Question

从IBM JDK 6.0SR9更新到6.0SR10后，我一直在（在服务器端）：

java.io.IOException: javax.net.ssl.SSLHandshakeException: Client requested protocol SSLv3 not enabled or not supported
                at com.ibm.jsse2.kb.z(kb.java:107)
                at com.ibm.jsse2.SSLEngineImpl.b(SSLEngineImpl.java:4)
                at com.ibm.jsse2.SSLEngineImpl.c(SSLEngineImpl.java:224)
                at com.ibm.jsse2.SSLEngineImpl.wrap(SSLEngineImpl.java:377)
                at javax.net.ssl.SSLEngine.wrap(SSLEngine.java:6)

没有修改任何安全设置。知道如何（重新）启用SSLv3吗？

感谢。

Answer 1

在以后的版本中，出于安全原因，默认情况下会禁用SSLv3。

以下技术说明应详细说明如何启用此功能。

http://www-01.ibm.com/support/docview.wss?uid=swg21318567

Answer 2

当客户端和服务器SSL协议设置不匹配时，会发生异常。

以下客户端示例代码适用于配置了支持TLSv1.2协议的服务器端：

String response = "";

URL url = new URL("https://localhost:9043/myservlet);

final SSLContext ctx = SSLContext.getInstance("TLSv1.2");
ctx.init(null, null, null);
// final String protoccol = ctx.getProtocol();

HttpsURLConnection.setDefaultSSLSocketFactory(ctx.getSocketFactory());

final HttpsURLConnection conn = (HttpsURLConnection) url.openConnection();

conn.setReadTimeout(15000);
conn.setConnectTimeout(15000);
conn.setRequestMethod("POST");
conn.setDoInput(true);
conn.setDoOutput(true);

final OutputStream os = conn.getOutputStream();
final BufferedWriter writer =
  new BufferedWriter(new OutputStreamWriter(os, "UTF-8"));

writer.write(......);

writer.flush();
writer.close();
os.close();

final int responseCode = conn.getResponseCode();

if (responseCode == HttpsURLConnection.HTTP_OK) {
  String line;
  final BufferedReader br =
    new BufferedReader(new InputStreamReader(conn.getInputStream()));
  while ((line = br.readLine()) != null) {
    response += line;
  }
}

System.out.println("response: " + response);

Answer 3

SSLEngine.setEnabledProtocols（），但默认情况下肯定会启用SSLv3。我会仔细检查你的断言是否已被禁用。

未启用或不支持客户端请求的协议SSLv3（IBM JDK 6.0SR10）

3 个答案: