]: sasl_ssl://brokern22p.domain.MyService.corp:9094/bootstrap: Connected to ipv4#10.3.232.208:9094

[18:12:44 Debug][25]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:main]: Group "BL-9HQ76S2.pumaConsumerGroup1": subscribe to new subscription of 1 topics (join state init)

[18:12:44 Debug][25]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:main]: Group "BL-9HQ76S2.pumaConsumerGroup1": unsubscribe from current unset subscription of 0 topics (leave group=no, join state init, v1)

[18:12:44 Debug][25]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:main]: Group "BL-9HQ76S2.pumaConsumerGroup1": resetting group leader info: unsubscribe

[18:12:44 Debug][25]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:main]: Group "BL-9HQ76S2.pumaConsumerGroup1" is rebalancing in state init (join-state init) without assignment: unsubscribe

[18:12:44 Debug][25]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:main]: Group "BL-9HQ76S2.pumaConsumerGroup1" changed join state init -> wait-unassign (v1, state init)

[18:12:44 Debug][25]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:main]: Group "BL-9HQ76S2.pumaConsumerGroup1": unassign done in state init (join state wait-unassign): without new assignment: unassign (no previous assignment)

[18:12:44 Debug][25]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:main]: Group "BL-9HQ76S2.pumaConsumerGroup1" changed join state wait-unassign -> init (v1, state init)

[18:12:44 Debug][25]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:main]: Group "BL-9HQ76S2.pumaConsumerGroup1" changed state init -> query-coord (v1, join-state init)

[18:12:44 Debug][25]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:main]: Broadcasting state change

[18:12:44 Debug][25]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:main]: sasl_ssl://brokern22p.domain.MyService.corp:9094/bootstrap: Selected for cluster connection: coordinator query (broker has 0 connection attempt(s))

[18:12:44 Debug][18]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:sasl_ssl://brokern22p.domain.MyService.corp:9094/bootstrap]: sasl_ssl://brokern22p.domain.MyService.corp:9094/bootstrap: failed: err: Local: SSL error: (errno: No error)

[18:12:44 Debug][25]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:main]: Group "BL-9HQ76S2.pumaConsumerGroup1": no broker available for coordinator query: intervaled in state query-coord

[18:12:44 Debug][24]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:sasl_ssl://brokern22p.domain.MyService.corp:9094/bootstrap]: sasl_ssl://brokern22p.domain.MyService.corp:9094/bootstrap: Received CONNECT op

[18:12:44 Debug][18]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:sasl_ssl://brokern22p.domain.MyService.corp:9094/bootstrap]: sasl_ssl://brokern22p.domain.MyService.corp:9094/bootstrap: Broker changed state CONNECT -> DOWN

[18:12:44 Debug][25]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:main]: Group "BL-9HQ76S2.pumaConsumerGroup1" received op GET_SUBSCRIPTION (v0) in state query-coord (join state init, v1 vs 0)

[18:12:44 Debug][24]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:sasl_ssl://brokern22p.domain.MyService.corp:9094/bootstrap]: sasl_ssl://brokern22p.domain.MyService.corp:9094/bootstrap: Broker changed state INIT -> TRY_CONNECT

[18:12:44 Debug][18]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:sasl_ssl://brokern22p.domain.MyService.corp:9094/bootstrap]: Broadcasting state change

[18:12:44 Debug][1]  MyService.Messaging.Kafka.EventBusConsumer
Confluent.Kafka.Consumer`2[System.String,MyService.sample_app.Sample] subscribed to: [bl-puma]

[18:12:44 Debug][24]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:sasl_ssl://brokern22p.domain.MyService.corp:9094/bootstrap]: Broadcasting state change

[18:12:44 Debug][18]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:sasl_ssl://brokern22p.domain.MyService.corp:9094/bootstrap]: sasl_ssl://brokern22p.domain.MyService.corp:9094/bootstrap: Purging bufq with 0 buffers

[18:12:44 Debug][24]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:sasl_ssl://brokern22p.domain.MyService.corp:9094/bootstrap]: sasl_ssl://brokern22p.domain.MyService.corp:9094/bootstrap: broker in state TRY_CONNECT connecting

[18:12:44 Debug][18]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:sasl_ssl://brokern22p.domain.MyService.corp:9094/bootstrap]: sasl_ssl://brokern22p.domain.MyService.corp:9094/bootstrap: Purging bufq with 0 buffers

[18:12:44 Debug][24]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:sasl_ssl://brokern22p.domain.MyService.corp:9094/bootstrap]: sasl_ssl://brokern22p.domain.MyService.corp:9094/bootstrap: Broker changed state TRY_CONNECT -> CONNECT

[18:12:44 Debug][18]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:sasl_ssl://brokern22p.domain.MyService.corp:9094/bootstrap]: sasl_ssl://brokern22p.domain.MyService.corp:9094/bootstrap: Updating 0 buffers on connection reset

[18:12:44 Debug][24]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:sasl_ssl://brokern22p.domain.MyService.corp:9094/bootstrap]: Broadcasting state change

[18:12:44 Debug][18]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:sasl_ssl://brokern22p.domain.MyService.corp:9094/bootstrap]: sasl_ssl://brokern22p.domain.MyService.corp:9094/bootstrap: Broker changed state DOWN -> INIT

[18:12:44 Debug][24]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:sasl_ssl://brokern22p.domain.MyService.corp:9094/bootstrap]: sasl_ssl://brokern22p.domain.MyService.corp:9094/bootstrap: Connecting to ipv4#10.3.232.208:9094 (sasl_ssl) with socket 3024

[18:12:44 Debug][18]  MyService.Messaging.Kafka.EventBusConsumer
[thrd:sasl_ssl://brokern22p.domain.MyService.corp:9094/bootstrap]: Broadcasting state change

[18:12:44 Error][7]  MyService.Messaging.Kafka.EventBusConsumer
errorCode: Local_Ssl, reason: sasl_ssl://brokern22p.domain.MyService.corp:9094/bootstrap: SSL handshake failed: .\ssl\s3_clnt.c:1269: error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed:  (after 84ms in state CONNECT)

[18:12:44 Error][4]  MyService.Messaging.Kafka.EventBusConsumer
errorCode: Local_Ssl, reason: sasl_ssl://brokern22p.domain.MyService.corp:9094/bootstrap: SSL handshake failed: .\ssl\s3_clnt.c:1269: error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed:  (after 76ms in state CONNECT)
windowsapache-kafkaconfluent-platform.net-core

1条答案

按热度按时间
mbskvtky

mbskvtky1#

我通过在应用程序的根文件夹下添加cacert.pem文件解决了这个问题，并在sslcalocation配置中指定了文件名

"Dev-on-Windows": {
      "commandName": "Project",
      "environmentVariables": {
        "Kafka__BootstrapServers": "myloadbalancer.myhost.corp:9094",
        "Kafka__EnableSslCertificateVerification": "true",
        "Kafka__SchemaRegistryUrl": "myschemareg.myhost.corp:8081,myschemreg2.myhost.corp:8081",
        "Kafka__SecurityProtocol": "SaslSsl",
        "Kafka__SslCaLocation": "cacert.pem",
        "Kafka__SaslMechanism": "Gssapi",       
        "Kafka__ClientId": "DotNetCoreReferenceApplication",
        "Kafka__ErrorTolerance": "Moderate",
        "Kafka__Debug" : "all",
        "ASPNETCORE_ENVIRONMENT": "Development"
      },
      "applicationUrl": "https://localhost:5001;http://localhost:5000"
    },

cacert.pem包含证书的pks的串联。我是手工复制的。
也就是说，我不知道为什么合流客户端不能访问windows证书根存储。我问了另外一个问题来解决这个问题。

赞(0）分享  回复(0）举报  2021-06-04
我来回答

相关问题

    查看更多

    热门标签

    更多
    JavaquerypythonNode开发语言requestUtil数据库Table后端算法LoggerMessageElementParser

    最新问答

    更多
    • 蜀ICP备2022004421号-2 NULL123 https://www.null123.com © All rights reserved
    • 本站内容来源互联网,如果侵犯您的权益请联系我们删除, 联系方式：448109455@qq.com