Colocrossing杜甫IPMI安装系统

LDD LDD 收录于 技术
 约 900 字 预计阅读 2 分钟 

1721564459100.png
ColoCrossing独立服务器上通过IPMI安装系统

colocrossing杜甫安装系统

1.下载java环境

因为ipmi需要使用到jdk，1.8,1.7版本都行.

2.访问IPMI下载JNLP

安装完成之后，打开IPMI（一般工单里有） 1721561347651.png 点击图中控制台即可下载JNLP。
1721561478020.png 将站点url添加至java白名单。(https)
将IPMI网页证书导出，添加至java信任证书。 java.security 接下来还是连接不上。

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38

sun.security.validator.ValidatorException: PKIX path validation failed: java.security.cert.CertPathValidatorException: denyAfter constraint check failed: SHA1 used with Constraint date: 2019-01-01; params date: 2024-06-23T16:17:43.253Z used with certificate: CN=VeriSign Class 3 Public Primary Certification Authority - G5, OU="(c) 2006 VeriSign, Inc. - For authorized use only", OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US
	at sun.security.validator.PKIXValidator.doValidate(Unknown Source)
	at sun.security.validator.PKIXValidator.engineValidate(Unknown Source)
	at sun.security.validator.Validator.validate(Unknown Source)
	at sun.security.validator.Validator.validate(Unknown Source)
	at com.sun.deploy.security.TrustDecider.getValidationState(Unknown Source)
	at com.sun.deploy.security.TrustDecider.validateChain(Unknown Source)
	at com.sun.deploy.security.TrustDecider.isAllPermissionGrantedInt(Unknown Source)
	at com.sun.deploy.security.TrustDecider.isAllPermissionGranted(Unknown Source)
	at com.sun.javaws.security.AppPolicy.grantUnrestrictedAccess(Unknown Source)
	at com.sun.javaws.security.JNLPSignedResourcesHelper.checkSignedResourcesHelper(Unknown Source)
	at com.sun.javaws.security.JNLPSignedResourcesHelper.checkSignedResources(Unknown Source)
	at com.sun.javaws.Launcher.prepareResources(Unknown Source)
	at com.sun.javaws.Launcher.prepareAllResources(Unknown Source)
	at com.sun.javaws.Launcher.prepareToLaunch(Unknown Source)
	at com.sun.javaws.Launcher.prepareToLaunch(Unknown Source)[java.security](E%3A%2FJava%2Fjdk-1.8%2Flib%2Fsecurity%2Fjava.security)
	at com.sun.javaws.Launcher.launch(Unknown Source)
	at com.sun.javaws.Main.launchApp(Unknown Source)
	at com.sun.javaws.Main.continueInSecureThread(Unknown Source)
	at com.sun.javaws.Main.access$000(Unknown Source)
	at com.sun.javaws.Main$1.run(Unknown Source)
	at java.lang.Thread.run(Unknown Source)
Caused by: java.security.cert.CertPathValidatorException: denyAfter constraint check failed: SHA1 used with Constraint date: 2019-01-01; params date: 2024-06-23T16:17:43.253Z used with certificate: CN=VeriSign Class 3 Public Primary Certification Authority - G5, OU="(c) 2006 VeriSign, Inc. - For authorized use only", OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US
	at sun.security.provider.certpath.PKIXMasterCertPathValidator.validate(Unknown Source)
	at sun.security.provider.certpath.PKIXCertPathValidator.validate(Unknown Source)
	at sun.security.provider.certpath.PKIXCertPathValidator.validate(Unknown Source)
	at sun.security.provider.certpath.PKIXCertPathValidator.engineValidate(Unknown Source)
	at java.security.cert.CertPathValidator.validate(Unknown Source)
	... 21 more
Caused by: java.security.cert.CertPathValidatorException: denyAfter constraint check failed: SHA1 used with Constraint date: 2019-01-01; params date: 2024-06-23T16:17:43.253Z used with certificate: CN=VeriSign Class 3 Public Primary Certification Authority - G5, OU="(c) 2006 VeriSign, Inc. - For authorized use only", OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US
	at sun.security.util.DisabledAlgorithmConstraints$DenyAfterConstraint.permits(Unknown Source)
	at sun.security.util.DisabledAlgorithmConstraints$Constraint.next(Unknown Source)
	at sun.security.util.DisabledAlgorithmConstraints$UsageConstraint.permits(Unknown Source)
	at sun.security.util.DisabledAlgorithmConstraints$Constraints.permits(Unknown Source)
	at sun.security.util.DisabledAlgorithmConstraints.permits(Unknown Source)
	at sun.security.util.DisabledAlgorithmConstraints.permits(Unknown Source)
	at sun.security.provider.certpath.AlgorithmChecker.check(Unknown Source)
	... 26 more

具体是由于证书使用了SHA-1算法，并且该算法在2019年之后被认为不安全。因此，Java默认配置不再信任使用SHA-1算法签名的证书，导致验证失败。

3.修改Java安全配置

可以通过修改Java安全策略文件 (java.security) 来放宽对弃用算法的限制
具体找到安装目录\lib\security
例如我的: 1721563182900.png
找到jdk.certpath.disabledAlgorithms该行。 1721563388909.png
移除对SHA-1签名JAR文件的限制：

1
2
3

jdk.certpath.disabledAlgorithms=MD2, MD5, SHA1 jdkCA & usage TLSServer, \
    RSA keySize < 1024, DSA keySize < 1024, EC keySize < 224, \
    include jdk.disabled.namedCurves

完全移除对SHA-1的限制：

1
2
3

jdk.certpath.disabledAlgorithms=MD2, MD5, \
    RSA keySize < 1024, DSA keySize < 1024, EC keySize < 224, \
    include jdk.disabled.namedCurves

改完之后ctrl+s 保存，再次连接应该就没问题了。

4.下载iso 镜像文件

在netboot.xyz下载iso文件。 1721563866399.png 后续在IPMI打开菜单挂载好后，进入bios设置，选择 CDROM 启动 后面就一步步安装即可。

更新于 2024-06-24 
colocrossing
返回 | 主页
💬评论
0%