WebService系列之SSL异常handshake failure处理方法

布满荆棘的人生 2021-09-03 07:15 1137阅读 0赞

最近在使用axis调用一个https的接口，调用时候一直报异常：

> javax.net.ssl.SSLHandshakeException: Received fatal alert: handshake\_failure

网上说法有设置TLS：

System.setProperty("https.protocols", "TLSv1.2,TLSv1.1,TLSv1.0,SSLv3");

不过抛出异常，需要注意，如果是jdk8就不需要设置TLSv1.0，jdk6有些版本不能设置TLSv1.1

不同版本jdk对TLS验证是有差别的：oracle官网博客[Diagnosing TLS, SSL, and HTTPS][Diagnosing TLS_ SSL_ and HTTPS]列出了差别  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3UwMTQ0MjczOTE_size_16_color_FFFFFF_t_70]  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3UwMTQ0MjczOTE_size_16_color_FFFFFF_t_70 1]  
然而这种设置TLS协议方法并不能处理问题，然后在https://stackoverflow.com/，找到方法：  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3UwMTQ0MjczOTE_size_16_color_FFFFFF_t_70 2]  
意思是需要下载oracle官网的jar：

*  jdk6：下载bcprov-ext-jdk15on-154.jar、bcprov-jdk15on-154.jar这两个jar  
    下载链接：[bcprov-ext-jdk15on-154.jar][]、[bcprov-jdk15on-154.jar][]

下载之后，将两个jar放在`$JAVA_HOME/jre/lib/ext`，找到找到security.provider.9，然后在这句话下面加上：

security.provider.10=org.bouncycastle.jce.provider.BouncyCastleProvider

*  jdk7：下载javase-jce7.jar  
    下载链接：[http://www.oracle.com/technetwork/java/javase/downloads/jce-7-download-432124.html][http_www.oracle.com_technetwork_java_javase_downloads_jce-7-download-432124.html]  
    下载之后将jar丢在`{JAVA_HOME}/jre/lib/security`
 *  jdk8：下载javase-jce8.jar  
    [https://www.oracle.com/java/technologies/javase-jce8-downloads.html][https_www.oracle.com_java_technologies_javase-jce8-downloads.html]  
    ![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3UwMTQ0MjczOTE_size_16_color_FFFFFF_t_70 3]  
    下载之后将jar丢在`{JAVA_HOME}/jre/lib/security`

参考资料：  
解决 JAVAX.NET.SSL.SSLEXCEPTION: JAVA.LANG.RUNTIMEEXCEPTION: COULD NOT GENERATE DH KEYPAIR  
[https://www.cnblogs.com/yinliang/p/9929595.html][https_www.cnblogs.com_yinliang_p_9929595.html]

[Diagnosing TLS_ SSL_ and HTTPS]: https://blogs.oracle.com/java-platform-group/diagnosing-tls,-ssl,-and-https
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3UwMTQ0MjczOTE_size_16_color_FFFFFF_t_70]: /images/20210813/22977b8a30b44604b7776e4840101923.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3UwMTQ0MjczOTE_size_16_color_FFFFFF_t_70 1]: /images/20210813/ce16e152a20d40f4898cb42ffa034231.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3UwMTQ0MjczOTE_size_16_color_FFFFFF_t_70 2]: /images/20210813/ccdfec167f554154a1d7aa7d903b312a.png
[bcprov-ext-jdk15on-154.jar]: https://www.bouncycastle.org/download/bcprov-ext-jdk15on-154.jar
[bcprov-jdk15on-154.jar]: https://www.bouncycastle.org/download/bcprov-jdk15on-154.jar
[http_www.oracle.com_technetwork_java_javase_downloads_jce-7-download-432124.html]: http://www.oracle.com/technetwork/java/javase/downloads/jce-7-download-432124.html
[https_www.oracle.com_java_technologies_javase-jce8-downloads.html]: https://www.oracle.com/java/technologies/javase-jce8-downloads.html
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3UwMTQ0MjczOTE_size_16_color_FFFFFF_t_70 3]: /images/20210813/0e41a8e48d364e8aa1be4ed101b34fda.png
[https_www.cnblogs.com_yinliang_p_9929595.html]: https://www.cnblogs.com/yinliang/p/9929595.html