为什么我得到一个异常javax.net.ssl.SSLPeerUnverifiedException:peer未经过身份验证? [英] Why am I getting an exception javax.net.ssl.SSLPeerUnverifiedException: peer not authenticated?
问题描述
我正在使用Apache HttpComponents HttpClient(4.0.1)进行HTTPS调用,但我将此异常作为响应:
I'm using Apache HttpComponents HttpClient(4.0.1) to make a HTTPS call, but I'm this exception as the response:
javax.net.ssl.SSLPeerUnverifiedException: peer not authenticated
at com.sun.net.ssl.internal.ssl.SSLSessionImpl.getPeerCertificates(SSLSessionImpl.java:345)
at org.apache.http.conn.ssl.AbstractVerifier.verify(AbstractVerifier.java:128)
at org.apache.http.conn.ssl.SSLSocketFactory.connectSocket(SSLSocketFactory.java:390)
at org.apache.http.impl.conn.DefaultClientConnectionOperator.openConnection(DefaultClientConnectionOperator.java:148)
at org.apache.http.impl.conn.AbstractPoolEntry.open(AbstractPoolEntry.java:149)
at org.apache.http.impl.conn.AbstractPooledConnAdapter.open(AbstractPooledConnAdapter.java:121)
at org.apache.http.impl.client.DefaultRequestDirector.tryConnect(DefaultRequestDirector.java:561)
at org.apache.http.impl.client.DefaultRequestDirector.execute(DefaultRequestDirector.java:415)
at org.apache.http.impl.client.AbstractHttpClient.execute(AbstractHttpClient.java:820)
at org.apache.http.impl.client.AbstractHttpClient.execute(AbstractHttpClient.java:754)
at org.apache.http.impl.client.AbstractHttpClient.execute(AbstractHttpClient.java:732)
我提供了所有必需的参数。目标系统不需要任何用户名/密码或代理,但它包含安装在服务器中的JKS证书。用户名和密码是空值。
I provided all the required paramters. The destination system doesn't require any user name/password or proxy, but it contains JKS csrtificates that are installed in server. The user name and passwords are blank values.
这适用于 org.apache.commons.httpclient.methods.PostMethod
- 版本3.0 - commons-httpclient -3.0.jar
现在我们用 org.apache.http.client.methods.HttpPost实现了
- 版本4.0.1 - commons-httpclient.jar
This is working with org.apache.commons.httpclient.methods.PostMethod
- Version 3.0 - commons-httpclient-3.0.jar
Now we have implemented with org.apache.http.client.methods.HttpPost
- Version 4.0.1 - commons-httpclient.jar
这是不起作用的示例代码段:
This is the sample code snippet which is not working:
HttpParams param = new BasicHttpParams();
HttpProtocolParams.setVersion(param, HttpVersion.HTTP_1_1);
HttpProtocolParams.setContentCharset(param, "UTF-8");
HttpProtocolParams.setUseExpectContinue(param, true);
DefaultHttpClient httpClient = new DefaultHttpClient(param);
httpClient.getParams().setParameter(HttpConnectionParams.CONNECTION_TIMEOUT,10000)));
httpClient.getParams().setParameter(HttpConnectionParams.SO_TIMEOUT,10000)));
httpClient.getCredentialsProvider().setCredentials(new AuthScope(<HOST IP,PORT)),
AuthScope.ANY_REALM),
new UsernamePasswordCredentials("", ""));
try {
HttpPost httpPost = new HttpPost(END POINT URL);
StringEntity requestEntity = new StringEntity(inputString, "text/xml", "UTF-8");
httpPost.setEntity(requestEntity);
response = httpClient.execute(httpPost);
HttpEntity responseEntity = response.getEntity();
if (null != responseEntity)
{
responseBody = EntityUtils.toString(responseEntity);
}
if (null != httpPost.getURI()) {
url = httpPost.getURI().toString();
}
} catch (IOException e) {
e.printStackTrace();
} finally {
httpClient.getConnectionManager().shutdown();
}
推荐答案
异常消息
javax.net.ssl.SSLPeerUnverifiedException:peer not authenticated
javax.net.ssl.SSLPeerUnverifiedException: peer not authenticated
并不总是表明问题的根本原因。
您可能需要通过添加Java VM参数 -Djavax.net.debug = ssl:handshake
来启用SSL握手调试。
一旦你添加了,你将收到更多有用的错误消息。
如果远程服务器使用不受信任的证书,您将看到以下错误消息:
doesn't always indicate the root cause of the issue.
You may need to enable the SSL handshake debug by adding theJava VM parameter -Djavax.net.debug=ssl:handshake
.
Once you've added that you will get more helpful error messages.
If the remote server uses a certificate that is not trusted you will see the following error message:
javax.net.ssl.SSLHandshakeException:
sun.security.validator.ValidatorException: PKIX path building failed:
sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
如果是这种情况,那么@Abhishek的答案将解决问题。
If that is the case then the answer by @Abhishek will solve the issue.
这篇关于为什么我得到一个异常javax.net.ssl.SSLPeerUnverifiedException:peer未经过身份验证?的文章就介绍到这了,希望我们推荐的答案对大家有所帮助,也希望大家多多支持IT屋!