javax.net.ssl​​.SSLHandshakeException：远程主机关闭握手期间的连接 [英] javax.net.ssl.SSLHandshakeException: Remote host closed connection during handshake

问题描述

我们必须配置一个大F5负载​​均衡虚拟服务器会被重定向传入HTTPS请求几个Windows服务器的特定IP地址，其中有功能，生成的响应。

We have configure a Big F5 load balancer virtual server for a particular IP address which redirects incoming https requests to several Windows servers where there is functionality to generate responses.

我使用了SoapUI测试通过在大F5的虚拟服务器的IP地址访问这些Windows服务器。

I am using SoapUI to test access to these windows servers via the IP address of virtual server in the Big F5.

利用那里的，我们也该成立了组织产生的服务器和客户端证书，并通过发送请求了SoapUI我得到predicted响应返回。

Using Server and Client certificates generated by the organization where the we have also this set up and sending requests via SoapUI I get the predicted responses back.

业务需求要求商业由Thawte签名的证书。

The business requirements call for Commercially signed certificates by Thawte.

我们创建了一个荣誉证书Servcice请求（CSR）生成一个服务器证书和私钥，然后我们有它由Thawte签名，还要求从Thawte客户端商业签名证书。

We created a Certifcate Servcice Request (CSR) to generate a Server certificate and its private key and then we had it signed by Thawte, and also requested a Client Commercially signed certificate from Thawte.

我们加载了SoapUI客户和大F5负载​​均衡两个证书，但我们尝试测试我们得到的请求javax.net.ssl​​.SSLHandshakeException：远程主机关闭握手期间连接的错误

We loaded both certificates in SoapUI client and the Big F5 load balancer but we attempting to test the requests we get the "javax.net.ssl.SSLHandshakeException: Remote host closed connection during handshake" error.

我的问题是：
如何监控到底在哪2路SSL握手被终止
实际的原因究竟是怎么回事？..用商业签名证书为什么现在无法正常工作？

My questions are: How can I monitor where exactly the 2 way SSL handshake is terminated The actual reason what exactly is happening?.. why using commercially signed certificates this does not work now?

任何答复是值得欢迎的。谢谢你。

Any replies are welcome. Thanks.

然而，当我们swithch Serverto由Thawte签署商业

However when we swithch Serverto commercially signed by Thawte

推荐答案

这可能是由于Java安全功能。如果是这样，你需要编辑位于 soapUI的-4.xxvmoptions文件的soapUI-的4.xx \\ BIN 文件夹并添加 -Dsun.security。 ssl.allowUnsafeRenegotiation = TRUE 来结束。

This is possibly due to the Java security feature. If so you need to edit the soapui-4.x.x.vmoptions file located at soapui-4.x.x\bin folder and add -Dsun.security.ssl.allowUnsafeRenegotiation=true to the end.

您可能还需要将证书导出为PFX文件，并在soapUI的preference页面设置。有关详细信息，您可以检查<$c$c>http://geekswithblogs.net/gvdmaaden/archive/2011/02/24/how-to-configure-soapui-with-client-certificate-authentication.aspx和<$c$c>http://forums.devarticles.com/java-development-38/javax-net-ssl-sslhandshakeexception-received-fatal-alert-handshake-failure-11809.html

You may also need to export the certificate as a pfx file and set it up in soapUI preference page. For details you can check http://geekswithblogs.net/gvdmaaden/archive/2011/02/24/how-to-configure-soapui-with-client-certificate-authentication.aspx and http://forums.devarticles.com/java-development-38/javax-net-ssl-sslhandshakeexception-received-fatal-alert-handshake-failure-11809.html .

这篇关于javax.net.ssl​​.SSLHandshakeException：远程主机关闭握手期间的连接的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！