Openssl JBOSS应用程序SSL错误:别名未标识密钥项

Openssl JBOSS应用程序SSL错误:别名未标识密钥项,openssl,ssl-certificate,jboss6.x,keytool,Openssl,Ssl Certificate,Jboss6.x,Keytool,我正在尝试使用SSL配置JBOSS应用程序6.0.1,并向我提供证书(委托) 我以.CER格式从委托处获得了三个证书(根证书、链证书和服务器证书) 接下来,我创建了一个密钥库: 1.keytool-import-alias-trustedl1c-keystore-trustedl1c.mykeystore-trustcacerts-file L1Cchain.cer 输入密钥库密码: 重新输入新密码: 证书已添加到密钥库 2.keytool-import-alias Root-keystore.

我正在尝试使用SSL配置JBOSS应用程序6.0.1,并向我提供证书(委托)

我以.CER格式从委托处获得了三个证书(根证书、链证书和服务器证书)

接下来,我创建了一个密钥库:

1.keytool-import-alias-trustedl1c-keystore-trustedl1c.mykeystore-trustcacerts-file L1Cchain.cer 输入密钥库密码: 重新输入新密码: 证书已添加到密钥库

2.keytool-import-alias Root-keystore.mykeystore-trustcacerts-file L1Croot.cer 输入密钥库密码:

3.#keytool-导入-别名myalias-密钥库委托1c.mykeystore-信任证书-文件委托证书.cert 输入密钥库密码: 证书已添加到密钥库

我在JBOSS的standalone.xml的两个SSL部分中配置了这一点:

在启动JBOSS应用程序时,我遇到了这个错误

13:08:23,311 ERROR [org.apache.coyote.http11.Http11Protocol] (MSC service thread 1-3) Error initializing endpoint: java.io.IOException: Alias name test does not 
identify a key entry
        at org.apache.tomcat.util.net.jsse.JSSESocketFactory.getKeyManagers(JSSESocketFactory.java:517) [jbossweb-7.0.17.Final-redhat-1.jar:]
        at org.apache.tomcat.util.net.jsse.JSSESocketFactory.init(JSSESocketFactory.java:452) [jbossweb-7.0.17.Final-redhat-1.jar:]
        at org.apache.tomcat.util.net.jsse.JSSESocketFactory.createSocket(JSSESocketFactory.java:168) [jbossweb-7.0.17.Final-redhat-1.jar:]
        at org.apache.tomcat.util.net.JIoEndpoint.init(JIoEndpoint.java:978) [jbossweb-7.0.17.Final-redhat-1.jar:]
        at org.apache.coyote.http11.Http11Protocol.init(Http11Protocol.java:190) [jbossweb-7.0.17.Final-redhat-1.jar:]
        at org.apache.catalina.connector.Connector.init(Connector.java:1001) [jbossweb-7.0.17.Final-redhat-1.jar:]
        at org.jboss.as.web.WebConnectorService.start(WebConnectorService.java:268) [jboss-as-web-7.1.3.Final-redhat-4.jar:7.1.3.Final-redhat-4]
        at org.jboss.msc.service.ServiceControllerImpl$StartTask.startService(ServiceControllerImpl.java:1811) [jboss-msc-1.0.2.GA-redhat-2.jar:1.0.2.GA-redhat-2]
        at org.jboss.msc.service.ServiceControllerImpl$StartTask.run(ServiceControllerImpl.java:1746) [jboss-msc-1.0.2.GA-redhat-2.jar:1.0.2.GA-redhat-2]
        at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1110) [rt.jar:1.6.0_22]
        at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:603) [rt.jar:1.6.0_22]
        at java.lang.Thread.run(Thread.java:679) [rt.jar:1.6.0_22]

13:08:23,320 ERROR [org.jboss.msc.service.fail] (MSC service thread 1-3) MSC000001: Failed to start service jboss.web.connector.https: 

org.jboss.msc.service.StartException in service jboss.web.connector.https: JBAS018007: Error starting web connector
        at org.jboss.as.web.WebConnectorService.start(WebConnectorService.java:272)
        at org.jboss.msc.service.ServiceControllerImpl$StartTask.startService(ServiceControllerImpl.java:1811) [jboss-msc-1.0.2.GA-redhat-2.jar:1.0.2.GA-redhat-2]
        at org.jboss.msc.service.ServiceControllerImpl$StartTask.run(ServiceControllerImpl.java:1746) [jboss-msc-1.0.2.GA-redhat-2.jar:1.0.2.GA-redhat-2]
        at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1110) [rt.jar:1.6.0_22]
        at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:603) [rt.jar:1.6.0_22]
        at java.lang.Thread.run(Thread.java:679) [rt.jar:1.6.0_22]
Caused by: LifecycleException:  Protocol handler initialization failed: java.io.IOException: Alias name test does not identify a key entry
        at org.apache.catalina.connector.Connector.init(Connector.java:1003)
        at org.jboss.as.web.WebConnectorService.start(WebConnectorService.java:268)
    ... 5 more
然后我做了一个keytool-list-v-keystore.mykeystore,并注意到别名在all中是小写的

我想知道我在配置JBOOS应用程序时是否犯了一些根本性的错误,或者这个东西是否正常工作,而我只是犯了一个愚蠢的粗心错误


任何指导都将不胜感激。

在您的JBoss配置中,您指的是一个名为“test”的别名。由于您的密钥库没有这样的别名,JBoss抱怨道。在JBoss配置文件(XML、属性等)中全局搜索“test”(也可以使用包含的引号进行尝试)可能有助于查明问题所在。

在standalone.XML中,确保按如下所示输入

<subsystem xmlns="urn:jboss:domain:web:1.5" default-virtual-server="default-host" native="false">
        <connector name="http" protocol="HTTP/1.1" scheme="http" socket-binding="http"/>
        <connector name="https" protocol="HTTP/1.1" scheme="https" socket-binding="https" enable-lookups="false" secure="true">
            <ssl name="Certificate issued to Name" key-alias="mykey" password="123456" certificate-key-file="Localtion of Keystore file" cipher-suite="TLS_RSA_WITH_AES_128_CBC_SHA,TLS_RSA_WITH_AES_256_CBC_SHA" protocol="TLSv1.2" verify-client="false"/>
        </connector>
        <virtual-server name="default-host" enable-welcome-root="true">
            <alias name="localhost"/>
            <alias name="example.com"/>
        </virtual-server>
</subsystem>


@Pierre.Vriens由于格式错误,下面的XML代码不可见。上面只是一个示例。不要直接使用。您需要根据需要修改XML