TLS升级，使用CustomHttpsSocketFactory时发生Stackoverflow错误

Question

使用此链接试图升级到TLSv1。2.唯一的区别是到目前为止支持所有TLS，因此使用了以下方法：

sslSocket.setEnabledProtocols(new String[]{"TLSv1","TLSv1.1","TLSv1.2"});

奇怪的是出现了这样的错误：

java.lang.StackOverflowError
        at com.myorg.my.utils.Myfile$CustomHttpsSocketFactory.createSocket(Myfile.java:101)

我的文件在哪里。java有这样的内容，请注意下面提到的第101行：

//...non useful code above
public Myfile(){
        String scheme = "https";
        Protocol baseHttps = Protocol.getProtocol(scheme);
        int defaultPort = baseHttps.getDefaultPort();

        ProtocolSocketFactory baseFactory = baseHttps.getSocketFactory();
        ProtocolSocketFactory customFactory = new CustomHttpsSocketFactory(baseFactory);

        Protocol customHttps = new Protocol(scheme, customFactory, defaultPort);
        Protocol.registerProtocol(scheme, customHttps); 
    }

    class CustomHttpsSocketFactory implements SecureProtocolSocketFactory
    {

       private final SecureProtocolSocketFactory base;

       public CustomHttpsSocketFactory(ProtocolSocketFactory base)
       {
          if(base == null || !(base instanceof SecureProtocolSocketFactory)) throw new IllegalArgumentExcepthtml" target="_blank">ion();
          this.base = (SecureProtocolSocketFactory) base;
       }

       private Socket acceptAllTLS(Socket socket)
       {
          if(!(socket instanceof SSLSocket)) return socket;
          SSLSocket sslSocket = (SSLSocket) socket;
          sslSocket.setEnabledProtocols(new String[]{"TLSv1","TLSv1.1","TLSv1.2"});
          return sslSocket;
       } 
   @Override
   public Socket createSocket(String host, int port) throws IOException
   {
      return acceptAllTLS(base.createSocket(host, port));
   }
   @Override
   public Socket createSocket(String host, int port, InetAddress localAddress, int localPort) throws IOException
   {
      return acceptAllTLS(base.createSocket(host, port, localAddress, localPort));
   }
   @Override
   public Socket createSocket(String host, int port, InetAddress localAddress, int localPort, HttpConnectionParams params) throws IOException
   {
      // The following line is 101 where the error occurs     
      return acceptAllTLS(base.createSocket(host, port, localAddress, localPort, params));
   }
   @Override
   public Socket createSocket(Socket socket, String host, int port, boolean autoClose) throws IOException
   {
      return acceptAllTLS(base.createSocket(socket, host, port, autoClose));
   }  // ...non  useful code below}

我的问题

>

很明显，base.createSocket递归调用它自己的方法。不明白怎么做？

无法在我的本地机器上复制，这些日志只发生在生产中。因此，我如何复制这个（使用与生产中存在的相同的Java版本，tomcat版本，lib版本）

编辑

根据stacktrace的评论：

原因：java。lang.stackoverflowerr在com上。迈尔格。我的乌提尔斯。Myfile$CustomHttpsSocketFactory。createSocket（Myfile.ja）

Answer 1

我也有同样的问题。您将多次注册HTTPS协议。我认为注册操作就像stack一样有效。

String scheme = "https";
Protocol baseHttps = Protocol.getProtocol(scheme);
int defaultPort = baseHttps.getDefaultPort();

ProtocolSocketFactory baseFactory = baseHttps.getSocketFactory();
ProtocolSocketFactory customFactory = new CustomHttpsSocketFactory(baseFactory);

Protocol customHttps = new Protocol(scheme, customFactory, defaultPort);
Protocol.registerProtocol(scheme, customHttps); 

Protocol.register协议方法必须在JVM中调用一次。每个寄存器协议在时间堆栈溢出流后导致一个方法调用。

解决方案：添加一个像init这样的同步方法并调用它。

public static boolean INITIALIZED = false; 

private static synchronized void init() {
    if (!INITIALIZED) {
        INITIALIZED = true;
        String scheme = "https";
        Protocol baseHttps = Protocol.getProtocol(scheme);
        int defaultPort = baseHttps.getDefaultPort();

        ProtocolSocketFactory baseFactory = baseHttps.getSocketFactory();
        ProtocolSocketFactory customFactory = new CustomHttpsSocketFactory(baseFactory);

        Protocol customHttps = new Protocol(scheme, customFactory, defaultPort);
        Protocol.registerProtocol(scheme, customHttps); 
    }
}
...
...
init();
...
...

Answer 2

我有同样的问题与java.util.concurrent.执行异常：java.lang.StackOverflow Error

类加载器使私有的最终SecurePROcolSocketFactory基多次base=CustomHttpsSocketFactory和递归调用该方法导致StackOverflow Error。

在我的例子中，我的CustomHttpsSocketFactory扩展了SSLProtocolSocketFactory，问题消失了

Answer 3

如果您使用的是JRE8（除非您已经替换了JRE8附带的默认SunJSSE），那么系统属性“jdk.tls.client.protocols”。默认情况下，您在这里提到的任何内容都将用于所有客户端通信。我只是在你提到的其他帖子下面加了我的评论。