如何解决尝试备份证书时 SQL Server 崩溃
我正在尝试从主节点创建备份证书,以便在辅助节点上为可用性组创建证书。使用以下内容:
CREATE MASTER KEY ENCRYPTION BY PASSWORD = 'password123';
CREATE CERTIFICATE dbm_certificate WITH SUBJECT = 'dbm';
BACKUP CERTIFICATE dbm_certificate
TO FILE = 'dbm_certificate.cer'
WITH PRIVATE KEY (
FILE = 'dbm_certificate.pvk',ENCRYPTION BY PASSWORD = '123password'
);
主密钥和证书创建成功,但 BACKUP CERTIFICATE
返回:
A transport-level error has occurred when receiving results from the server. (provider: TCP Provider,error: 0 - An existing connection was forcibly closed by the remote host.)
这似乎是由 sql 提供以下日志的核心转储引起的:
This program has encountered a fatal error and cannot continue running at Tue Jan 26 12:25:05 2021
The following diagnostic information is available:
Reason: 0x00000001
Signal: SIGABRT - Aborted (6)
Stack:
IP Function
---------------- --------------------------------------
0000559b81252023 malloc_usable_size+0x9e103
0000559b81251afe malloc_usable_size+0x9dbde
0000559b8125111a malloc_usable_size+0x9d1fa
00007fbabc90d400 __restore_rt+0x0
00007fbabc90d387 gsignal+0x37
00007fbabc90ea78 abort+0x148
00007fbabb5ecc8f OpenSSLDie+0x1f
00007fbabb6aadcc bad_do_cipher+0x1c
00007fbabb6aafba EVP_EncryptUpdate+0xda
0000559b8120c8ce malloc_usable_size+0x589ae
0000559b8120c4c2 malloc_usable_size+0x585a2
0000559b811d60d5 malloc_usable_size+0x221b5
0000559b811d5d99 malloc_usable_size+0x21e79
Process: 11391 - sqlservr
Thread: 11513 (application thread 0x1c4)
Instance Id: 2b6201eb-eeba-4f82-8007-7e3ef630be1a
Crash Id: 98fa6ae2-ac80-4454-839a-06ffba21260a
Build stamp: 86f25b9af3192b748396bd75b5bf3eceb3e2e62a8c2271521d281f5a53463d38
Distribution: Red Hat Enterprise Linux
Processors: 4
Total Memory: 8370020352 bytes
Timestamp: Tue Jan 26 12:25:05 2021
删除 WITH PRIVATE KEY
允许命令在数据文件夹中成功创建 dbm_certificate。这让我相信问题出在 OPENSSL 和私钥的加密上。我已经在带有 OPENSSL 1.0.2k 的 Red Hat 7.9 上安装了 MSSQL 2019。我在 /opt/mssql/lib 中创建了指向 OPENSSL 的符号链接,并添加了:
[Service]
Environment="LD_LIBRARY_PATH=/opt/mssql/lib"
到 mssql-server 服务。
版权声明:本文内容由互联网用户自发贡献,该文观点与技术仅代表作者本人。本站仅提供信息存储空间服务,不拥有所有权,不承担相关法律责任。如发现本站有涉嫌侵权/违法违规的内容, 请发送邮件至 dio@foxmail.com 举报,一经查实,本站将立刻删除。