【发布时间】:2020-12-05 17:06:27
【问题描述】:
使用带有相互身份验证的spring resttemplate发出post请求时出现上述错误。
@Bean
public RestTemplate restTemplate() throws UnrecoverableKeyException,
NoSuchAlgorithmException, KeyStoreException, IOException, KeyManagementException, CertificateException {
KeyStore clientStore = KeyStore.getInstance("PKCS12");
clientStore.load(new FileInputStream(pfxFile), pfxPass.toCharArray());
SSLContextBuilder sslContextBuilder = new SSLContextBuilder();
sslContextBuilder.useProtocol("TLS");
sslContextBuilder.loadKeyMaterial(clientStore, pfxPass.toCharArray());
sslContextBuilder.loadTrustMaterial(new TrustSelfSignedStrategy());
SSLConnectionSocketFactory sslConnectionSocketFactory = new SSLConnectionSocketFactory(sslContextBuilder.build());
CloseableHttpClient httpClient = HttpClients.custom()
.setSSLSocketFactory(sslConnectionSocketFactory)
.build();
HttpComponentsClientHttpRequestFactory requestFactory = new HttpComponentsClientHttpRequestFactory(httpClient);
requestFactory.setConnectTimeout(Integer.parseInt(timeOut)); // 10 seconds
requestFactory.setReadTimeout(Integer.parseInt(timeOut)); // 10 seconds
RestTemplate restTemplate = new RestTemplate(requestFactory);
restTemplate.setInterceptors( Collections.singletonList(new RequestResponseLoggingInterceptor()));
return restTemplate;
}
使用resttemplate的代码如下
public ResponseEntity<OauthResponse> getOauthToken(String clientScope,
String BasicAuthUser,String BasicAuthPass){
String accessToken = Base64.getEncoder().encodeToString((BasicAuthUser+":"+BasicAuthPass).getBytes());
HttpHeaders headers = new HttpHeaders();
headers.set("Content-Type", MediaType.APPLICATION_FORM_URLENCODED_VALUE);
// headers.set("apikey", BasicAuthUser);
// headers.set("Authorization", "Basic "+accessToken);
HttpEntity<?> entity = new HttpEntity<>(headers);
UriComponentsBuilder builder = UriComponentsBuilder.fromHttpUrl(oauthUrl)
.queryParam("grant_type", "client_credentials")
.queryParam("scope", clientScope);
return restTemplate.exchange(
builder.toUriString(),
HttpMethod.POST,
entity,
OauthResponse.class);
}
org.springframework.web.client.ResourceAccessException:“https://example.com”的 POST 请求出现 I/O 错误:握手消息的大小 (47942) 超过了允许的最大大小 (32768);嵌套异常是 javax.net.ssl.SSLProtocolException: 握手消息的大小 (47942) 超过了允许的最大大小 (32768)
at org.springframework.web.client.RestTemplate.doExecute(RestTemplate.java:748)
at org.springframework.web.client.RestTemplate.execute(RestTemplate.java:674)
at org.springframework.web.client.RestTemplate.exchange(RestTemplate.java:583)
at in.co.confluent.gopayhrfc.restwrapper.hdfcapi.service.OauthService.getOauthToken(OauthService.java:38)
at in.co.confluent.gopayhrfc.restwrapper.hdfcapi.service.OauthServiceTest.checkOauthServiceResponse(OauthServiceTest.java:26)
我尝试过使用 oracle jdk 8 和 11 但同样的错误,有没有人遇到过类似的问题。
【问题讨论】:
-
是的,other people have encountered 一个相关且类似的问题。请参阅 oracle.com/java/technologies/javase/… 和 oracle.com/java/technologies/javase/… 。大多数服务器不应该需要发送过大的握手消息,但如果你的服务器确实根据发行说明使用 sysprop。
标签: java spring-boot ssl rest-client mutual-authentication