【发布时间】:2018-10-29 14:56:12
【问题描述】:
我有连接到服务器的客户端应用程序,并且身份验证是双向 ssl。 我正在尝试设置相互 ssl,但由于以下异常而失败。 我正在使用 resttemplate 进行休息呼叫。
*** CertificateVerify
Signature Algorithm SHA512withRSA
[write] MD5 and SHA1 hashes: len = 264
http-nio-8080-exec-3, WRITE: TLSv1.2 Handshake, length = 264
[Raw write]: length = 269
http-nio-8080-exec-3, WRITE: TLSv1.2 Change Cipher Spec, length = 1
http-nio-8080-exec-3, handling exception: java.net.SocketException: Broken pipe (Write failed)
%% Invalidated: [Session-1, TLS_RSA_WITH_AES_256_CBC_SHA256]
http-nio-8080-exec-3, SEND TLSv1.2 ALERT: fatal, description = unexpected_message
http-nio-8080-exec-3, WRITE: TLSv1.2 Alert, length = 2
http-nio-8080-exec-3, Exception sending alert: java.net.SocketException: Broken pipe (Write failed)
http-nio-8080-exec-3, called closeSocket()
相互 sll 客户端 hello 然后 serverhello 然后 certificateverify 的流程然后客户端证书在密钥交换成功后由服务器发送 CA,但最后一步证书验证失败。 我不确定这里出了什么问题,有人可以帮忙吗?
【问题讨论】:
-
这是客户端日志还是服务器日志?
-
是客户端日志
标签: java ssl https ssl-certificate mutual-authentication