客户端引用的协议版本是TLS12,但是服务端协议版本是10.简单说就是数据库版本太低,需要降低客户端版本才能适配
kubectl get pod -n flink -owide
kubectl exec -it sql-session-5c949ccbc-pp8vb /bin/bash -n flink
打开 java.security 文件之后,修改 jdk.tls.disabledAlgorithms=
后面的值,删除 TLSv1, TLSv1.1
和 3DES_EDE_CBC
即可。
cat java.security | grep "TLSv1, TLSv1.1,"
sed -i "s/jdk.tls.disabledAlgorithms=SSLv3, TLSv1, TLSv1.1, RC4, DES, MD5withRSA,/jdk.tls.disabledAlgorithms=SSLv3, RC4, DES, MD5withRSA,/g" /opt/java/openjdk/lib/security/java.security
sed -i "s/DH keySize < 1024, EC keySize < 224, 3DES_EDE_CBC, anon, NULL,/DH keySize < 1024, EC keySize < 224, anon, NULL,/g" /opt/java/openjdk/lib/security/java.security
cat java.security
kubectl exec -it session-deployment-only-779bdbb996-jqvjg /bin/bash -n flink
kubectl delete -f session-deployment-only.yaml -n flink
kubectl apply -f session-deployment-only.yaml -n flink
kubectl get pod -n flink
cat /opt/java/openjdk/lib/security/java.security| grep "TLSv1, TLSv1.1,"
cat /opt/java/openjdk/lib/security/java.security | grep "3DES_EDE_CBC,"
cat /opt/java/openjdk/lib/security/java.security | grep "jdk.tls.disabledAlgorithms="