问题

GCP秘密管理器服务存储的秘密可用google-cloud-secret-manager客户库

代码失效SSLHandshakeException数据错误消息运行时间9.1LTS

样本代码 :

import com.google.cloud.secretmanager.v1.AccessSecretVersionResponse!import com.google.cloud.secretmanager.v1.ProjectName!import com.google.cloud.secretmanager.v1.Replication!import com.google.cloud.secretmanager.v1.Secret!import com.google.cloud.secretmanager.v1.SecretManagerServiceClient!import com.google.cloud.secretmanager.v1.SecretPayload!import com.google.cloud.secretmanager.v1.SecretVersion!import com.google.protobuf.ByteString!import com.google.cloud.secretmanager.v1.SecretName!import com.google.cloud.secretmanager.v1.SecretManagerServiceSettings  import com.google.api.gax.core.FixedCredentialsProvider!com.google.auth.Creticials def存取_secret_version客户端=秘密管理者.secret管理ServiceClient ()#构建秘密版本资源名f项目/{PROJECT_ID}/secrets/{secret_id}/versions/{sversion_id}#存取秘密版本响应=客户端.access_secret_version(name=name)#返回解码有效载荷ecode导入 hashlib def secret_hash #

错误消息 :

UnavailableException: io.grpc.StatusRuntimeException: UNAVAILABLE: io exception
Channel Pipeline: [SslHandler#0, ProtocolNegotiators$ClientTlsHandler#0, WriteBufferingAndExceptionHandler#0, DefaultChannelPipeline$TailContext#0]  Caused by: StatusRuntimeException: UNAVAILABLE: io exception  Channel Pipeline: [SslHandler#0, ProtocolNegotiators$ClientTlsHandler#0, WriteBufferingAndExceptionHandler#0, DefaultChannelPipeline$TailContext#0]  Caused by: SSLHandshakeException: No appropriate protocol (protocol is disabled or cipher suites are inappropriate)    Caused by: io.grpc.StatusRuntimeException: UNAVAILABLE: io exception  Channel Pipeline: [SslHandler#0, ProtocolNegotiators$ClientTlsHandler#0, WriteBufferingAndExceptionHandler#0, DefaultChannelPipeline$TailContext#0]    Caused by: javax.net.ssl.SSLHandshakeException: No appropriate protocol (protocol is disabled or cipher suites are inappropriate)  at sun.security.ssl.HandshakeContext.
          
           (HandshakeContext.java:171)
          

因果

GM(Galois/Counter模式)密码套件默认无法启动

没有GCM密码套件,没有协议可建立预期SSL连接GCP秘密管理器

可使用新图工具验证外部服务器需要哪些密码套房

sl-enum密码-p 443密探.googleapis.com

求解

GM密码套件连接GCP秘密管理服务

databricks运行时间10.4LTS和以上,GCM密码套件默认启动

stay onDatabricks运行911LTS启动GCM密码套房知识基础文章安装GCM密码套件

启动GCM密码套件后,可连接GCP秘密管理服务