Warning: file_get_contents(/data/phpspider/zhask/data//catemap/9/java/324.json): failed to open stream: No such file or directory in /data/phpspider/zhask/libs/function.php on line 167

Warning: Invalid argument supplied for foreach() in /data/phpspider/zhask/libs/tag.function.php on line 1116

Notice: Undefined index: in /data/phpspider/zhask/libs/function.php on line 180

Warning: array_chunk() expects parameter 1 to be array, null given in /data/phpspider/zhask/libs/function.php on line 181
Java服务器未发送ssl客户端证书_Java_Ssl_Glassfish_Jersey 2.0_Jersey Client - Fatal编程技术网

Java服务器未发送ssl客户端证书

Java服务器未发送ssl客户端证书,java,ssl,glassfish,jersey-2.0,jersey-client,Java,Ssl,Glassfish,Jersey 2.0,Jersey Client,我有一个Jersey应用程序,它使用Jersey客户端请求服务器。服务器使用客户端证书和基本身份验证进行通信。我已使用glassfish中的证书正确设置了truststore和keystore 服务器证书链: 服务器证书->CA内部->CA 客户端证书链: 客户证书->CA内部->CA CA是自行创建/签署的证书,而不是来自供应商 信任库: 1) CA 2) 国米 密钥库: 1) 具有完整链的客户端证书 代码:(存储在环境中设置) 所有证书和链均已正确加载 然而,当我提出请求时,我得到了 Inf

我有一个Jersey应用程序,它使用Jersey客户端请求服务器。服务器使用客户端证书和基本身份验证进行通信。我已使用glassfish中的证书正确设置了truststore和keystore

服务器证书链: 服务器证书->CA内部->CA

客户端证书链: 客户证书->CA内部->CA

CA是自行创建/签署的证书,而不是来自供应商

信任库:

1) CA

2) 国米

密钥库:

1) 具有完整链的客户端证书

代码:(存储在环境中设置)

所有证书和链均已正确加载

然而,当我提出请求时,我得到了

Info:   Warning: no suitable certificate found - continuing without client authentication
然后我得到了握手失败的错误

我得到了这些其他的错误

Info:   http-listener-1(3), setSoTimeout(0) called
Info:   Ignoring unsupported cipher suite: TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384 for TLSv1
Info:   Ignoring unsupported cipher suite: TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 for TLSv1
Info:   Ignoring unsupported cipher suite: TLS_RSA_WITH_AES_256_CBC_SHA256 for TLSv1
Info:   Ignoring unsupported cipher suite: TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384 for TLSv1
Info:   Ignoring unsupported cipher suite: TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384 for TLSv1
Info:   Ignoring unsupported cipher suite: TLS_DHE_RSA_WITH_AES_256_CBC_SHA256 for TLSv1
Info:   Ignoring unsupported cipher suite: TLS_DHE_DSS_WITH_AES_256_CBC_SHA256 for TLSv1
Info:   Ignoring unsupported cipher suite: TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384 for TLSv1.1
Info:   Ignoring unsupported cipher suite: TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 for TLSv1.1
Info:   Ignoring unsupported cipher suite: TLS_RSA_WITH_AES_256_CBC_SHA256 for TLSv1.1
Info:   Ignoring unsupported cipher suite: TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384 for TLSv1.1
Info:   Ignoring unsupported cipher suite: TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384 for TLSv1.1
Info:   Ignoring unsupported cipher suite: TLS_DHE_RSA_WITH_AES_256_CBC_SHA256 for TLSv1.1
Info:   Ignoring unsupported cipher suite: TLS_DHE_DSS_WITH_AES_256_CBC_SHA256 for TLSv1.1
我已经安装了无限芯片扩展,并检查其工作。还在买这些

我还检查了浏览器上的证书,我能够通过浏览器连接到服务器,并使用相同的证书获取数据


如何让双向ssl工作?

客户端和服务器都需要各自信任库中的CA证书。我想说服务器没有


当服务器请求客户端证书时,它会发送其受信任CA列表,如果客户端找不到其中一个签名的证书,它不会发送证书,

客户端和服务器都需要在各自的信任库中使用CA证书。我想说服务器没有


当服务器请求客户端证书时,它会发送其受信任CA列表,如果客户端找不到其中一个签名的证书,它不会发送证书,

我有两个keystore cacerts.jks和keystore.jks,那么客户端的信任库是什么?我在服务器和客户端链中都有CA和CA inter,它们是匹配的。我在apache服务器中设置了ca-certs.pem作为证书链。包含CA证书的。我已经验证了服务器证书请求类型与客户端中存在的类型匹配。我有两个keystore cacerts.jks和keystore.jks,客户端的信任库是什么?我在服务器和客户端链中都有CA和CA inter,它们是匹配的。我在apache服务器中设置了ca-certs.pem作为证书链。包含CA证书的。我已验证服务器证书请求类型与客户端中存在的类型匹配
Info:   http-listener-1(3), setSoTimeout(0) called
Info:   Ignoring unsupported cipher suite: TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384 for TLSv1
Info:   Ignoring unsupported cipher suite: TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 for TLSv1
Info:   Ignoring unsupported cipher suite: TLS_RSA_WITH_AES_256_CBC_SHA256 for TLSv1
Info:   Ignoring unsupported cipher suite: TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384 for TLSv1
Info:   Ignoring unsupported cipher suite: TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384 for TLSv1
Info:   Ignoring unsupported cipher suite: TLS_DHE_RSA_WITH_AES_256_CBC_SHA256 for TLSv1
Info:   Ignoring unsupported cipher suite: TLS_DHE_DSS_WITH_AES_256_CBC_SHA256 for TLSv1
Info:   Ignoring unsupported cipher suite: TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384 for TLSv1.1
Info:   Ignoring unsupported cipher suite: TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 for TLSv1.1
Info:   Ignoring unsupported cipher suite: TLS_RSA_WITH_AES_256_CBC_SHA256 for TLSv1.1
Info:   Ignoring unsupported cipher suite: TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384 for TLSv1.1
Info:   Ignoring unsupported cipher suite: TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384 for TLSv1.1
Info:   Ignoring unsupported cipher suite: TLS_DHE_RSA_WITH_AES_256_CBC_SHA256 for TLSv1.1
Info:   Ignoring unsupported cipher suite: TLS_DHE_DSS_WITH_AES_256_CBC_SHA256 for TLSv1.1