使用 IP 地址时, upload_firmware_tool 无法使用 Java 8.0.5.30

当使用 Java 1.8 (8.0.5.30) 并且在命令中指定了 IP 地址参数时, 8.0.1.11 或 8.0.1.12中的虚拟设备随附的 upload_firmware_tool 不起作用,也不会上载 .pkg 文件。

问题

此命令会导致以下 javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException 错误:

bash-3.2# /opt/IBM/ldap/V6.4/java/jre/bin/java -jar FileUpload.jar  9.113.51.68 admin admin temptrust.jks WebAS 8.0.1.12-ISS-ISDS_20190910-1053_dev.pkg
javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: No subject alternative names present
bash-3.2# /opt/IBM/ldap/V6.4/java/jre/bin/java -version
java version "1.8.0_201"
Java(TM) SE Runtime Environment (build 8.0.5.30 - pap6480sr5fp30-20190207_01(SR5 FP30))
IBM J9 VM (build 2.9, JRE 1.8.0 AIX ppc64-64-Bit Compressed References 20190124_408237 (JIT enabled, AOT enabled)
OpenJ9   - 9c77d86
OMR      - dad8ba7
IBM      - e2996d1)
JCL - 20190207_01 based on Oracle jdk8u201-b09

解决方案

要使用 Java 8.0.5.30工具上载包文件,请使用 IBM® Security Directory Suite 虚拟机的标准域名。

例如:

bash-3.2# /opt/IBM/ldap/V6.4/java/jre/bin/java -jar FileUpload.jar  sdsetz068.example.com admin admin temptrust.jks WebAS 8.0.1.12-ISS-ISDS_20190910-1053_dev.pkg
File size: 1736432400
SERVER REPLIED:
upload completed successfully.

bash-3.2# /opt/IBM/ldap/V6.4/java/jre/bin/java -version
java version "1.8.0_201"
Java(TM) SE Runtime Environment (build 8.0.5.30 - pap6480sr5fp30-20190207_01(SR5 FP30))
IBM J9 VM (build 2.9, JRE 1.8.0 AIX ppc64-64-Bit Compressed References 20190124_408237 (JIT enabled, AOT enabled)
OpenJ9   - 9c77d86
OMR      - dad8ba7
IBM      - e2996d1)
JCL - 20190207_01 based on Oracle jdk8u201-b09