启动smartsense的时候报错:
2021-10-20 11:00:34,912 INFO [main] CertificateManager:86 - Initialization of root certificate
2021-10-20 11:00:34,912 INFO [main] CertificateManager:88 - Certificate exists:false
2021-10-20 11:00:34,912 INFO [main] CertificateManager:153 - Generation of server certificate
2021-10-20 11:00:34,914 INFO [main] Configuration:569 - Reading password from existing file
2021-10-20 11:00:34,984 WARN [main] CertificateManager:345 - Command openssl genrsa -des3 -passout pass:**** -out /var/lib/smartsense/hst-server/keys/ca.key 4096 -md sha256 was finished with exit code: 1 - an error occurred parsing the command options.
2021-10-20 11:00:34,991 WARN [main] CertificateManager:345 - Command openssl req -passin pass:**** -new -key /var/lib/smartsense/hst-server/keys/ca.key -out /var/lib/smartsense/hst-server/keys/ca.csr -batch was finished with exit code: 1 - an error occurred parsing the command options.
2021-10-20 11:00:34,997 WARN [main] CertificateManager:345 - Command openssl ca -create_serial -out /var/lib/smartsense/hst-server/keys/ca.crt -days 365 -keyfile /var/lib/smartsense/hst-server/keys/ca.key -key **** -selfsign -extensions jdk7_ca -config /var/lib/smartsense/hst-server/keys/ca.config -batch -md sha256 -infiles /var/lib/smartsense/hst-server/keys/ca.csr was finished with exit code: 1 - an error occurred parsing the command options.
2021-10-20 11:00:35,002 WARN [main] CertificateManager:345 - Command openssl pkcs12 -export -in /var/lib/smartsense/hst-server/keys/ca.crt -inkey /var/lib/smartsense/hst-server/keys/ca.key -certfile /var/lib/smartsense/hst-server/keys/ca.crt -out /var/lib/smartsense/hst-server/keys/keystore.p12 -password pass:**** -passin pass:****
was finished with exit code: 1 - an error occurred parsing the command options.
2021-10-20 11:00:35,021 INFO [main] Configuration:569 - Reading password from existing file
2021-10-20 11:00:35,054 WARN [main] ConfigChangeListener:155 - Creating a patch
2021-10-20 11:00:35,365 INFO [main] ConfigChangeListener:236 - Patch created : /var/lib/smartsense/hst-server/updates/upload/config-update.tgz
2021-10-20 11:00:35,431 INFO [main] SupportToolServer:580 - Bundle Purge Scheduler enabled at :Wed Oct 20 11:00:35 CST 2021. Bundle Purge job will run every 24 hrs.
2021-10-20 11:00:35,436 INFO [main] Server:266 - jetty-7.6.7.v20120910
2021-10-20 11:00:35,479 INFO [Thread-1] DomainRule:135 - Failed to detect the domain name from FQDN apm-cdh03
2021-10-20 11:00:35,483 INFO [main] ContextHandler:744 - started o.e.j.s.ServletContextHandler{/,file:/usr/hdp/share/hst/hst-server/web/}
2021-10-20 11:00:36,607 INFO [main] AbstractConnector:338 - Started [email protected]:9000
2021-10-20 11:00:36,608 INFO [main] Server:266 - jetty-7.6.7.v20120910
2021-10-20 11:00:36,609 INFO [main] ContextHandler:744 - started o.e.j.s.ServletContextHandler{/,null}
2021-10-20 11:00:37,046 WARN [main] AbstractLifeCycle:204 - FAILED SslContextFactory@6af5b246(/var/lib/smartsense/hst-server/keys/keystore.p12,/var/lib/smartsense/hst-server/keys/keystore.p12): java.io.FileNotFoundException: /var/lib/smartsense/hst-server/keys/keystore.p12 (没有那个文件或目录)
java.io.FileNotFoundException: /var/lib/smartsense/hst-server/keys/keystore.p12 (没有那个文件或目录)
at java.io.FileInputStream.open0(Native Method)
at java.io.FileInputStream.open(FileInputStream.java:195)
at java.io.FileInputStream.<init>(FileInputStream.java:138)
at org.eclipse.jetty.util.resource.FileResource.getInputStream(FileResource.java:282)
at org.eclipse.jetty.util.security.CertificateUtils.getKeyStore(CertificateUtils.java:43)
at org.eclipse.jetty.util.ssl.SslContextFactory.getKeyStore(SslContextFactory.java:1053)
at org.eclipse.jetty.util.ssl.SslContextFactory.loadKeyStore(SslContextFactory.java:1013)
at org.eclipse.jetty.util.ssl.SslContextFactory.doStart(SslContextFactory.java:264)
at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:64)
at org.eclipse.jetty.server.ssl.SslSelectChannelConnector.doStart(SslSelectChannelConnector.java:612)
at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:64)
at org.eclipse.jetty.server.Server.doStart(Server.java:286)
at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:64)
at com.hortonworks.support.tools.server.SupportToolServer.run(SupportToolServer.java:292)
at com.hortonworks.support.tools.server.SupportToolServer.main(SupportToolServer.java:630)
2021-10-20 11:00:37,050 WARN [main] AbstractLifeCycle:204 - FAILED [email protected]:9440: java.io.FileNotFoundException: /var/lib/smartsense/hst-server/keys/keystore.p12 (没有那个文件或目录)
java.io.FileNotFoundException: /var/lib/smartsense/hst-server/keys/keystore.p12 (没有那个文件或目录)
at java.io.FileInputStream.open0(Native Method)
at java.io.FileInputStream.open(FileInputStream.java:195)
at java.io.FileInputStream.<init>(FileInputStream.java:138)
at org.eclipse.jetty.util.resource.FileResource.getInputStream(FileResource.java:282)
at org.eclipse.jetty.util.security.CertificateUtils.getKeyStore(CertificateUtils.java:43)
at org.eclipse.jetty.util.ssl.SslContextFactory.getKeyStore(SslContextFactory.java:1053)
at org.eclipse.jetty.util.ssl.SslContextFactory.loadKeyStore(SslContextFactory.java:1013)
at org.eclipse.jetty.util.ssl.SslContextFactory.doStart(SslContextFactory.java:264)
at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:64)
at org.eclipse.jetty.server.ssl.SslSelectChannelConnector.doStart(SslSelectChannelConnector.java:612)
at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:64)
at org.eclipse.jetty.server.Server.doStart(Server.java:286)
at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:64)
at com.hortonworks.support.tools.server.SupportToolServer.run(SupportToolServer.java:292)
at com.hortonworks.support.tools.server.SupportToolServer.main(SupportToolServer.java:630)
2021-10-20 11:00:37,096 INFO [main] ContextHandler:795 - stopped o.e.j.s.ServletContextHandler{/,file:/usr/hdp/share/hst/hst-server/web/}
尝试手动解决:
openssl genrsa -des3 -passout pass:Admin21cn -out /var/lib/smartsense/hst-server/keys/ca.key 4096
openssl req -passin pass:Admin21cn -new -key /var/lib/smartsense/hst-server/keys/ca.key -out /var/lib/smartsense/hst-server/keys/ca.csr
openssl ca -create_serial -out /var/lib/smartsense/hst-server/keys/ca.crt -days 365 -keyfile /var/lib/smartsense/hst-server/keys/ca.key -key Admin21cn -selfsign -extensions jdk7_ca -config /var/lib/smartsense/hst-server/keys/ca.config -batch -md sha256 -infiles /var/lib/smartsense/hst-server/keys/ca.csr
openssl pkcs12 -export -in /var/lib/smartsense/hst-server/keys/ca.crt -inkey /var/lib/smartsense/hst-server/keys/ca.key -certfile /var/lib/smartsense/hst-server/keys/ca.crt -out /var/lib/smartsense/hst-server/keys/keystore.p12 -password pass:Admin21cn -passin pass:Admin21cn
仍然报错,证书的密码有问题:
2021-10-20 11:43:58,152 WARN [main] AbstractLifeCycle:204 - FAILED [email protected]:9440: java.io.IOException: keystore password was incorrect
java.io.IOException: keystore password was incorrect
Caused by: java.security.UnrecoverableKeyException: failed to decrypt safe contents entry: javax.crypto.BadPaddingException: Given final block not properly padded. Such issues can arise if a bad key is used during decryption.
... 13 more
java.io.IOException: keystore password was incorrect
关闭python标准库http客户端中的证书验证:https://access.redhat.com/articles/2039753#controlling-certificate-verification-7
/etc/python/cert-verification.cfg
[https]
verify=disable
仍然解决不了问题。看某些博客提到这个东西应该是收费的,没太了解。
也用不到这个组件,于是卸载算了。
curl -u admin:admin -i -H 'X-Requested-By: ambari' -X PUT -d '{"RequestInfo": {"context" :"Stop SmartSense via REST"}, "Body": {"ServiceInfo": {"state": "INSTALLED"}}}' http://172.18.8.14:8080/api/v1/clusters/testBigData/services/SMARTSENSE
curl -u admin:admin -i -H 'X-Requested-By: ambari' -X POST -d '{"RequestInfo": {"context" :"Uninstall SmartSense via REST", "command":"Uninstall"}, "Requests/resource_filters":[{"hosts":"comma separated host names", "service_name":"SMARTSENSE", "component_name":"HST_AGENT"}]}' http://172.18.8.14:8080/api/v1/clusters/testBigData/requests
curl -u admin:admin -H 'X-Requested-By: ambari' -X DELETE http://172.18.8.14:8080/api/v1/clusters/testBigData/services/SMARTSENSE