Rundeck SSL连接异常：远程连接中断本地返回二进制输出

问题现象 #

• 已配置SSL证书，但远程连接Rundeck时出现Connection Aborted错误
• 本地执行curl请求：

  curl localhost:4443 -k --output /tmp/curl
  

  返回7字节二进制内容：^U^C^C^@^B^BP
• 排查过TLS/密码套件兼容性，确认本地可使用目标系统支持的TLS1.2及对应套件建立连接
• 手动设置RUNDECK_WITH_SSL环境变量（RHEL环境官方文档说明无需配置该变量）后，能建立初始连接，但无法正常显示欢迎页面

远程调试关键日志片段 #

rundeck.log:[2022-10-31T11:23:39,714] DEBUG ssl.SslConnection [qtp1674423837-59] - fill starting handshake SslConnection@2ced3116::SocketChannelEndPoint@36b01040{l=/10.18.64.7:4443,r=/10.18.155.9:26413,ISHUT,fill=-,flush=-,to=8/30000}{io=0/0,kio=0,kro=1}->SslConnection@2ced3116{NOT_HANDSHAKING,eio=0/-1,di=-1,fill=IDLE,flush=IDLE}~>DecryptedEndPoint@1367423a{l=/10.18.64.7:4443,r=/10.18.155.9:26413,OPEN,fill=-,flush=-,to=10/30000}=>HttpConnection@18d4ac9[p=HttpParser{s=START,0 of -1},g=HttpGenerator@700897b5{s=START}]=>HttpChannelOverHttp@465a8526{s=HttpChannelState@d305c1{s=IDLE rs=BLOCKING os=OPEN is=IDLE awp=false se=false i=true al=0},r=0,c=false/false,a=IDLE,uri=null,age=0}

rundeck.log:[2022-10-31T11:23:39,714] DEBUG ssl.SslConnection [qtp1674423837-32] - fill starting handshake SslConnection@4ed75ddd::SocketChannelEndPoint@6affba44{l=/10.18.64.7:4443,r=/10.18.155.9:26407,ISHUT,fill=-,flush=-,to=8/30000}{io=0/0,kio=0,kro=1}->SslConnection@4ed75ddd{NOT_HANDSHAKING,eio=0/-1,di=-1,fill=IDLE,flush=IDLE}~>DecryptedEndPoint@2706acc1{l=/10.18.64.7:4443,r=/10.18.155.9:26407,OPEN,fill=-,flush=-,to=10/30000}=>HttpConnection@57a0965f[p=HttpParser{s=START,0 of -1},g=HttpGenerator@319bf204{s=START}]=>HttpChannelOverHttp@2bbe12ed{s=HttpChannelState@434babd1{s=IDLE rs=BLOCKING os=OPEN is=IDLE awp=false se=false i=true al=0},r=0,c=false/false,a=IDLE,uri=null,age=0}

rundeck.log:[2022-10-31T11:23:39,716] DEBUG ssl.SslConnection [qtp1674423837-32] - <fill f=-1 uf=false SslConnection@4ed75ddd::SocketChannelEndPoint@6affba44{l=/10.18.64.7:4443,r=/10.18.155.9:26407,ISHUT,fill=-,flush=-,to=10/30000}{io=0/0,kio=0,kro=1}->SslConnection@4ed75ddd{NOT_HANDSHAKING,eio=-1/-1,di=-1,fill=IDLE,flush=IDLE}~>DecryptedEndPoint@2706acc1{l=/10.18.64.7:4443,r=/10.18.155.9:26407,OPEN,fill=-,flush=-,to=12/30000}=>HttpConnection@57a0965f[p=HttpParser{s=START,0 of -1},g=HttpGenerator@319bf204{s=START}]=>HttpChannelOverHttp@2bbe12ed{s=HttpChannelState@434babd1{s=IDLE rs=BLOCKING os=OPEN is=IDLE awp=false se=false i=true al=0},r=0,c=false/false,a=IDLE,uri=null,age=0}

rundeck.log:[2022-10-31T11:23:39,716] DEBUG ssl.SslConnection [qtp1674423837-59] - <fill f=-1 uf=false SslConnection@2ced3116::SocketChannelEndPoint@36b01040{l=/10.18.64.7:4443,r=/10.18.155.9:26413,ISHUT,fill=-,flush=-,to=10/30000}{io=0/0,kio=0,kro=1}->SslConnection@2ced3116{NOT_HANDSHAKING,eio=-1/-1,di=-1,fill=IDLE,flush=IDLE}~>DecryptedEndPoint@1367423a{l=/10.18.64.7:4443,r=/10.18.155.9:26413,OPEN,fill=-,flush=-,to=12/30000}=>HttpConnection@18d4ac9[p=HttpParser{s=START,0 of -1},g=HttpGenerator@700897b5{s=START}]=>HttpChannelOverHttp@465a8526{s=HttpChannelState@d305c1{s=IDLE rs=BLOCKING os=OPEN is=IDLE awp=false se=false i=true al=0},r=0,c=false/false,a=IDLE,uri=null,age=0}

rundeck.log:[2022-10-31T11:23:39,716] DEBUG server.HttpConnection [qtp1674423837-32] - HttpConnection@57a0965f::DecryptedEndPoint@2706acc1{l=/10.18.64.7:4443,r=/10.18.155.9:26407,OPEN,fill=-,flush=-,to=12/30000} filled -1 HeapByteBuffer@380084ed[p=0,l=0,c=17408,r=0]={<<<<>>>>\x00\x00\x00\x00\x00\x00\x00\x00\x00...\x00\x00\x00\x00\x00\x00\x00}
rundeck.log:[2022-10-31T11:23:39,716] DEBUG server.HttpConnection [qtp1674423837-59] - HttpConnection@18d4ac9::DecryptedEndPoint@1367423a{l=/10.18.64.7:4443,r=/10.18.155.9:26413,OPEN,fill=-,flush=-,to=12/30000} filled -1 HeapByteBuffer@21d7ee02[p=0,l=0,c=17408,r=0]={<<<<>>>>\x00\x00\x00\x00\x00\x00\x00\x00\x00...\x00\x00\x00\x00\x00\x00\x00}
rundeck.log:[2022-10-31T11:23:39,716] DEBUG server.HttpConnection [qtp1674423837-32] - HttpConnection@57a0965f::DecryptedEndPoint@2706acc1{l=/10.18.64.7:4443,r=/10.18.155.9:26407,OPEN,fill=-,flush=-,to=12/30000} parse HeapByteBuffer@380084ed[p=0,l=0,c=17408,r=0]={<<<<>>>>\x00\x00\x00\x00\x00\x00\x00\x00\x00...\x00\x00\x00\x00\x00\x00\x00} {}
rundeck.log:[2022-10-31T11:23:39,716] DEBUG server.HttpConnection [qtp1674423837-59] - HttpConnection@18d4ac9::DecryptedEndPoint@1367423a{l=/10.18.64.7:4443,r=/10.18.155.9:26413,OPEN,fill=-,flush=-,to=12/30000} parse HeapByteBuffer@21d7ee02[p=0,l=0,c=17408,r=0]={<<<<>>>>\x00\x00\x00\x00\x00\x00\x00\x00\x00...\x00\x00\x00\x00\x00\x00\x00} {}
rundeck.log:[2022-10-31T11:23:39,718] DEBUG io.AbstractEndPoint [qtp1674423837-32] - close DecryptedEndPoint@2706acc1{l=/10.18.64.7:4443,r=/10.18.155.9:26407,OPEN,fill=-,flush=-,to=15/30000}
rundeck.log:[2022-10-31T11:23:39,718] DEBUG io.AbstractEndPoint [qtp1674423837-59] - close DecryptedEndPoint@1367423a{l=/10.18.64.7:4443,r=/10.18.155.9:26413,OPEN,fill=-,flush=-,to=15/30000}
rundeck.log:[2022-10-31T11:23:39,718] DEBUG io.AbstractEndPoint [qtp1674423837-32] - close(null) DecryptedEndPoint@2706acc1{l=/10.18.64.7:4443,r=/10.18.155.9:26407,OPEN,fill=-,flush=-,to=15/30000}
rundeck.log:[2022-10-31T11:23:39,718] DEBUG io.AbstractEndPoint [qtp1674423837-59] - close(null) DecryptedEndPoint@1367423a{l=/10.18.64.7:4443,r=/10.18.155.9:26413,OPEN,fill=-,flush=-,to=15/30000}

rundeck.log:[2022-10-31T11:23:39,718] DEBUG ssl.SslConnection [qtp1674423837-32] - shutdownOutput: SslConnection@4ed75ddd::SocketChannelEndPoint@6affba44{l=/10.18.64.7:4443,r=/10.18.155.9:26407,ISHUT,fill=-,flush=-,to=13/30000}{io=0/0,kio=0,kro=1}->SslConnection@4ed75ddd{NOT_HANDSHAKING,eio=-1/-1,di=-1,fill=IDLE,flush=IDLE}~>DecryptedEndPoint@2706acc1{l=/10.18.64.7:4443,r=/10.18.155.9:26407,CLOSED,fill=-,flush=-,to=15/30000}=>HttpConnection@57a0965f[p=HttpParser{s=CLOSED,0 of -1},g=HttpGenerator@319bf204{s=START}]=>HttpChannelOverHttp@2bbe12ed{s=HttpChannelState@434babd1{s=IDLE rs=BLOCKING os=OPEN is=IDLE awp=false se=false i=true al=0},r=0,c=false/false,a=IDLE,uri=null,age=0} oshut=false, ishut=true

rundeck.log:[2022-10-31T11:23:39,718] DEBUG ssl.SslConnection [qtp1674423837-59] - shutdownOutput: SslConnection@2ced3116::SocketChannelEndPoint@36b01040{l=/10.18.64.7:4443,r=/10.18.155.9:26413,ISHUT,fill=-,flush=-,to=13/30000}{io=0/0,kio=0,kro=1}->SslConnection@2ced3116{NOT_HANDSHAKING,eio=-1/-1,di=-1,fill=IDLE,flush=IDLE}~>DecryptedEndPoint@1367423a{l=/10.18.64.7:4443,r=/10.18.155.9:26413,CLOSED,fill=-,flush=-,to=15/30000}=>HttpConnection@18d4ac9[p=HttpParser{s=CLOSED,0 of -1},g=HttpGenerator@700897b5{s=START}]=>HttpChannelOverHttp@465a8526{s=HttpChannelState@d305c1{s=IDLE rs=BLOCKING os=OPEN is=IDLE awp=false se=false i=true al=0},r=0,c=false/false,a=IDLE,uri=null,age=0} oshut=false, ishut=true

内容的提问来源于stack exchange，提问作者MattF