sjdboy opened a new issue #7443:
URL: https://github.com/apache/skywalking/issues/7443
os version:ubuntu 20.04
docker version: 20.10.7
docker command:
```
sudo docker run -it --name sky --net=host \
-e TZ=Asia/Shanghai \
-e "SW_STORAGE=elasticsearch7" \
-e "SW_STORAGE_ES_CLUSTER_NODES=192.168.3.2:9200" \
-e "SW_ES_USER=elastic" \
-e "SW_ES_PASSWORD=123456" \
-e "SW_STORAGE_ES_HTTP_PROTOCOL=https" \
-e "SW_SW_STORAGE_ES_SSL_JKS_PATH=/opt/skywalking/es.jsk" \
-e "SW_SW_STORAGE_ES_SSL_JKS_PASS=111111" \
-v /home/skywalking/config/es.jks:/opt/skywalking/es.jsk \
apache/skywalking-oap-server:8.7.0-es7
```
docker run error log:
2021-08-11 22:04:39,941 -
org.apache.skywalking.oap.server.library.module.BootstrapFlow -5384 [main] INFO
[] - start the provider default in alarm module.
2021-08-11 22:04:39,941 -
org.apache.skywalking.oap.server.library.module.BootstrapFlow -5384 [main] INFO
[] - start the provider default in event-analyzer module.
2021-08-11 22:04:39,978 -
org.apache.skywalking.oap.server.core.analysis.DispatcherManager -5421 [main]
INFO [] - Dispatcher
org.apache.skywalking.oap.server.core.source.oal.rt.dispatcher.EventDispatcher
is added into DefaultScopeDefine 43.
2021-08-11 22:04:39,980 -
org.apache.skywalking.oap.server.library.module.BootstrapFlow -5423 [main] INFO
[] - start the provider elasticsearch7 in storage module.
2021-08-11 22:04:39,980 -
org.apache.skywalking.oap.server.library.client.elasticsearch.ElasticSearchClient
-5423 [main] INFO [] - elasticsearch cluster nodes: 192.168.3.49:9200
2021-08-11 22:04:40,780 -
org.apache.skywalking.oap.server.starter.OAPServerBootstrap -6223 [main] ERROR
[] - PKIX path building failed:
sun.security.provider.certpath.SunCertPathBuilderException: unable to find
valid certification path to requested target
org.apache.skywalking.oap.server.library.module.ModuleStartException: PKIX
path building failed:
sun.security.provider.certpath.SunCertPathBuilderException: unable to find
valid certification path to requested target
at
org.apache.skywalking.oap.server.storage.plugin.elasticsearch7.StorageModuleElasticsearch7Provider.start(StorageModuleElasticsearch7Provider.java:228)
~[storage-elasticsearch7-plugin-8.7.0.jar:8.7.0]
at
org.apache.skywalking.oap.server.library.module.BootstrapFlow.start(BootstrapFlow.java:49)
~[library-module-8.7.0.jar:8.7.0]
at
org.apache.skywalking.oap.server.library.module.ModuleManager.init(ModuleManager.java:60)
~[library-module-8.7.0.jar:8.7.0]
at
org.apache.skywalking.oap.server.starter.OAPServerBootstrap.start(OAPServerBootstrap.java:43)
[server-bootstrap-8.7.0.jar:8.7.0]
at
org.apache.skywalking.oap.server.starter.OAPServerStartUp.main(OAPServerStartUp.java:27)
[server-starter-es7-8.7.0.jar:8.7.0]
Caused by: javax.net.ssl.SSLHandshakeException: PKIX path building failed:
sun.security.provider.certpath.SunCertPathBuilderException: unable to find
valid certification path to requested target
at
org.elasticsearch.client.RestClient.extractAndWrapCause(RestClient.java:874)
~[elasticsearch-rest-client-7.10.2.jar:7.10.2]
at
org.elasticsearch.client.RestClient.performRequest(RestClient.java:283)
~[elasticsearch-rest-client-7.10.2.jar:7.10.2]
at
org.elasticsearch.client.RestClient.performRequest(RestClient.java:270)
~[elasticsearch-rest-client-7.10.2.jar:7.10.2]
at
org.elasticsearch.client.RestHighLevelClient.internalPerformRequest(RestHighLevelClient.java:1632)
~[elasticsearch-rest-high-level-client-7.10.2.jar:7.10.2]
at
org.elasticsearch.client.RestHighLevelClient.performRequest(RestHighLevelClient.java:1617)
~[elasticsearch-rest-high-level-client-7.10.2.jar:7.10.2]
at
org.elasticsearch.client.RestHighLevelClient.ping(RestHighLevelClient.java:775)
~[elasticsearch-rest-high-level-client-7.10.2.jar:7.10.2]
at
org.apache.skywalking.oap.server.storage.plugin.elasticsearch7.client.ElasticSearch7Client.connect(ElasticSearch7Client.java:111)
~[storage-elasticsearch7-plugin-8.7.0.jar:8.7.0]
at
org.apache.skywalking.oap.server.storage.plugin.elasticsearch7.StorageModuleElasticsearch7Provider.start(StorageModuleElasticsearch7Provider.java:223)
~[storage-elasticsearch7-plugin-8.7.0.jar:8.7.0]
... 4 more
Caused by: javax.net.ssl.SSLHandshakeException: PKIX path building failed:
sun.security.provider.certpath.SunCertPathBuilderException: unable to find
valid certification path to requested target
at sun.security.ssl.Alert.createSSLException(Alert.java:131) ~[?:?]
at sun.security.ssl.TransportContext.fatal(TransportContext.java:350)
~[?:?]
at sun.security.ssl.TransportContext.fatal(TransportContext.java:293)
~[?:?]
at sun.security.ssl.TransportContext.fatal(TransportContext.java:288)
~[?:?]
at
sun.security.ssl.CertificateMessage$T13CertificateConsumer.checkServerCerts(CertificateMessage.java:1356)
~[?:?]
at
sun.security.ssl.CertificateMessage$T13CertificateConsumer.onConsumeCertificate(CertificateMessage.java:1231)
~[?:?]
at
sun.security.ssl.CertificateMessage$T13CertificateConsumer.consume(CertificateMessage.java:1174)
~[?:?]
at sun.security.ssl.SSLHandshake.consume(SSLHandshake.java:392) ~[?:?]
at
sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:444) ~[?:?]
at
sun.security.ssl.SSLEngineImpl$DelegatedTask$DelegatedAction.run(SSLEngineImpl.java:1074)
~[?:?]
at
sun.security.ssl.SSLEngineImpl$DelegatedTask$DelegatedAction.run(SSLEngineImpl.java:1061)
~[?:?]
at java.security.AccessController.doPrivileged(Native Method) ~[?:?]
at
sun.security.ssl.SSLEngineImpl$DelegatedTask.run(SSLEngineImpl.java:1008) ~[?:?]
at
org.apache.http.nio.reactor.ssl.SSLIOSession.doRunTask(SSLIOSession.java:285)
~[httpcore-nio-4.4.12.jar:4.4.12]
at
org.apache.http.nio.reactor.ssl.SSLIOSession.doHandshake(SSLIOSession.java:345)
~[httpcore-nio-4.4.12.jar:4.4.12]
at
org.apache.http.nio.reactor.ssl.SSLIOSession.isAppInputReady(SSLIOSession.java:523)
~[httpcore-nio-4.4.12.jar:4.4.12]
at
org.apache.http.impl.nio.reactor.AbstractIODispatch.inputReady(AbstractIODispatch.java:120)
~[httpcore-nio-4.4.12.jar:4.4.12]
at
org.apache.http.impl.nio.reactor.BaseIOReactor.readable(BaseIOReactor.java:162)
~[httpcore-nio-4.4.12.jar:4.4.12]
at
org.apache.http.impl.nio.reactor.AbstractIOReactor.processEvent(AbstractIOReactor.java:337)
~[httpcore-nio-4.4.12.jar:4.4.12]
at
org.apache.http.impl.nio.reactor.AbstractIOReactor.processEvents(AbstractIOReactor.java:315)
~[httpcore-nio-4.4.12.jar:4.4.12]
at
org.apache.http.impl.nio.reactor.AbstractIOReactor.execute(AbstractIOReactor.java:276)
~[httpcore-nio-4.4.12.jar:4.4.12]
at
org.apache.http.impl.nio.reactor.BaseIOReactor.execute(BaseIOReactor.java:104)
~[httpcore-nio-4.4.12.jar:4.4.12]
at
org.apache.http.impl.nio.reactor.AbstractMultiworkerIOReactor$Worker.run(AbstractMultiworkerIOReactor.java:591)
~[httpcore-nio-4.4.12.jar:4.4.12]
at java.lang.Thread.run(Thread.java:834) ~[?:?]
Caused by: sun.security.validator.ValidatorException: PKIX path building
failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to
find valid certification path to requested target
at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:439)
~[?:?]
at
sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:306)
~[?:?]
at sun.security.validator.Validator.validate(Validator.java:264) ~[?:?]
at
sun.security.ssl.X509TrustManagerImpl.validate(X509TrustManagerImpl.java:313)
~[?:?]
at
sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:276)
~[?:?]
at
sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:141)
~[?:?]
at
sun.security.ssl.CertificateMessage$T13CertificateConsumer.checkServerCerts(CertificateMessage.java:1334)
~[?:?]
at
sun.security.ssl.CertificateMessage$T13CertificateConsumer.onConsumeCertificate(CertificateMessage.java:1231)
~[?:?]
at
sun.security.ssl.CertificateMessage$T13CertificateConsumer.consume(CertificateMessage.java:1174)
~[?:?]
at sun.security.ssl.SSLHandshake.consume(SSLHandshake.java:392) ~[?:?]
at
sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:444) ~[?:?]
at
sun.security.ssl.SSLEngineImpl$DelegatedTask$DelegatedAction.run(SSLEngineImpl.java:1074)
~[?:?]
at
sun.security.ssl.SSLEngineImpl$DelegatedTask$DelegatedAction.run(SSLEngineImpl.java:1061)
~[?:?]
at java.security.AccessController.doPrivileged(Native Method) ~[?:?]
at
sun.security.ssl.SSLEngineImpl$DelegatedTask.run(SSLEngineImpl.java:1008) ~[?:?]
at
org.apache.http.nio.reactor.ssl.SSLIOSession.doRunTask(SSLIOSession.java:285)
~[httpcore-nio-4.4.12.jar:4.4.12]
at
org.apache.http.nio.reactor.ssl.SSLIOSession.doHandshake(SSLIOSession.java:345)
~[httpcore-nio-4.4.12.jar:4.4.12]
at
org.apache.http.nio.reactor.ssl.SSLIOSession.isAppInputReady(SSLIOSession.java:523)
~[httpcore-nio-4.4.12.jar:4.4.12]
at
org.apache.http.impl.nio.reactor.AbstractIODispatch.inputReady(AbstractIODispatch.java:120)
~[httpcore-nio-4.4.12.jar:4.4.12]
at
org.apache.http.impl.nio.reactor.BaseIOReactor.readable(BaseIOReactor.java:162)
~[httpcore-nio-4.4.12.jar:4.4.12]
at
org.apache.http.impl.nio.reactor.AbstractIOReactor.processEvent(AbstractIOReactor.java:337)
~[httpcore-nio-4.4.12.jar:4.4.12]
at
org.apache.http.impl.nio.reactor.AbstractIOReactor.processEvents(AbstractIOReactor.java:315)
~[httpcore-nio-4.4.12.jar:4.4.12]
at
org.apache.http.impl.nio.reactor.AbstractIOReactor.execute(AbstractIOReactor.java:276)
~[httpcore-nio-4.4.12.jar:4.4.12]
at
org.apache.http.impl.nio.reactor.BaseIOReactor.execute(BaseIOReactor.java:104)
~[httpcore-nio-4.4.12.jar:4.4.12]
at
org.apache.http.impl.nio.reactor.AbstractMultiworkerIOReactor$Worker.run(AbstractMultiworkerIOReactor.java:591)
~[httpcore-nio-4.4.12.jar:4.4.12]
at java.lang.Thread.run(Thread.java:834) ~[?:?]
Caused by: sun.security.provider.certpath.SunCertPathBuilderException:
unable to find valid certification path to requested target
at
sun.security.provider.certpath.SunCertPathBuilder.build(SunCertPathBuilder.java:141)
~[?:?]
at
sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathBuilder.java:126)
~[?:?]
at java.security.cert.CertPathBuilder.build(CertPathBuilder.java:297)
~[?:?]
at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:434)
~[?:?]
at
sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:306)
~[?:?]
at sun.security.validator.Validator.validate(Validator.java:264) ~[?:?]
at
sun.security.ssl.X509TrustManagerImpl.validate(X509TrustManagerImpl.java:313)
~[?:?]
at
sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:276)
~[?:?]
at
sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:141)
~[?:?]
at
sun.security.ssl.CertificateMessage$T13CertificateConsumer.checkServerCerts(CertificateMessage.java:1334)
~[?:?]
at
sun.security.ssl.CertificateMessage$T13CertificateConsumer.onConsumeCertificate(CertificateMessage.java:1231)
~[?:?]
at
sun.security.ssl.CertificateMessage$T13CertificateConsumer.consume(CertificateMessage.java:1174)
~[?:?]
at sun.security.ssl.SSLHandshake.consume(SSLHandshake.java:392) ~[?:?]
at
sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:444) ~[?:?]
at
sun.security.ssl.SSLEngineImpl$DelegatedTask$DelegatedAction.run(SSLEngineImpl.java:1074)
~[?:?]
at
sun.security.ssl.SSLEngineImpl$DelegatedTask$DelegatedAction.run(SSLEngineImpl.java:1061)
~[?:?]
at java.security.AccessController.doPrivileged(Native Method) ~[?:?]
at
sun.security.ssl.SSLEngineImpl$DelegatedTask.run(SSLEngineImpl.java:1008) ~[?:?]
at
org.apache.http.nio.reactor.ssl.SSLIOSession.doRunTask(SSLIOSession.java:285)
~[httpcore-nio-4.4.12.jar:4.4.12]
at
org.apache.http.nio.reactor.ssl.SSLIOSession.doHandshake(SSLIOSession.java:345)
~[httpcore-nio-4.4.12.jar:4.4.12]
at
org.apache.http.nio.reactor.ssl.SSLIOSession.isAppInputReady(SSLIOSession.java:523)
~[httpcore-nio-4.4.12.jar:4.4.12]
at
org.apache.http.impl.nio.reactor.AbstractIODispatch.inputReady(AbstractIODispatch.java:120)
~[httpcore-nio-4.4.12.jar:4.4.12]
at
org.apache.http.impl.nio.reactor.BaseIOReactor.readable(BaseIOReactor.java:162)
~[httpcore-nio-4.4.12.jar:4.4.12]
at
org.apache.http.impl.nio.reactor.AbstractIOReactor.processEvent(AbstractIOReactor.java:337)
~[httpcore-nio-4.4.12.jar:4.4.12]
at
org.apache.http.impl.nio.reactor.AbstractIOReactor.processEvents(AbstractIOReactor.java:315)
~[httpcore-nio-4.4.12.jar:4.4.12]
at
org.apache.http.impl.nio.reactor.AbstractIOReactor.execute(AbstractIOReactor.java:276)
~[httpcore-nio-4.4.12.jar:4.4.12]
at
org.apache.http.impl.nio.reactor.BaseIOReactor.execute(BaseIOReactor.java:104)
~[httpcore-nio-4.4.12.jar:4.4.12]
at
org.apache.http.impl.nio.reactor.AbstractMultiworkerIOReactor$Worker.run(AbstractMultiworkerIOReactor.java:591)
~[httpcore-nio-4.4.12.jar:4.4.12]
at java.lang.Thread.run(Thread.java:834) ~[?:?]
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
