Tomcat[9.0.26]-SSLHandshake异常

Question

并在握手失败结束时找到“无效”记录器：

从记录器来看，我认为使用的SSL协议版本是TLS1.2，看起来不错。它看起来像密码不匹配-但不确定我是否忽略了什么，以及如何补救这一点。

在进一步检查日志时,发现以下一个错误：

 upcoming handshake states: client finished[20]
 upcoming handshake states: server change_cipher_spec[-1]
 upcoming handshake states: server finished[20]
 http-nio-8080-exec-15, WRITE: TLSv1.2 Change Cipher Spec, length = 1
 *** Finished verify_data:  { 27, 249, 167, 252, 151, 220, 110, 252, 113, 134, 248, 228 }
 *** update handshake state: finished[20]
 upcoming handshake states: server change_cipher_spec[-1]
 upcoming handshake states: server finished[20]
 http-nio-8080-exec-15, WRITE: TLSv1.2 Handshake, length = 40
 http-nio-8080-exec-15, READ: TLSv1.2 Alert, length = 2
 http-nio-8080-exec-15, RECV TLSv1.2 ALERT:  fatal, handshake_failure
 %% Invalidated:  [Session-6, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384]
 http-nio-8080-exec-15, called closeSocket() http-nio-8080-exec-15,
 handling exception: javax.net.ssl.SSLHandshakeException: Received
 fatal alert: handshake_failure

Answer 1

问题终于解决了。

不出所料，'不可解析的证书扩展‘结果是一个错误警报。

最后，同时设置信任存储和密钥存储有助于解决问题。在SSL握手期间，客户端身份验证也需要密钥存储。