Cisco Cisco Identity Services Engine 1.3 プリント

安全访问操作指南

步骤

如果您看到类似的错误消息，则需要将根证书添加到

truststoreFilename 密钥库，在本例中为

root3.jks。

./register.sh -keystoreFilename pxGridClient.jks -keystorePassword cisco123 -truststoreFilename root3.jks -

truststorePassword cisco123 -group Session -description MACBOOK -username Macbook_PRO -hostname 10.0.0.96

------- properties -------

version=1.0.0

hostnames=10.0.0.96

username=Macbook_PRO

descriptipon=MACBOOK

keystoreFilename=pxGridClient.jks

keystorePassword=cisco123

truststoreFilename=root3.jks

truststorePassword=cisco123

--------------------------

registering...

connecting...

javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: root certificate not trusted of

[ise.lab6.com]

at sun.security.ssl.Alerts.getSSLException(Alerts.java:192)

at sun.security.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1917)

at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:301)

at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:295)

at sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1471)

at sun.security.ssl.ClientHandshaker.processMessage(ClientHandshaker.java:212)

at sun.security.ssl.Handshaker.processLoop(Handshaker.java:936)

at sun.security.ssl.Handshaker.process_record(Handshaker.java:871)

at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:1043)

at sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1343)

at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1371)

at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1355)

at org.jivesoftware.smack.XMPPConnection.proceedTLSReceived(XMPPConnection.java:806)

at org.jivesoftware.smack.PacketReader.parsePackets(PacketReader.java:267)

at org.jivesoftware.smack.PacketReader.access$000(PacketReader.java:43)

at org.jivesoftware.smack.PacketReader$1.run(PacketReader.java:70)

Caused by: java.security.cert.CertificateException: root certificate not trusted of [ise.lab6.com]

at org.jivesoftware.smack.ServerTrustManager.checkServerTrusted(ServerTrustManager.java:144)

at sun.security.ssl.AbstractTrustManagerWrapper.checkServerTrusted(SSLContextImpl.java:865)

at sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1453)

... 11 more

第

22 页