我在一台虚拟机上安装了一个标准的jitsi-meet。现在,我想将videobridge2 (JVB)从这个VM设置中“分离”出来,并将其安装到另一台机器上(只使用https 443端口)。
我观看了this outdated tutorial,并对它的内部工作原理有了一些了解。我偶然发现了this more recent wiki,并决定跟随它。
虽然我不确定是否正确、完美地遵循了它(因为有些部分对我来说不是很明确),但我在我遥远的JVB日志中有这个错误:
2020-05-16 14:46:15.192 WARNING: [39] [hostname=sub.mydomain.tld id=shard] MucClient$1.connectionClosedOnError#295: Closed on error:
javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
at sun.security.ssl.Alerts.getSSLException(Alerts.java:198)
at sun.security.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1967)
at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:331)
at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:325)
at sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1688)
at sun.security.ssl.ClientHandshaker.processMessage(ClientHandshaker.java:226)
at sun.security.ssl.Handshaker.processLoop(Handshaker.java:1082)
at sun.security.ssl.Handshaker.process_record(Handshaker.java:1010)
at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:1079)
at sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1388)
at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1416)
at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1400)
at org.jivesoftware.smack.tcp.XMPPTCPConnection.proceedTLSReceived(XMPPTCPConnection.java:810)
at org.jivesoftware.smack.tcp.XMPPTCPConnection.access$1200(XMPPTCPConnection.java:151)
at org.jivesoftware.smack.tcp.XMPPTCPConnection$PacketReader.parsePackets(XMPPTCPConnection.java:1071)
at org.jivesoftware.smack.tcp.XMPPTCPConnection$PacketReader.access$300(XMPPTCPConnection.java:1000)
at org.jivesoftware.smack.tcp.XMPPTCPConnection$PacketReader$1.run(XMPPTCPConnection.java:1016)
at java.lang.Thread.run(Thread.java:748)如果我理解正确,远程JVB会尝试连接到我的jitsi-meet VM韵律来接收流量。但根据上面的日志,MUC连接似乎存在证书问题。我发现this old thread在社区论坛上说,没有必要担心所有这些自签名证书,但我觉得我应该尝试安装适当的证书?
有没有人最近成功地在jitsi-meet安装中安装了多个JVB实例,可以减轻我的负担吗?
谢谢
发布于 2020-05-21 03:17:58
您需要关闭远程JVB中的证书验证。在远程JVB /etc/jitsi/videobridge/sip-communicator.properties文件中再添加一个参数
org.jitsi.videobridge.xmpp.user.shard.DISABLE_CERTIFICATE_VERIFICATION=true它现在也在他们的wiki中更新了。
https://stackoverflow.com/questions/61838810
复制相似问题