Question

到目前为止，我一直在使用我添加到SoapUI 5.2项目的证书，这使我可以访问预生产服务器。但是，现在我已准备好转移到生产环境，我正在尝试使用SoapUI检查新的生产证书，但我收到了下一个错误：

WARN:Using fallback method to load keystore/truststore due to: Invalid keystore format
ERROR:An error occurred [java.lang.NullPointerException], see error log for details

错误日志说：

ERROR:Could not load keystore/truststore
ERROR:java.lang.NullPointerException
   java.lang.NullPointerException
    at org.apache.commons.ssl.KeyStoreBuilder.build(KeyStoreBuilder.java:176)
    at org.apache.commons.ssl.KeyStoreBuilder.build(KeyStoreBuilder.java:97)
    at org.apache.commons.ssl.KeyStoreBuilder.build(KeyStoreBuilder.java:88)
    at com.eviware.soapui.impl.wsdl.support.wss.crypto.KeyMaterialWssCrypto.fallbackLoad(KeyMaterialWssCrypto.java:206)
    at com.eviware.soapui.impl.wsdl.support.wss.crypto.KeyMaterialWssCrypto.load(KeyMaterialWssCrypto.java:168)
    at com.eviware.soapui.impl.wsdl.support.wss.crypto.KeyMaterialWssCrypto.getStatus(KeyMaterialWssCrypto.java:216)
    at com.eviware.soapui.impl.wsdl.panels.project.WSSTabPanel$CryptoTableModel.getValueAt(WSSTabPanel.java:643)
    at javax.swing.JTable.getValueAt(Unknown Source)
    at javax.swing.JTable.prepareRenderer(Unknown Source)
...

我在预生产和生产证书之间找到的唯一区别是后者没有定义CommonName字段。

我知道该字段不是强制性的，那怎么可能呢？如何在不要求新证书的情况下解决此问题？那不是一个选择。

任何建议都将不胜感激。

Answer 1

我检查5.2 versión的SOAPUI项目的pom.xml，并使用not-yet-commons-sslversión0.3.11：

    <dependency>
        <groupId>commons-ssl</groupId>
        <artifactId>not-yet-commons-ssl</artifactId>
        <version>0.3.11</version>
    </dependency>

如果您将org.apache.commons.ssl.KeyStoreBuilder类的build方法检查为错误日志中引发的异常，您会看到：

public static KeyStore build(byte[] jksOrCerts, byte[] privateKey,
                             char[] jksPassword, char[] keyPassword)
    throws IOException, CertificateException, KeyStoreException,
    NoSuchAlgorithmException, InvalidKeyException,
    NoSuchProviderException, ProbablyBadPasswordException,
    UnrecoverableKeyException {

    ...
        KeyStore ks = KeyStore.getInstance(KeyStore.getDefaultType());
        ks.load(null, jksPassword);
        Iterator keysIt = keys.iterator();
        Iterator chainsIt = chains.iterator();
        int i = 1;
        while (keysIt.hasNext() && chainsIt.hasNext()) {
            Key key = (Key) keysIt.next();
            Certificate[] c = (Certificate[]) chainsIt.next();
            X509Certificate theOne = buildChain(key, c);
            String alias = "alias_" + i++;
            // The theOne is not null, then our chain was probably altered.
            // Need to trim out the newly introduced null entries at the end of
            // our chain.
            if (theOne != null) {
                c = Certificates.trimChain(c);
                alias = Certificates.getCN(theOne);
/* line 176 */  alias = alias.replace(' ', '_');
            }
            ks.setKeyEntry(alias, key, keyPassword, c);
        }
        return ks;
    }
}

看来你是对的，问题是你的证书没有通用名称，因此org.apache.commons.ssl.Certificates.getCN(X509Certificate)将null作为别名返回，然后alias.replace抛出NPE }。

                alias = Certificates.getCN(theOne);
/* line 176 */  alias = alias.replace(' ', '_');

我没有看到Common Name中SOAPUI 5.2是强制性的，但是各种代码/软件将其用于不同的目的，因为not-yet-commons-ssl不会。

您的证书可能是正确的，但如果您的环境不是CN，则无法使用http://juliusdavies.ca/commons-ssl/版本来测试您的环境，因此如果您想使用SOAPUI来测试您的环境，我认为您是重新颁发证书，与CN一起生成CSR。或者您可以将问题报告给mDrawer = MenuDrawer.attach(this, Position.RIGHT); mDrawer.setContentView(R.layout.pro); mDrawer.setMenuView(R.layout.slide_menu); mDrawer.setMenuSize(600); toggleButton = (ToggleButton) findViewById(R.id.toggleButton1); registerNewAccount = (RelativeLayout) findViewById(R.id.registerNewAccount); registerNewAccount.setOnClickListener(new View.OnClickListener() { @Override public void onClick(View v) { Digits.authenticate(digitsCallback, android.R.style.Theme_Material); } }); //below line i'm getting an error. toggleButton.setOnCheckedChangeListener(new CompoundButton.OnCheckedChangeListener() { @Override public void onCheckedChanged(CompoundButton arg0, boolean isChecked) { // text.setText("Status: " + isChecked); } });，然后要求SOAPUI包含最新版本...

希望这有帮助，

证书

1 个答案: