以前工作正常的连接现在在初始握手时会导致握手失败。即SSL日志显示ClientHello,然后
致命(HANDSHAKE_FAILURE):收到致命警报:握手失败
在获得ServerHello之前。我已经用https://www.ssllabs.com/ssltest/analyze.html?d=snl.no检查过了,密码套件或TLS版本应该没有问题。
SSL日志的相关(?)部分:
javax.net.ssl|FINE|16 61|New I/O worker #36|2023-09-11 14:54:50.305 CEST|SSLEngineOutputRecord.java:505|WRITE: TLS13 handshake, length = 377
javax.net.ssl|FINE|16 61|New I/O worker #36|2023-09-11 14:54:50.306 CEST|SSLEngineOutputRecord.java:523|Raw write (
0000: 16 03 03 01 79 01 00 01 75 03 03 0E 38 E9 53 F4 ....y...u...8.S.
0010: 6F CA B9 08 6E B6 FD C2 56 8F C3 90 7C 39 B3 62 o...n...V....9.b
0020: 49 97 06 6D 6C 0B 7A AD 87 63 95 20 0F 60 8F 82 I..ml.z..c. .`..
0030: E3 4A F3 25 B9 B1 DD A0 27 E6 94 6F 70 3F 41 39 .J.%....'..op?A9
0040: FA 10 E5 45 F0 15 98 6D 05 2C 79 8B 00 5A 13 02 ...E...m.,y..Z..
0050: 13 01 C0 2C C0 2B C0 30 C0 2F 00 9F 00 A3 00 9E ...,.+.0./......
0060: 00 A2 C0 24 C0 28 C0 23 C0 27 00 6B 00 6A 00 67 ...$.(.#.'.k.j.g
0070: 00 40 C0 2E C0 32 C0 2D C0 31 C0 26 C0 2A C0 25 [email protected].&.*.%
0080: C0 29 C0 0A C0 14 C0 09 C0 13 00 39 00 38 00 33 .).........9.8.3
0090: 00 32 C0 05 C0 0F C0 04 C0 0E 00 9D 00 9C 00 3D .2.............=
00A0: 00 3C 00 35 00 2F 00 FF 01 00 00 D2 00 0A 00 12 .<.5./..........
00B0: 00 10 00 17 00 18 00 19 01 00 01 01 01 02 01 03 ................
00C0: 01 04 00 0B 00 02 01 00 00 0D 00 28 00 26 04 03 ...........(.&..
00D0: 05 03 06 03 08 04 08 05 08 06 08 09 08 0A 08 0B ................
00E0: 04 01 05 01 06 01 04 02 03 03 03 01 03 02 02 03 ................
00F0: 02 01 02 02 00 32 00 28 00 26 04 03 05 03 06 03 .....2.(.&......
0100: 08 04 08 05 08 06 08 09 08 0A 08 0B 04 01 05 01 ................
0110: 06 01 04 02 03 03 03 01 03 02 02 03 02 01 02 02 ................
0120: 00 17 00 00 00 2B 00 05 04 03 04 03 03 00 2D 00 .....+........-.
0130: 02 01 01 00 33 00 47 00 45 00 17 00 41 04 F7 1B ....3.G.E...A...
0140: 8D 37 18 D5 E9 DD 4F 85 85 BD FF DF ED 3B 94 87 .7....O......;..
0150: BF 4B 79 D3 49 8A B3 11 BC 98 B9 53 1E 1B B6 28 .Ky.I......S...(
0160: EF 7E 16 0D 73 CA E9 A4 51 95 CE C7 D0 80 18 8C ....s...Q.......
0170: 7B C7 13 74 F1 29 D7 93 E6 1E BE 39 10 6C ...t.).....9.l
)
javax.net.ssl|FINE|16 61|New I/O worker #36|2023-09-11 14:54:50.333 CEST|SSLEngineInputRecord.java:177|Raw read (
0000: 15 03 01 00 02 02 28 ......(
)
javax.net.ssl|FINE|16 61|New I/O worker #36|2023-09-11 14:54:50.334 CEST|SSLEngineInputRecord.java:214|READ: TLSv1 alert, length = 2
javax.net.ssl|FINE|16 61|New I/O worker #36|2023-09-11 14:54:50.334 CEST|Alert.java:238|Received alert message (
"Alert": {
"level" : "fatal",
"description": "handshake_failure"
}
)
有什么想法是错的吗?是否有变通办法?
1条答案
按热度按时间guz6ccqo1#
最后,切换到另一个HTTP客户端实现(Apache HTTP)工作。