问题现象
将存储节点和代理程序更新到更新 2(内部版本 26981)后,备份到托管位置失败并出现以下错误:
中文提示:
连接存储节点失败。SocketError:错误:14090086:SSL 例程:ssl3_get_server_certificate:证书验证失败
或
无法通过端口“0”与存储节点“”
英文提示:
Failed to connect to the storage node. SocketError: error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed
完整错误信息示例:
中文日志:
SocketError:错误:14090086:SSL 例程:ssl3_get_server_certificate:证书验证失败
MESSAGESocketError:错误:14090086:SSL 例程:ssl3_get_server_certificate:证书验证失败
附加信息:------------------------
错误代码:20250646
字段:{“$ module":"mms_vsa64_26981","CommandID":"D332948D-A7A9-4E07-B76C-253DCF6E17FB"}
消息:TOL:执行命令失败。备份计划'新保护计划(4)'
------------
错误代码:20250646
字段:{“$module”:“agent_protection_addon_vsa64_26981”, "CommandID":"D332948D-A7A9-4E07-B76C-253DCF6E17FB"}
消息:TOL:执行命令失败。备份计划'新保护计划(4)'
------------
错误代码:
字段:{"$module":"agent_protection_addon_vsa64_26981"}
消息:执行命令失败。
------------------------
错误代码:20250677
字段:{"$module":"agent_protection_addon_vsa64_26981","FailCount":2}
消息:2 个活动没有成功。显示其中之一。
------------------------
错误代码:20250646
字段:{"$module":"service_process_vsa64_26981","CommandID":"8F01AC13-F59E-4851 -9204-DE1FD77E36B4"}
消息:TOL:执行命令失败。备份
------------------------
错误代码:20250646
字段:{“$module”:”
消息:TOL:无法执行命令。备份
------------------------
错误代码:10092552
字段:{"$module":"disk_bundle_vsa64_26981","IsReturnCode":1}
消息:连接存储节点失败。
------------------------
错误代码:10092552
字段:{"$module":"disk_bundle_vsa64_26981","ASNAddress":"10.247.144.6", "ASNPort":0}
消息:无法连接到存储节点。
------------------------
错误代码:48562277
字段:{"$module":"asyncipc_vsa64_26981","Code":336134278}
消息:SocketError:错误:14090086:SSL 例程:
英文日志:
SocketError: error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed
MESSAGESocketError: error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed
Additional info:------------------------
Error code: 20250646
Fields: {"$module":"mms_vsa64_26981","CommandID":"D332948D-A7A9-4E07-B76C-253DCF6E17FB"}
Message: TOL: Failed to execute the command. Backup plan 'New protection plan (4)'
------------------------
Error code: 20250646
Fields: {"$module":"agent_protection_addon_vsa64_26981","CommandID":"D332948D-A7A9-4E07-B76C-253DCF6E17FB"}
Message: TOL: Failed to execute the command. Backup plan 'New protection plan (4)'
------------------------
Error code: 20119593
Fields: {"$module":"agent_protection_addon_vsa64_26981"}
Message: Failed to execute the command.
------------------------
Error code: 20250677
Fields: {"$module":"agent_protection_addon_vsa64_26981","FailCount":2}
Message: 2 activities have not succeeded. One of them is displayed.
------------------------
Error code: 20250646
Fields: {"$module":"service_process_vsa64_26981","CommandID":"8F01AC13-F59E-4851-9204-DE1FD77E36B4"}
Message: TOL: Failed to execute the command. Backing up
------------------------
Error code: 20250646
Fields: {"$module":"gtob_backup_command_addon_vsa64_26981","CommandID":"8F01AC13-F59E-4851-9204-DE1FD77E36B4"}
Message: TOL: Failed to execute the command. Backing up
------------------------
Error code: 10092552
Fields: {"$module":"disk_bundle_vsa64_26981","IsReturnCode":1}
Message: Failed to connect to the storage node.
------------------------
Error code: 10092552
Fields: {"$module":"disk_bundle_vsa64_26981","ASNAddress":"10.247.144.6","ASNPort":0}
Message: Failed to connect to the storage node.
------------------------
Error code: 48562277
Fields: {"$module":"asyncipc_vsa64_26981","Code":336134278}
Message: SocketError: error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed
问题原因
存储在代理中的 ASN 服务器证书的哈希不会更改。可以更改的是 ASN 证书。如果 ASN 被卸载然后重新安装,那么它将生成一个新证书,但新的证书与代理中存储的不匹配,因此代理将无法连接到 ASN。
解决方案
该问题已在 Acronis Cyber Protect 15 Update 2(内部版本 27009)中得到解决。
解决方法
如果问题在较新的版本中重现,请使用下面描述的解决方法之一。
解决方法 1
要从代理中删除存储的证书哈希,请删除 Acronis 存储节点备份位置并重新添加:
- 转到备份存储界面并删除 Acronis 存储节点位置
- 再次添加位置。
解决方法 2
如果第一个解决方案没有解决问题,则需要手动删除存储的证书哈希。
找到存储哈希的文件夹并将其删除,哈希文件位于
Windows: C:\ProgramData\Acronis\BackupAndRecovery\MMS\AccessVault\raw 下
Linux: /var/lib/Acronis/BackupAndRecovery/MMS/AccessVault/raw 下运行命令行 (cmd) 并运行以下命令以查找正确的文件夹:
Windows :findstr.exe /S hash "C:\ProgramData\Acronis\BackupAndRecovery\MMS\AccessVault\raw\*"
Linux:
grep -r hash /var/lib/Acronis/BackupAndRecovery/MMS/AccessVault/raw/*
您将找到目录列表,例如:
Windows:
C:\ProgramData\Acronis\BackupAndRecovery\MMS\AccessVault\raw\1A2B3C45-D67E-8F8G-0H1K-LM2345678NO\meta: <address value="ASN_ADDRESS:hash" />
C:\ProgramData\Acronis\BackupAndRecovery\MMS\AccessVault\raw\1A2B3C45-D67E-8F8G-0H1K-LM2345678NO\ticket.json: "address" : "ASN_ADDRESS:hash"
Linux:
./6592F7FF-FA13-BA92-4B67-F906E03AE8AF/meta: <address value="ASN_ADDRESS:hash" />
./6592F7FF-FA13-BA92-4B67-F906E03AE8AF/ticket.json: "address" : "ASN_ADDRESS:hash",
- 删除带有 ticket.json 文件的目录,其中包含:
"address" : "ASN_ADDRESS:hash"
在上述的示例中,应删除目录 C:\ProgramData\Acronis\BackupAndRecovery\MMS\AccessVault\raw\1A2B3C45-D67E-8F8G-0H1K-LM2345678NO。
请对所有代理执行上述操作。