erlang日志中的未知ca

Question

我正在创建带有 3 个文件的 Erlang 服务器：cowbow-ca.crt，我猜这是 CA 的证书，server.key 和 server.crt，但我在日志中看到此错误消息。

=ERROR REPORT==== 3-Feb-2016::13:00:13 ===
Error in process <0.31594.15> on node 'node1@web02.example.lab' with exit value:
{closed,[{ranch_ssl,accept_ack,2,
                    [{file,"/www/web/staging/postman.example.lab/deps/ranch/src/ranch_ssl.erl"},
                     {line,115}]},
         {cowboy_protocol,init,4,
                          [{file,"/www/web/staging/postman.example.lab/deps/cowboy/src/cowboy_protocol.erl"},
                           {line,91}]}]}

=ERROR REPORT==== 3-Feb-2016::13:00:13 ===
Ranch listener https had connection process started with cowboy_protocol:start_link/4 at <0.31594.15> exit with reason: {closed,[{ranch_ssl,accept_ack,2,[{file,"/www/web/staging/postman.example.lab/deps/ranch/src/ranch_ssl.erl"},{line,115}]},{cowboy_protocol,init,4,[{file,"/www/web/staging/postman.example.lab/deps/cowboy/src/cowboy_protocol.erl"},{line,91}]}]}

=ERROR REPORT==== 3-Feb-2016::13:00:18 ===
SSL: certify: ssl_alert.erl:93:Fatal error: unknown ca

=ERROR REPORT==== 3-Feb-2016::13:01:11 ===
SSL: certify: ssl_alert.erl:93:Fatal error: unknown ca

=ERROR REPORT==== 3-Feb-2016::13:01:18 ===
SSL: certify: ssl_alert.erl:93:Fatal error: unknown ca

Answer 1

ssl_alert.erl:93 中的致命错误意味着这是通过 TLS 连接收到的警报。所以这意味着连接到您的服务器的客户端无法识别颁发证书的 CA。您可以通过将 CA 证书添加到客户端的受信任证书颁发者列表中来避免这种情况。