java - 尝试连接到Web套接字服务器时，不断出现“没有X509TrustManager实现可用”错误

我有以下代码，用于使用安全的websockets连接到我的java应用程序中的Web套接字服务器。

private boolean openConnection(boolean tried) {
    String sslFile =
        ConfigMgr.getValue(Constants.SSL_CFG_NAME, "sslfile");
    String sslPassword =
        ConfigMgr.getValue(Constants.SSL_CFG_NAME, "sslpassword");
    try {
        System.setProperty("javax.net.ssl.trustStore",
                //sslFile);
        System.setProperty("javax.net.ssl.trustStorePassword", sslPassword);
        System.out.println(System.getProperty("javax.net.ssl.trustStore"));
        System.out.println(System.getProperty("javax.net.ssl.trustStorePassword"));
    } catch (Exception e) {
        if (!tried) {
            logger.error("unable to get certificates", e);
        }
        return false;
    }
    try {
        WebSocketContainer container = ContainerProvider
                .getWebSocketContainer();
        container.connectToServer(this, new URI(websocketServer));
    } catch (Exception e) {
        // only log error trying to connection to web application first
        // time
        if (!tried) {
            logger.error("error while trying to connect daemon to websocket"
                    + " server", e);
        }
        return false;
    }
    return true;
}

我可以从打印报表中看到

 System.setProperty("javax.net.ssl.trustStorePassword", sslPassword);

和

System.out.println(System.getProperty("javax.net.ssl.trustStore"));

带有正确内容的密码和证书(在这种情况下为.cer)

设置正确。

但是，当我运行我的代码时，运行container.connectToServer(this, new URI(websocketServer));时会打印以下错误

    javax.websocket.DeploymentException: The HTTP request to initiate the WebSocket connection failed
        at org.apache.tomcat.websocket.WsWebSocketContainer.connectToServer(WsWebSocketContainer.java:434) ~[tomcat7-websocket.jar:7.0.68]
        at org.apache.tomcat.websocket.WsWebSocketContainer.connectToServer(WsWebSocketContainer.java:184) ~[tomcat7-websocket.jar:7.0.68]
        at
cored.web.CoreWebSocket.openConnection(CoreWebSocket.java:278) [cored.jar:3.0.10.160712122615]
        at cored.web.CoreWebSocket.establishConnection(CoreWebSocket.java:1150) [cored.jar:3.0.10.160712122615]
        at
cored.web.CoreWebSocket.access$100(CoreWebSocket.java:85) [cored.jar:3.0.10.160712122615]
        at
cored.web.CoreWebSocket$2.execute(CoreWebSocket.java:138) [cored.jar:3.0.10.160712122615]
        at utils.AThread.run(AThread.java:51)
[utils.jar:3.0.10.160712122615]
    Caused by: java.util.concurrent.ExecutionException: javax.net.ssl.SSLHandshakeException: General SSLEngine problem
        at org.apache.tomcat.websocket.AsyncChannelWrapperSecure$WrapperFuture.get(AsyncChannelWrapperSecure.java:511) ~[tomcat7-websocket.jar:7.0.68]
        at org.apache.tomcat.websocket.WsWebSocketContainer.connectToServer(WsWebSocketContainer.java:379) ~[tomcat7-websocket.jar:7.0.68]
        ... 6 more
    Caused by: javax.net.ssl.SSLHandshakeException: General SSLEngine problem
        at sun.security.ssl.Handshaker.checkThrown(Unknown Source) ~[?:1.8.0_92]
        at sun.security.ssl.SSLEngineImpl.checkTaskThrown(Unknown Source) ~[?:1.8.0_92]
        at sun.security.ssl.SSLEngineImpl.writeAppRecord(Unknown Source) ~[?:1.8.0_92]
        at sun.security.ssl.SSLEngineImpl.wrap(Unknown Source) ~[?:1.8.0_92]
        at javax.net.ssl.SSLEngine.wrap(Unknown Source) ~[?:1.8.0_92]
        at org.apache.tomcat.websocket.AsyncChannelWrapperSecure$WebSocketSslHandshakeThread.run(AsyncChannelWrapperSecure.java:371) ~[tomcat7-websocket.jar:7.0.68]
    Caused by: javax.net.ssl.SSLHandshakeException: General SSLEngine problem
        at sun.security.ssl.Alerts.getSSLException(Unknown Source) ~[?:1.8.0_92]
        at sun.security.ssl.SSLEngineImpl.fatal(Unknown Source) ~[?:1.8.0_92]
        at sun.security.ssl.Handshaker.fatalSE(Unknown Source) ~[?:1.8.0_92]
        at sun.security.ssl.Handshaker.fatalSE(Unknown Source) ~[?:1.8.0_92]
        at sun.security.ssl.ClientHandshaker.serverCertificate(Unknown Source) ~[?:1.8.0_92]
        at sun.security.ssl.ClientHandshaker.processMessage(Unknown Source) ~[?:1.8.0_92]
        at sun.security.ssl.Handshaker.processLoop(Unknown Source) ~[?:1.8.0_92]
        at sun.security.ssl.Handshaker$1.run(Unknown Source) ~[?:1.8.0_92]
        at sun.security.ssl.Handshaker$1.run(Unknown Source) ~[?:1.8.0_92]
        at java.security.AccessController.doPrivileged(Native Method) ~[?:1.8.0_92]
        at sun.security.ssl.Handshaker$DelegatedTask.run(Unknown Source) ~[?:1.8.0_92]
        at org.apache.tomcat.websocket.AsyncChannelWrapperSecure$WebSocketSslHandshakeThread.run(AsyncChannelWrapperSecure.java:397) ~[tomcat7-websocket.jar:7.0.68]
    Caused by: java.security.cert.CertificateException: No X509TrustManager implementation available
        at sun.security.ssl.DummyX509TrustManager.checkServerTrusted(Unknown Source) ~[?:1.8.0_92]
        at sun.security.ssl.ClientHandshaker.serverCertificate(Unknown Source) ~[?:1.8.0_92]
        at sun.security.ssl.ClientHandshaker.processMessage(Unknown Source) ~[?:1.8.0_92]
        at sun.security.ssl.Handshaker.processLoop(Unknown Source) ~[?:1.8.0_92]
        at sun.security.ssl.Handshaker$1.run(Unknown Source) ~[?:1.8.0_92]
        at sun.security.ssl.Handshaker$1.run(Unknown Source) ~[?:1.8.0_92]
        at java.security.AccessController.doPrivileged(Native Method) ~[?:1.8.0_92]
        at sun.security.ssl.Handshaker$DelegatedTask.run(Unknown Source) ~[?:1.8.0_92]
        at org.apache.tomcat.websocket.AsyncChannelWrapperSecure$WebSocketSslHandshakeThread.run(AsyncChannelWrapperSecure.java:397) ~[tomcat7-websocket.jar:7.0.68]

我知道我正在使用的.cer文件没有损坏，因为它也在Tomcat Web服务器上使用并且没有问题。

是什么导致此No X509TrustManager implementation available错误？

最佳答案

.cer文件不是您的信任库的有效类型。您可以使用系统变量javax.net.ssl.trustStoreType设置类型。默认情况下设置为JKS，例如，您也可以使用PKCS12。

您必须创建一个JKS文件并包含.cer文件。还配置信任 key 的密码

System.setProperty("javax.net.ssl.trustStore", "path/to/truststore");
System.setProperty("javax.net.ssl.trustStorePassword", truststorepassword);

要将.cer文件导入到JKS中，请使用

keytool -importcert -file certificate.cer -keystore keystore.jks -alias "Alias"

关于java - 尝试连接到Web套接字服务器时，不断出现“没有X509TrustManager实现可用”错误，我们在Stack Overflow上找到一个类似的问题：https://stackoverflow.com/questions/38353944/