拒绝MinIO停靠SSL登录连接
我们正在使用来设置MinIO服务，现在我们正在添加SSL安全性。
登录屏幕在https://my.domain:9001上显示没有问题，但登录尝试失败。
当省略env变量MINIO_SERVER_URL时，错误表示Post "https://SOME_IP_ADDRESS:9000/": x509: cannot validate certificate for SOME_IP_ADDRESS because it doesn't contain any IP SANs。
当MINIO_SERVER_URL=https://my.domain:9000或MINIO_SERVER_URL=https://my.domain:9001时，错误变成Post "https://my.domain:9000/": dial tcp SERVER_IP_ADDRESS:9000: connect: connection refused。
在实现SSL之前，它在SERVER_IP_ADDRESS:9001上工作，在docker-come.yml中设置cert卷之后，它就变得不可用了。
在browser network工具中，响应号为500，其中包含消息“无效登录”，无论凭据是否正确。
MinIO桶可以从其他服务访问。
version: "3.9"
services:
minio:
image: minio/minio:latest
command: server --console-address ":9001" /data
container_name: minio
ports:
- "9000:9000"
- "9001:9001"
environment:
- MINIO_ROOT_USER=${ADMIN_USERNAME}
- MINIO_ROOT_PASSWORD=${ADMIN_PASSWORD}
- MINIO_SERVER_URL=https://my.domain:9000
volumes:
- ./data_docker/raw:/data
- ${PATH_CERT_FILE}:/root/.minio/certs/public.crt:ro
- ${PATH_CERT_PRIVATE_KEY}:/root/.minio/certs/private.key:ro
healthcheck:
test: ["CMD", "curl", "-f", "https://localhost:9000/minio/health/live"]
interval: 30s
timeout: 20s
retries: 3
restart: always有什么技巧可以解决这个错误吗？
回答 2
Stack Overflow用户
发布于 2022-10-13 07:08:26
我相信您最好的选择是设置主机，因为minio本身不知道通过ssl访问minio所需的"my.domain“。
这可以通过在坞-组合中添加以下内容来完成。
minio:
...
extra_hosts:
- "my.domain:127.0.0.1"
...Stack Overflow用户
发布于 2022-10-20 06:58:43
这是通过添加hostname:来指定域来解决的
version: "3.9"
services:
minio:
image: minio/minio:latest
command: server --console-address ":9001" /data
container_name: minio
ports:
- "9000:9000"
- "9001:9001"
environment:
- MINIO_ROOT_USER=${ADMIN_USERNAME}
- MINIO_ROOT_PASSWORD=${ADMIN_PASSWORD}
# Specify the URL hostname the MinIO Console should use for connecting to the MinIO Server.
- MINIO_SERVER_URL=https://my.domain:9000
# The hostname a container uses for itself. Defaults to the container’s ID if not specified.
hostname: my.domain
volumes:
- ./data_docker/raw:/data
# https://docs.min.io/docs/how-to-secure-access-to-minio-server-with-tls.html
# https://stackoverflow.com/a/69320949/5990202
- ${PATH_CERT_FILE}:/root/.minio/certs/public.crt:ro
- ${PATH_CERT_PRIVATE_KEY}:/root/.minio/certs/private.key:ro
healthcheck:
test: ["CMD", "curl", "-f", "https://my.domain:9000/minio/health/live"]
interval: 30s
timeout: 20s
retries: 3
restart: alwayshttps://stackoverflow.com/questions/72291231
复制相似问题
腾讯云开发者
