Apache Ignite，透明数据加密:主密钥摘要不同！节点联接被拒绝

Question

我已经设置了一个2节点的apache ignite集群。使用keytool在两个节点上使用相同的密码设置主密钥。我可以启动其中一个节点。在启动第二个节点时，该节点似乎因为不同的摘要而被拒绝加入集群。

在没有透明数据加密的情况下，集群一直运行良好。我已经使用了用于TcpDiscovery的AWS-ELB。我之前禁用了持久性。现在，我已经启用了持久性，并使用control.sh激活了集群。

-alias ignite.master.key \
-keystore ./ignite_keystore.jks \
-storetype PKCS12 \
-keyalg aes \
-storepass somepasswd \
-keysize 256```

```class org.apache.ignite.IgniteCheckedException: Failed to start SPI: TcpDiscoverySpi [addrRslvr=null, sockTimeout=5000, ackTimeout=5000, marsh=JdkMarshaller [clsFilter=org.apache.ignite.marshaller.MarshallerUtils$1@69fe0ed4], reconCnt=10, reconDelay=2000, maxAckTimeout=600000, forceSrvMode=false, clientReconnectDisabled=false, internalLsnr=null]

at org.apache.ignite.internal.managers.GridManagerAdapter.startSpi(GridManagerAdapter.java:300)

at org.apache.ignite.internal.managers.discovery.GridDiscoveryManager.start(GridDiscoveryManager.java:939)

at org.apache.ignite.internal.IgniteKernal.startManager(IgniteKernal.java:1682)

at org.apache.ignite.internal.IgniteKernal.start(IgniteKernal.java:1066)

at org.apache.ignite.internal.IgnitionEx$IgniteNamedInstance.start0(IgnitionEx.java:2038)

at org.apache.ignite.internal.IgnitionEx$IgniteNamedInstance.start(IgnitionEx.java:1730)

at org.apache.ignite.internal.IgnitionEx.start0(IgnitionEx.java:1158)

at org.apache.ignite.internal.IgnitionEx.startConfigurations(IgnitionEx.java:1076)

at org.apache.ignite.internal.IgnitionEx.start(IgnitionEx.java:962)

at org.apache.ignite.internal.IgnitionEx.start(IgnitionEx.java:861)

at org.apache.ignite.internal.IgnitionEx.start(IgnitionEx.java:731)

at org.apache.ignite.internal.IgnitionEx.start(IgnitionEx.java:700)

at org.apache.ignite.Ignition.start(Ignition.java:348)

at org.apache.ignite.startup.cmdline.CommandLineStartup.main(CommandLineStartup.java:301)

原因:类org.apache.ignite.spi.IgniteSpiException:主密钥摘要不一致！节点联接被拒绝。

at org.apache.ignite.spi.discovery.tcp.TcpDiscoverySpi.checkFailedError(TcpDiscoverySpi.java:1946)

at org.apache.ignite.spi.discovery.tcp.ServerImpl.joinTopology(ServerImpl.java:969)

at org.apache.ignite.spi.discovery.tcp.ServerImpl.spiStart(ServerImpl.java:391)

at org.apache.ignite.spi.discovery.tcp.TcpDiscoverySpi.spiStart(TcpDiscoverySpi.java:2020)

at org.apache.ignite.internal.managers.GridManagerAdapter.startSpi(GridManagerAdapter.java:297)

... 13 more

14:47:45,576main启动时出现异常(将回滚启动例程)。

name=org.apache.ignite.internal.managers.discovery.GridDiscoveryManager org.apache.ignite.IgniteCheckedException:无法启动管理器: GridManagerAdapter enabled=true，class manager

at org.apache.ignite.internal.IgniteKernal.startManager(IgniteKernal.java:1687)

at org.apache.ignite.internal.IgniteKernal.start(IgniteKernal.java:1066)

at org.apache.ignite.internal.IgnitionEx$IgniteNamedInstance.start0(IgnitionEx.java:2038)

at org.apache.ignite.internal.IgnitionEx$IgniteNamedInstance.start(IgnitionEx.java:1730)

at org.apache.ignite.internal.IgnitionEx.start0(IgnitionEx.java:1158)

at org.apache.ignite.internal.IgnitionEx.startConfigurations(IgnitionEx.java:1076)

at org.apache.ignite.internal.IgnitionEx.start(IgnitionEx.java:962)

at org.apache.ignite.internal.IgnitionEx.start(IgnitionEx.java:861)

at org.apache.ignite.internal.IgnitionEx.start(IgnitionEx.java:731)

at org.apache.ignite.internal.IgnitionEx.start(IgnitionEx.java:700)

at org.apache.ignite.Ignition.start(Ignition.java:348)

at org.apache.ignite.startup.cmdline.CommandLineStartup.main(CommandLineStartup.java:301)

原因: clsFilter=org.apache.ignite.marshaller.MarshallerUtils$1@69fe0ed4，org.apache.ignite.IgniteCheckedException:无法启动SPI: TcpDiscoverySpi [addrRslvr=null，sockTimeout=5000，ackTimeout=5000，marsh=JdkMarshaller class reconCnt=10，reconDelay=2000，maxAckTimeout=600000，forceSrvMode=false，clientReconnectDisabled=false，internalLsnr=null]

at org.apache.ignite.internal.managers.GridManagerAdapter.startSpi(GridManagerAdapter.java:300)

at org.apache.ignite.internal.managers.discovery.GridDiscoveryManager.start(GridDiscoveryManager.java:939)

at org.apache.ignite.internal.IgniteKernal.startManager(IgniteKernal.java:1682)

... 11 more

原因:类org.apache.ignite.spi.IgniteSpiException:主密钥摘要不一致！节点联接被拒绝。

at org.apache.ignite.spi.discovery.tcp.TcpDiscoverySpi.checkFailedError(TcpDiscoverySpi.java:1946)

at org.apache.ignite.spi.discovery.tcp.ServerImpl.joinTopology(ServerImpl.java:969)

at org.apache.ignite.spi.discovery.tcp.ServerImpl.spiStart(ServerImpl.java:391)

at org.apache.ignite.spi.discovery.tcp.TcpDiscoverySpi.spiStart(TcpDiscoverySpi.java:2020)

at org.apache.ignite.internal.managers.GridManagerAdapter.startSpi(GridManagerAdapter.java:297)

... 13 more

14:47:50点火节点停止OK uptime=00:00:07.942

name=org.apache.ignite.internal.managers.discovery.GridDiscoveryManager org.apache.ignite.IgniteException:无法启动管理器: GridManagerAdapter enabled=true，class manager

at org.apache.ignite.internal.util.IgniteUtils.convertException(IgniteUtils.java:1026)

at org.apache.ignite.Ignition.start(Ignition.java:351)

at org.apache.ignite.startup.cmdline.CommandLineStartup.main(CommandLineStartup.java:301)

原因: name=org.apache.ignite.internal.managers.discovery.GridDiscoveryManager org.apache.ignite.IgniteCheckedException:无法启动管理器: GridManagerAdapter enabled=true，class

at org.apache.ignite.internal.IgniteKernal.startManager(IgniteKernal.java:1687)

at org.apache.ignite.internal.IgniteKernal.start(IgniteKernal.java:1066)

at org.apache.ignite.internal.IgnitionEx$IgniteNamedInstance.start0(IgnitionEx.java:2038)

at org.apache.ignite.internal.IgnitionEx$IgniteNamedInstance.start(IgnitionEx.java:1730)

at org.apache.ignite.internal.IgnitionEx.start0(IgnitionEx.java:1158)

at org.apache.ignite.internal.IgnitionEx.startConfigurations(IgnitionEx.java:1076)

at org.apache.ignite.internal.IgnitionEx.start(IgnitionEx.java:962)

at org.apache.ignite.internal.IgnitionEx.start(IgnitionEx.java:861)

at org.apache.ignite.internal.IgnitionEx.start(IgnitionEx.java:731)

at org.apache.ignite.internal.IgnitionEx.start(IgnitionEx.java:700)

at org.apache.ignite.Ignition.start(Ignition.java:348)

... 1 more

原因: clsFilter=org.apache.ignite.marshaller.MarshallerUtils$1@69fe0ed4，org.apache.ignite.IgniteCheckedException:无法启动SPI: TcpDiscoverySpi [addrRslvr=null，sockTimeout=5000，ackTimeout=5000，marsh=JdkMarshaller class reconCnt=10，reconDelay=2000，maxAckTimeout=600000，forceSrvMode=false，clientReconnectDisabled=false，internalLsnr=null]

at org.apache.ignite.internal.managers.GridManagerAdapter.startSpi(GridManagerAdapter.java:300)

at org.apache.ignite.internal.managers.discovery.GridDiscoveryManager.start(GridDiscoveryManager.java:939)

at org.apache.ignite.internal.IgniteKernal.startManager(IgniteKernal.java:1682)

... 11 more

原因:类org.apache.ignite.spi.IgniteSpiException:主密钥摘要不一致！节点联接被拒绝。

at org.apache.ignite.spi.discovery.tcp.TcpDiscoverySpi.checkFailedError(TcpDiscoverySpi.java:1946)

at org.apache.ignite.spi.discovery.tcp.ServerImpl.joinTopology(ServerImpl.java:969)

at org.apache.ignite.spi.discovery.tcp.ServerImpl.spiStart(ServerImpl.java:391)

at org.apache.ignite.spi.discovery.tcp.TcpDiscoverySpi.spiStart(TcpDiscoverySpi.java:2020)

at org.apache.ignite.internal.managers.GridManagerAdapter.startSpi(GridManagerAdapter.java:297)

... 13 more

无法启动网格:无法启动管理器: name=org.apache.ignite.internal.managers.discovery.GridDiscoveryManager，GridManagerAdapter enabled=true

Answer 1

错误意味着您在节点上使用不同的主密钥，并且它必须是相同的。获得相等主密钥的最简单方法是将JKS文件从一个节点复制到另一个节点。

请阅读有关TDE - https://apacheignite.readme.io/docs/transparent-data-encryption的文档