mongodb Studio 3t中x509身份验证的连接错误

我正在使用Studio 3t的许可版本,并尝试与x509建立连接。 能够通过带有sslPEMKeyFile和sslCAFile的x509 auth通过mongo shell连接。在Studio 3t中使用相同文件获取错误。 pem文件受密码保护。

SSL Factory error: error decrypting private key from /Users/test/Documents/Team/Mongodb/3.6.5/mongodb-osx-x86_64-enterprise-3.6.5/bin/pem/testapp/testapp.pem: unable to read encrypted data: unable to create InputDecryptor: class javax.crypto.spec.IvParameterSpec cannot be cast to class javax.crypto.spec.PBEParameterSpec (javax.crypto.spec.IvParameterSpec and javax.crypto.spec.PBEParameterSpec are in module java.base of loader 'bootstrap')

Stacktrace:
|_/ SSL Factory error: error decrypting private key from /Users/test/Documents/Team/Mongodb/3.6.5/mongodb-osx-x86_64-enterprise-3.6.5/bin/pem/testapp/testapp.pem: unable to read encrypted data: unable to create InputDecryptor: class javax.crypto.spec.IvParameterSpec cannot be cast to class javax.crypto.spec.PBEParameterSpec (javax.crypto.spec.IvParameterSpec and javax.crypto.spec.PBEParameterSpec are in module java.base of loader 'bootstrap')
|____/ Certificate error: error decrypting private key from /Users/test/Documents/Team/Mongodb/3.6.5/mongodb-osx-x86_64-enterprise-3.6.5/bin/pem/testapp/testapp.pem: unable to read encrypted data: unable to create InputDecryptor: class javax.crypto.spec.IvParameterSpec cannot be cast to class javax.crypto.spec.PBEParameterSpec (javax.crypto.spec.IvParameterSpec and javax.crypto.spec.PBEParameterSpec are in module java.base of loader 'bootstrap')
|_______/ org.bouncycastle.pkcs.pkcsException: unable to read encrypted data: unable to create InputDecryptor: class javax.crypto.spec.IvParameterSpec cannot be cast to class javax.crypto.spec.PBEParameterSpec (javax.crypto.spec.IvParameterSpec and javax.crypto.spec.PBEParameterSpec are in module java.base of loader 'bootstrap')
|__________/ org.bouncycastle.operator.OperatorCreationException: unable to create InputDecryptor: class javax.crypto.spec.IvParameterSpec cannot be cast to class javax.crypto.spec.PBEParameterSpec (javax.crypto.spec.IvParameterSpec and javax.crypto.spec.PBEParameterSpec are in module java.base of loader 'bootstrap')
|_____________/ java.lang.ClassCastException: class javax.crypto.spec.IvParameterSpec cannot be cast to class javax.crypto.spec.PBEParameterSpec (javax.crypto.spec.IvParameterSpec and javax.crypto.spec.PBEParameterSpec are in module java.base of loader 'bootstrap')

如果我选择的客户端证书不受通行期的保护,则会因为保护而得到以下错误。

SSL Factory error: certificate's private key requires password

Stacktrace:
|_/ SSL Factory error: certificate's private key requires password
|____/ Certificate error: certificate's private key requires password

如果我创建不带密码短语的pem文件,

SSL Factory error: No private keys found in [[],[  [0]         Version: 3
         SerialNumber: 4252222979075649915
             IssuerDN: CN=Test Corporate Server CA 1,OU=Certification Authority,O=Test Inc.,C=US
           Start Date: Wed Feb 27 10:27:35 PST 2019
           Final Date: Sun Mar 28 11:27:35 PDT 2021
            SubjectDN: CN=testapp-svc-dev.test.com,OU=management:auth.group.230057,ST=California,C=US
           Public Key: RSA Public Key [15:0d:62:42:ba:bd:b8:0f:75:d1:ff:35:e3:0d:3d:84:96:0b:94:d5]
            modulus: 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
    public exponent: 10001

  Signature Algorithm: SHA256WITHRSA
            Signature: a62ef4a4af2b4ee7c55ddc8ea1da9ca70eb4b9a2
                       eab74c856eeb871d98712ac65764893eb6a3f687
                       0629ba4d10768ce343c175f337f8fcb220416eea
                       c17455608b4aec55c250f12c9921a444ada65373
                       4db470db6ba335a88c102461676c859e55ddcec1
                       5bae72c842a236cd46735e209e406a1a6f09659b
                       d632c7c42f7c34dc3d15c2a7430a5caff231560d
                       93a31515ea9aa335360b74103b1eda1193ac48c4
                       d79ceecb4fdfd5ec9797506a537a8d70efac56ba
                       cc6f875b71b92abc46dc468698d3e48031119d85
                       91472b8bc786ade31f75a2b05288e93ef099df71
                       296833c7b47203b8c7a982c3edc77d8ba662af9a
                       1c5967b9972b6b8ff9511834186e71f0
       Extensions: 
                       critical(true) BasicConstraints: isCa(false)
                       critical(false) 2.5.29.35 value = Sequence
    Tagged [0] IMPLICIT 
        DER Octet String[20] 

                       critical(false) 1.3.6.1.5.5.7.1.1 value = Sequence
    Sequence
        ObjectIdentifier(1.3.6.1.5.5.7.48.2)
        Tagged [6] IMPLICIT 
            DER Octet String[45] 
    Sequence
        ObjectIdentifier(1.3.6.1.5.5.7.48.1)
        Tagged [6] IMPLICIT 
            DER Octet String[44] 

                       critical(false) 2.5.29.17 value = Sequence
    Tagged [2] IMPLICIT 
        DER Octet String[35] 
    Tagged [2] IMPLICIT 
        DER Octet String[30] 
    Tagged [2] IMPLICIT 
        DER Octet String[31] 
    Tagged [2] IMPLICIT 
        DER Octet String[31] 

                       critical(false) 2.5.29.32 value = Sequence
    Sequence
        ObjectIdentifier(1.2.840.113635.100.5.15.2)
        Sequence
            Sequence
                ObjectIdentifier(1.3.6.1.5.5.7.2.2)
                Sequence
                    UTF8String(Reliance on this certificate by any party assumes acceptance of any applicable terms and conditions of use and/or certification practice statements.) 
            Sequence
                ObjectIdentifier(1.3.6.1.5.5.7.2.1)
                IA5String(https://certificatemanager.test.com/#help/policies/corporate) 

                       critical(false) 2.5.29.37 value = Sequence
    ObjectIdentifier(1.3.6.1.5.5.7.3.1)
    ObjectIdentifier(1.3.6.1.5.5.7.3.2)

                       critical(false) 2.5.29.31 value = Sequence
    Sequence
        Tagged [0]
            Tagged [0]
                Tagged [6] IMPLICIT 
                    DER Octet String[43] 

                       critical(false) 2.5.29.14 value = DER Octet String[20] 

                       critical(true) KeyUsage: 0xa0
]]

在任何情况下都无法正常工作,而我可以通过外壳将相同的pem文件连接起来。这是Studio 3t中的错误吗?

Studio 3t版本-2020.6.0

iCMS 回答:mongodb Studio 3t中x509身份验证的连接错误

暂时没有好的解决方案,如果你有好的解决方案,请发邮件至:iooj@foxmail.com
本文链接:https://www.f2er.com/1971276.html

大家都在问