access denied (“java.io.FilePermission“ “/cert/elastic-certificates.p12“ “read“)

我在配置跨集群数据同步时候。A集群需要从B集群同步数据，但是B集群是带有安全认证的。所以需要把B集群的证书放在A集群。为了偷懒，我把elastic-certificates.p12 证书，放在了config目录的外边。然后就报了下边的错。一开始我以为没有读权限，所以就使用chmod 777elastic-certificates.p12 但是已经不能使用。后台把文件挪到了config目录下，然后又

水的精神

2168人浏览 · 2021-04-22 20:18:09

水的精神 · 2021-04-22 20:18:09 发布

我在配置跨集群数据同步时候。A集群需要从B集群同步数据，但是B集群是带有安全认证的。所以需要把B集群的证书放在A集群。

为了偷懒，我把elastic-certificates.p12 证书，放在了config目录的外边。然后就报了下边的错。一开始我以为没有读权限，所以就使用 chmod 777 elastic-certificates.p12 但是已经不能使用。

后台把文件挪到了config目录下，然后又修改elasticsearch.yml 里边的配置路径，使用了elastic-certificates.p12的绝对路径，然后就能成功启动了。

Caused by: java.security.AccessControlException: access denied ("java.io.FilePermission" "/home/wsn/es7.3/cert/elastic-certificates.p12" "read")
   at java.security.AccessControlContext.checkPermission(AccessControlContext.java:472) ~[?:?]
   at java.security.AccessController.checkPermission(AccessController.java:1044) ~[?:?]
   at java.lang.SecurityManager.checkPermission(SecurityManager.java:408) ~[?:?]
   at java.lang.SecurityManager.checkRead(SecurityManager.java:747) ~[?:?]
   at sun.nio.fs.UnixPath.checkRead(UnixPath.java:818) ~[?:?]
   at sun.nio.fs.UnixFileSystemProvider.checkAccess(UnixFileSystemProvider.java:295) ~[?:?]
   at java.nio.file.Files.notExists(Files.java:2565) ~[?:?]
   at org.elasticsearch.common.ssl.KeyStoreUtil.readKeyStore(KeyStoreUtil.java:72) ~[?:?]
   at org.elasticsearch.common.ssl.StoreKeyConfig.createKeyManager(StoreKeyConfig.java:69) ~[?:?]
   at org.elasticsearch.common.ssl.SslConfiguration.createSslContext(SslConfiguration.java:135) ~[?:?]
   at org.elasticsearch.index.reindex.ReindexSslConfig.reload(ReindexSslConfig.java:145) ~[?:?]
   at org.elasticsearch.index.reindex.ReindexSslConfig.<init>(ReindexSslConfig.java:115) ~[?:?]
   at org.elasticsearch.index.reindex.ReindexPlugin.createComponents(ReindexPlugin.java:88) ~[?:?]
   at org.elasticsearch.node.Node.lambda$new$9(Node.java:457) ~[elasticsearch-7.3.1.jar:7.3.1]
   at java.util.stream.ReferencePipeline$7$1.accept(ReferencePipeline.java:271) ~[?:?]
   at java.util.ArrayList$ArrayListSpliterator.forEachRemaining(ArrayList.java:1654) ~[?:?]
   at java.util.stream.AbstractPipeline.copyInto(AbstractPipeline.java:484) ~[?:?]
   at java.util.stream.AbstractPipeline.wrapAndCopyInto(AbstractPipeline.java:474) ~[?:?]
   at java.util.stream.ReduceOps$ReduceOp.evaluateSequential(ReduceOps.java:913) ~[?:?]
   at java.util.stream.AbstractPipeline.evaluate(AbstractPipeline.java:234) ~[?:?]
   at java.util.stream.ReferencePipeline.collect(ReferencePipeline.java:578) ~[?:?]
   at org.elasticsearch.node.Node.<init>(Node.java:460) ~[elasticsearch-7.3.1.jar:7.3.1]
   at org.elasticsearch.node.Node.<init>(Node.java:258) ~[elasticsearch-7.3.1.jar:7.3.1]
   at org.elasticsearch.bootstrap.Bootstrap$5.<init>(Bootstrap.java:221) ~[elasticsearch-7.3.1.jar:7.3.1]
   at org.elasticsearch.bootstrap.Bootstrap.setup(Bootstrap.java:221) ~[elasticsearch-7.3.1.jar:7.3.1]
   at org.elasticsearch.bootstrap.Bootstrap.init(Bootstrap.java:349) ~[elasticsearch-7.3.1.jar:7.3.1]
   at org.elasticsearch.bootstrap.Elasticsearch.init(Elasticsearch.java:159) ~[elasticsearch-7.3.1.jar:7.3.1]
   ... 6 more