知识库

错误 “javax.net.ssl.SSLException: Received fatal alert: certificate_unknown” 的解释

当使用 Neo4j Browser 连接到 Neo4j 实例时,以下错误可能会记录在 $NEO4J_HOME\logs\debug.log

2020-06-20 13:33:13.039-0400 ERROR [o.n.b.t.TransportSelectionHandler] Fatal error occurred when initialising pipeline: [id: 0x59d02719, L:/12.31.54.51:5502 ! R:/192.168.9.5:55140] javax.net.ssl.SSLException: Received fatal alert: certificate_unknown
io.netty.handler.codec.DecoderException: javax.net.ssl.SSLException: Received fatal alert: certificate_unknown
	at io.netty.handler.codec.ByteToMessageDecoder.callDecode(ByteToMessageDecoder.java:468)
	at io.netty.handler.codec.ByteToMessageDecoder.channelInputClosed(ByteToMessageDecoder.java:401)
	at io.netty.handler.codec.ByteToMessageDecoder.channelInputClosed(ByteToMessageDecoder.java:368)
	at io.netty.handler.codec.ByteToMessageDecoder.channelInactive(ByteToMessageDecoder.java:351)
	at io.netty.handler.ssl.SslHandler.channelInactive(SslHandler.java:1084)----

这通常是由于客户端记录了错误的证书或浏览器的 URL 不正确导致的。

例如,如截图所示,在使用 Google Chrome 浏览器并点击 URL 旁边的锁形图标时

image

你应该看到其显示 Certificate Valid

进一步地,如果点击 Certificate Valid 文本,应该会显示类似于

image

并说明证书颁发给哪个域,Issued to:

如果遇到上述错误,您应确认 Neo4j 客户端拥有有效的证书,并在证书不正确时进行替换。

© . This site is unofficial and not affiliated with Neo4j, Inc.