メインコンテンツまでスキップ

ONTAPのアップグレード後にTLSv1接続に失敗する

Views:
40
Visibility:
Public
Votes:
0
Category:
ontap-9
Specialty:
core<a>2009740090</a>
Last Updated:

環境

ONTAP 9

問題

  • ONTAPのアップグレード後(9.5 → 9.11)にTLSv1接続が失敗する。
    • 発行されたONTAPシステム:

      openssl s_client -connect <mgmt LIF IP>:443 -tls1 クライアント上のコマンドが失敗します。

        ---------------------------
        [root@localhost ~]# openssl s_client -connect 192.168.33.22:443 -tls1
       
        CONNECTED(00000003) 
         140124771491111:error:1401111E:SSL routines:ssl3_read_bytes:tlsv1 alert protocol version:s3_pkt.c:1487:SSL alert number 70
        140124771491111:error:111110E5:SSL routines:ssl3_write_bytes:ssl handshake failure:s3_pkt.c:656:
        ---
        no peer certificate available
        ---
        ......
        New, (NONE), Cipher is (NONE) 
        ---------------------------
    • 通常のONTAPシステム:

openssl s_client -connect <mgmt LIF IP>:443 -tls1 クライアント上のコマンドは成功しました。

  ---------------------------
  [root@localhost ~]#openssl s_client -connect 192.168.44.55:443 -tls1
  CONNECTED(00000003)
  depth=0 CN = cluster1, C = US
  verify error:num=18:self signed certificate
  verify return:1
  depth=0 CN = cluster1, C = US
  ......
  Server Temp Key: ECDH, P-256, 256 bits
  ---
  SSL handshake has read 1545 bytes and written 333 bytes
  ---
  New, TLSv1/SSLv3, Cipher is ECDHE-RSA-AES256-SHA  
  Server public key is 2048 bit
  Secure Renegotiation IS supported
  ---------------------------
  • security congfig show 実行したONTAPのコマンド出力は、通常のONTAPと同じです。

Sign in to view the entire content of this KB article.

New to NetApp?

Learn more about our award-winning Support

NetApp provides no representations or warranties regarding the accuracy or reliability or serviceability of any information or recommendations provided in this publication or with respect to any results that may be obtained by the use of the information or observance of any recommendations provided herein. The information in this document is distributed AS IS and the use of this information or the implementation of any recommendations or techniques herein is a customer's responsibility and depends on the customer's ability to evaluate and integrate them into the customer's operational environment. This document and the information contained herein may be used solely in connection with the NetApp products discussed in this document.