二郎原木中的未知ca

Question

我正在使用3个文件创建Erlang服务器：cowbow-ca.crt (我猜这是CA的证书)和server.key (带有server.crt )，但是我在日志中看到了这个错误消息。

=ERROR REPORT==== 3-Feb-2016::13:00:13 ===
Error in process <0.31594.15> on node 'node1@web02.example.lab' with exit value:
{closed,[{ranch_ssl,accept_ack,2,
                    [{file,"/www/web/staging/postman.example.lab/deps/ranch/src/ranch_ssl.erl"},
                     {line,115}]},
         {cowboy_protocol,init,4,
                          [{file,"/www/web/staging/postman.example.lab/deps/cowboy/src/cowboy_protocol.erl"},
                           {line,91}]}]}

=ERROR REPORT==== 3-Feb-2016::13:00:13 ===
Ranch listener https had connection process started with cowboy_protocol:start_link/4 at <0.31594.15> exit with reason: {closed,[{ranch_ssl,accept_ack,2,[{file,"/www/web/staging/postman.example.lab/deps/ranch/src/ranch_ssl.erl"},{line,115}]},{cowboy_protocol,init,4,[{file,"/www/web/staging/postman.example.lab/deps/cowboy/src/cowboy_protocol.erl"},{line,91}]}]}

=ERROR REPORT==== 3-Feb-2016::13:00:18 ===
SSL: certify: ssl_alert.erl:93:Fatal error: unknown ca

=ERROR REPORT==== 3-Feb-2016::13:01:11 ===
SSL: certify: ssl_alert.erl:93:Fatal error: unknown ca

=ERROR REPORT==== 3-Feb-2016::13:01:18 ===
SSL: certify: ssl_alert.erl:93:Fatal error: unknown ca

Answer 1

ssl_alert.erl:93中的致命错误意味着这是在TLS连接上接收到的警报。因此，这意味着连接到服务器的客户端不承认颁发证书的CA。可以通过将CA证书添加到客户端的受信任证书颁发者列表中来避免这种情况。