「security ssl modify」実行時の内部エラー
環境
ONTAP 9
問題
証明書の作成
Cluster1::> security certificate show -vserver Cluster1 -common-name Cluster1 -type server
Vserver Serial Number Certificate Name Type
---------- --------------- -------------------------------------- ------------
Cluster1
11ABA01AA1ABXXYY
Cluster1_11ABA01AA1ABXXYY server
Certificate Authority: Cluster1
Expiration Date: Sat Jan 01 12:01:11 2025ただし、証明書を変更しようとするとエラーが発生します。
Cluster1::>security ssl modify -vserver Cluster1 -server-enabled true -client-enabled false -common-name Cluster1 -serial 11ABA01AA1ABXXYY -ca Cluster1
(security ssl modify)Warning: The certificate Cluster1 is a self-signed certificate, which offers no verification of identity by client machines. This presents the risk of
man-in-the-middle attacks by malicious third-parties.
Do you want to continue? {y|n}: y
Error: command failed: Internal error
audit.log
Tue Jan 1 2024 08:57:12 +00:00 [kern_audit:info:1111]:: Cluster1:ssh :: 192.168.0.100:56354 :: Cluster1:admin :: security ssl modify -vserver Cluster1 -server-enabled true -client-enabled false -common-name Cluster1 -serial 11ABA01AA1ABXXYY -ca Cluster1 :: Error: Internal errorMGWD.log
Tue Jan 1 2024 08:57:12 +00:00 [kern_mgwd:info:1111] A [src/rdb/sql_local_unit.cc 796 (0x111111f00)]: sqlite_logger: SQLite Error: (11) database corruption at line 84588 of [698edb7753]
Tue Jan 1 2024 08:57:12 +00:00 [kern_mgwd:info:1111] A [src/rdb/sql_local_unit.cc 796 (0x111111f00)]: sqlite_logger: SQLite Error: (11) statement aborts at 31: [SELECT rowid, [vserver], [common-name], [serial], [ca], [type], [subtype], [size], [public-cert], [country], [state], [locality], [organization], [unit], [email-addr], [protocol], [has
Tue Jan 1 2024 08:57:12 +00:00 [kern_mgwd:info:1111] E [src/rdb/sql_local_stmt.cc 300 (0x111111f00)]: step: failed to step in statement '<hidden>' for connection 0x11a0b1111: database disk image is malformed
Tue Jan 1 2024 08:57:12 +00:00 [kern_mgwd:info:1111] E [src/rdb/sql_local_stmt.cc 465 (0x111111f00)]: error: SQL error 11 (database disk image is malformed)
Tue Jan 1 2024 08:57:12 +00:00 [kern_mgwd:info:1111] 0x111111f00: 1001e1000001xx1y: ERR: rdb_glue: next_imp:src/rdb/rdb_iterator.cc:1137 failed to step in next for certificate: INTERNAL_ERROR(56)
Tue Jan 1 2024 08:57:12 +00:00 [kern_mgwd:info:1111] E [src/rdb/sql_local_stmt.cc 421 (0x111111f00)]: reset: Failed to reset statement <hidden> for connection 0x11a0b1111: database disk image is malformed
Tue Jan 1 2024 08:57:12 +00:00 [kern_mgwd:info:1111] E [src/rdb/sql_local_stmt.cc 465 (0x111111f00)]: error: SQL error 11 (database disk image is malformed)
Tue Jan 1 2024 08:57:12 +00:00 [kern_mgwd:info:1111] 0x111111f00: 1001e1000001xx1y: ERR: Tables:web: Unable to locate UUID for cert in vserver <Cluster1> with ca <Cluster1>& serial <11ABA01AA1ABXXYY>
Tue Jan 1 2024 08:57:12 +00:00 [kern_mgwd:info:1111] A [src/rdb/sql_local_unit.cc 796 (0x111111f00)]: sqlite_logger: SQLite Error: (11) statement aborts at 26: [INSERT INTO web_pki_server_db(rowid, _epoch, _tid, [vserver], [cert-file], [key-file], [chain-file], [cert-uuid]) VALUES (-6270513212480220372, 9, 713746, 2222222222, '/mroot/etc/vserv
Tue Jan 1 2024 08:57:12 +00:00 [kern_mgwd:info:1111] E [src/rdb/sql_local_stmt.cc 305 (0x111111f00)]: step: failed to step in statement 'INSERT INTO web_pki_server_db(rowid, _epoch, _tid, [vserver], [cert-file], [key-file], [chain-file], [cert-uuid]) VALUES (-6270513212480220372, 9, 713746, 2222222222, '/mroot/etc/vserver_123/certificates/ssl/server/aa111111-2222-1111-aa11-a1111111/server.crt', '/mroot/etc/vserver_123/certificates/ssl/server/aa111111-2222-1111-aa11-a1111111/server.key', '', NULL);' for connection 0x11a0b1111: database disk image is malformed
Tue Jan 1 2024 08:57:12 +00:00 [kern_mgwd:info:1111] E [src/rdb/sql_local_stmt.cc 465 (0x111111f00)]: error: SQL error 11 (database disk image is malformed)
Tue Jan 1 2024 08:57:12 +00:00 [kern_mgwd:info:1111] 0x111111f00: 1001e1000001xx1y: ERR: rdb_glue: create_imp:src/rdb/rdb_iterator.cc:1645 Failed to step through statement. rdb_stat: INTERNAL_ERROR(56)