FIPSが有効になっているときにすべてのTLS PSK暗号スイートを削除するとSnapMirrorが失敗する

最後の更新
PDFとして保存

Views:: 5

Visibility:: Public

Votes:: 0

Category:: snapmirror<a>2009692053</a>

Specialty:: core

Last Updated:

環境

ONTAP
SnapMirror

問題

- FIPSが有効な状態でDiffe-Hellman（DHE）以外のTLS PSK暗号スイートをすべて削除すると、暗号化が有効な場合にすべてのSnapMirror転送が失敗します。次のエラーがに表示されます。

messages.log

==============================================================================================

0000001f.000b6012 0a1a82d8 Thu Aug 24 2023 15:30:23 -04:00 [kern_ktlsd:info:2395] [Aug 24 15:30:23]: 0x808bf8500: 0: INFO: ktlsd: serviceNetworkBio:src/tables/net_ssl_handshake.cc:1999 Enter 0000001f.000b6040 0a1a82d8 Thu Aug 24 2023 15:30:23 -04:00 [kern_ktlsd:info:2395] [Aug 24 15:30:23]: 0x808bf8500: 0: DEBUG: ktlsd: serviceNetworkBio:src/tables/net_ssl_handshake.cc:2036 BIO_read, no data 0000001f.000b6041 0a1a82d8 Thu Aug 24 2023 15:30:23 -04:00 [kern_ktlsd:info:2395] [Aug 24 15:30:23]: 0x808bf8500: 0: DEBUG: ktlsd: serviceNetworkBio:src/tables/net_ssl_handshake.cc:2045 BIO_get_read_request: wanted=5 0000001f.000b6042 0a1a82d8 Thu Aug 24 2023 15:30:23 -04:00 [kern_ktlsd:info:2395] [Aug 24 15:30:23]: 0x808bf8500: 0: DEBUG: ktlsd: serviceNetworkBio:src/tables/net_ssl_handshake.cc:2086 wanted 5, _wantPending 0, delta 5 0000001f.000b6053 0a1a82d8 Thu Aug 24 2023 15:30:23 -04:00 [kern_ktlsd:info:2395] [Aug 24 15:30:23]: 0x808bf8500: 0: INFO: ktlsd: serviceNetworkBio:src/tables/net_ssl_handshake.cc:2138 Exit 0000001f.000b6054 0a1a82d8 Thu Aug 24 2023 15:30:23 -04:00 [kern_ktlsd:info:2395] [Aug 24 15:30:23]: 0x808bf8500: 0: INFO: ktlsd: _serviceThread:src/tables/net_ssl_handshake.cc:2642 SSL service thread: vserver 4294967295, handle 42949674910 0000001f.000b6055 0a1a82d8 Thu Aug 24 2023 15:30:23 -04:00 [kern_ktlsd:info:2395] [Aug 24 15:30:23]: 0x808bf8500: 0: INFO: ktlsd: serviceNetworkBio:src/tables/net_ssl_handshake.cc:1999 Enter 0000001f.000b6056 0a1a82d8 Thu Aug 24 2023 15:30:23 -04:00 [kern_ktlsd:info:2395] [Aug 24 15:30:23]: 0x808bf8500: 0: DEBUG: ktlsd: serviceNetworkBio:src/tables/net_ssl_handshake.cc:2036 BIO_read, no data 0000001f.000b6057 0a1a82d8 Thu Aug 24 2023 15:30:23 -04:00 [kern_ktlsd:info:2395] [Aug 24 15:30:23]: 0x808bf8500: 0: DEBUG: ktlsd: serviceNetworkBio:src/tables/net_ssl_handshake.cc:2045 BIO_get_read_request: wanted=5 0000001f.000b6058 0a1a82d8 Thu Aug 24 2023 15:30:23 -04:00 [kern_ktlsd:info:2395] [Aug 24 15:30:23]: 0x808bf8500: 0: INFO: ktlsd: serviceNetworkBio:src/tables/net_ssl_handshake.cc:2138 Exit

==============================================================================================