简体   繁体   English

WSO2 api 管理器和端点 HTTPS

[英]WSO2 api manager and endpoint HTTPS

hi i am trying to connect to an endpoint with wso2 AM and I get the following error:嗨,我正在尝试使用 wso2 AM 连接到端点,但出现以下错误:

INFO - LogMediator STATUS = Executing default 'fault' sequence, ERROR_CODE = 303001, ERROR_MESSAGE = Currently , Address endpoint : [ Name : Proyecto2--v1.0.0_APIproductionEndpoint ] [ State : SUSPENDED ]

wso2am is on one server and the endpoint on another, this entpoint is done on node and is HTTPS with self-signed certificate. wso2am 在一台服务器上,端点在另一台服务器上,这个端点在节点上完成,是 HTTPS 与自签名证书。 Also try changing the end point by: http://www.mocky.io/v2/5185415ba171ea3a00704eed and its works.还可以尝试通过以下方式更改端点: http://www.mocky.io/v2/5185415ba171ea3a00704eed及其作品。

If I go directly to the endpoint by postman from my computer it works correctly.如果我 go 从我的计算机通过 postman 直接连接到端点,它可以正常工作。

-both environments are development, so I do not have CA certificates - 两个环境都是开发环境,所以我没有 CA 证书

-AM 3.1.0 -上午 3.1.0

-the connection to the endpoint is not suspended by timeout, it is immediate (less than 2 second). - 与端点的连接不会因超时而暂停,它是立即的(少于 2 秒)。

I have tried to get data from the wso2 server to the backend server with curl and it worked for me correctly adding "--insecure"我试图从 wso2 服务器获取数据到带有 curl 的后端服务器,它对我来说正确添加了“--insecure”

with self-signed certificate.带有自签名证书。 I have uploaded the certificate through wso2 / publisher b我已通过 wso2 / 发布者 b 上传证书

I'm not sure where did you upload the certificate, but in the publisher it's usually the client keypair which is defined, not the endpoint server certificate (I'm not sure about the newest version)我不确定您在哪里上传证书,但在发布者中通常是定义的客户端密钥对,而不是端点服务器证书(我不确定最新版本)

If the self-signed certificate is not trusted (in the client-truststore.jks ) or the CN doesn't match the URL, the SSL connection will be denied.如果自签名证书不受信任(在client-truststore.jks中)或 CN 与 URL 不匹配,则 SSL 连接将被拒绝。

You may try你可以试试

#in deployment.toml file.
[transport.passthru_https.sender.parameters]
HostnameVerifier = "AllowAll"  

In Axis2.xml https sender (if the configuration above is not reflected)在 Axis2.xml https 发送器中(如果上面的配置没有体现)

<parameter name="HostnameVerifier">AllowAll</parameter>

(that should ignore the SSL hostname validation, I do not recommend to do that for prod) (这应该忽略 SSL 主机名验证,我不建议为 prod 这样做)

声明:本站的技术帖子网页,遵循CC BY-SA 4.0协议,如果您需要转载,请注明本站网址或者原文地址。任何问题请咨询:yoyou2525@163.com.

 
粤ICP备18138465号  © 2020-2024 STACKOOM.COM