Websphere 上 的 Kafka 代理 客户 端 无法 访问 JKS 文件

wfypjpf4  于 2022-11-21  发布在  Apache
关注(0)|答案(1)|浏览(148)

我正在尝试运行Kafka生产者客户端来向Kafka代理发布一些消息。我已经给出了Keystore/Trust store的路径和密码。当我在Apache tomcat上部署这个时,我能够将消息发送到代理。但是当我尝试在WebSphere上部署相同的应用程序时,我收到错误“加载SSL密钥库失败”。我已经为这些目录授予了读/写/执行权限。WebSphere中是否存在需要不同配置/设置的内容?

Caused by: org.apache.kafka.common.KafkaException: org.apache.kafka.common.KafkaException: Failed to load SSL keystore /home/avaya/tcr/uc-ivr-nar-dev.dbplatform.portal.com.jks of type JKS
        at org.apache.kafka.common.security.ssl.SslEngineBuilder.createSSLContext(SslEngineBuilder.java:160)
        at org.apache.kafka.common.security.ssl.SslEngineBuilder.<init>(SslEngineBuilder.java:102)
        at org.apache.kafka.common.security.ssl.SslFactory.configure(SslFactory.java:93)
        at org.apache.kafka.common.network.SslChannelBuilder.configure(SslChannelBuilder.java:71)
        ... 37 more
Caused by: org.apache.kafka.common.KafkaException: Failed to load SSL keystore /home/avaya/tcr/uc-ivr-nar-dev.dbplatform.portal.com.jks of type JKS
        at org.apache.kafka.common.security.ssl.SslEngineBuilder$SecurityStore.load(SslEngineBuilder.java:289)
        at org.apache.kafka.common.security.ssl.SslEngineBuilder.createSSLContext(SslEngineBuilder.java:142)
        ... 40 more
Caused by: java.nio.file.AccessDeniedException: /home/avaya/tcr/uc-ivr-nar-dev.dbplatform.portal.com.jks
        at sun.nio.fs.UnixException.translateToIOException(UnixException.java:96)
        at sun.nio.fs.UnixException.rethrowAsIOException(UnixException.java:114)
        at sun.nio.fs.UnixException.rethrowAsIOException(UnixException.java:119)
        at sun.nio.fs.UnixFileSystemProvider.newByteChannel(UnixFileSystemProvider.java:226)
        at java.nio.file.Files.newByteChannel(Files.java:372)
        at java.nio.file.Files.newByteChannel(Files.java:418)
        at java.nio.file.spi.FileSystemProvider.newInputStream(FileSystemProvider.java:395)
        at java.nio.file.Files.newInputStream(Files.java:163)
        at org.apache.kafka.common.security.ssl.SslEngineBuilder$SecurityStore.load(SslEngineBuilder.java:282)
        ... 41 more
e4eetjau

e4eetjau1#

由于某种原因,打开JDK不喜欢JKS密钥库文件。转换为PCKS12格式并正常工作。与websphere容器无关。

相关问题