Question

在尝试访问https网络服务时，我几天来一直在努力配置WSO2 ESB。我遵循了许多建议，到目前为止我所做的是将Web服务客户端证书导入repostory / resources / security中的client-truststore.jks 将代理访问参数添加到repository / conf / axis2 / axis2.xml（因为ESB位于公司防火墙后面）在axis2.xml中将AllowAll参数添加到transportSender https 重新启动esb并仍然获得异常

http-nio-9443-exec-50, SEND TLSv1 ALERT:  fatal, description = certificate_unknown
http-nio-9443-exec-50, WRITE: TLSv1 Alert, length = 2
http-nio-9443-exec-50, called closeSocket()
http-nio-9443-exec-50, handling exception: javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: No name matching my.domain.com found
http-nio-9443-exec-50, WRITE: TLSv1 Application Data, length = 1
http-nio-9443-exec-50, WRITE: TLSv1 Application Data, length = 154

我正在使用jdk1.6_34并尝试使用WSO2 ESB 4.5.1和4.6，结果相同。日志记录显示ssl握手正在启动，但随后以上述错误结束。所有的谷歌搜索都表明hostnameverifier参数应该做到这一点，但显然不是。是否还有其他地方我应该配置这个或者是否在其他地方覆盖了这个参数？我已经没有选项和地方可以看了。

编辑：我已经有另一次尝试，并通过将我的hosts文件中的主机名设置为客户端证书中指定的CN，我现在可以得到更多但我现在得到另一个我似乎无法理解的错误。具体错误是“......没有IV用于此密码”，但调试跟踪为

Found trusted certificate:
[
[
Version: V1
Subject: CN=mydomain.com, O=my o, ST=INTERFACES, C=GB
Signature Algorithm: SHA1withRSA, OID = 1.2.840.113549.1.1.5

Key:  Sun RSA public key, 1024 bits
   modulus:#### loads of numbers here ####
public exponent: 65537
Validity: [From: Mon Apr 22 14:26:25 BST 2013,
           To: Tue Apr 22 14:26:25 BST 2014]
Issuer: CN=ath-st2-API-a, O=Northgate IS, ST=INTERFACES, C=GB
SerialNumber: [    a4cf31a6 9c0d920d]

]
Algorithm: [SHA1withRSA]
Signature:
### signature here ###
]
http-nio-9443-exec-13, READ: SSLv3 Handshake, length = 98
*** CertificateRequest
Cert Types: RSA, DSS
Cert Authorities:
<CN=mydomain.com, O=my o, ST=INTERFACES, C=GB>
*** ServerHelloDone
http-nio-9443-exec-13, SEND SSLv3 ALERT:  warning, description = no_certificate
http-nio-9443-exec-13, WRITE: SSLv3 Alert, length = 2
*** ClientKeyExchange, RSA PreMasterSecret, SSLv3
http-nio-9443-exec-13, WRITE: SSLv3 Handshake, length = 132
SESSION KEYGEN:
PreMaster Secret:
###master secret here ####
CONNECTION KEYGEN:
Client Nonce:
0000: 52 45 86 22 10 B0 E2 EF   19 10 B1 04 ED C9 6F B0  RE."..........o.
0010: C3 8E BC D6 2C C9 5E D0   CA 8E 88 6B 22 53 1D B0  ....,.^....k"S..
Server Nonce:
0000: 52 45 86 23 B0 56 30 EC   84 F0 48 C1 F7 31 0C 5C  RE.#.V0...H..1.\
0010: 43 B3 CB 25 DA 19 4C 0E   B1 71 CB 17 8E 0C 62 04  C..%..L..q....b.
Master Secret:
0000: C3 F4 6B 9B EB 50 67 BD   6C A8 F0 63 88 A1 5A C7  ..k..Pg.l..c..Z.
0010: E5 CD A4 9A 46 95 3F B3   13 2D 4E BF 77 2C 64 86  ....F.?..-N.w,d.
0020: 44 D2 89 B5 09 EE 96 E5   8B 8D E2 30 04 09 F2 D3  D..........0....
Client MAC write Secret:
0000: F7 76 83 C9 16 F5 CB 33   E3 43 3F 7B 68 2E 8A 6F  .v.....3.C?.h..o
Server MAC write Secret:
0000: CC FB 14 CE 21 AD C8 BC   20 C1 A5 2B 0B 2B 83 35  ....!... ..+.+.5
Client write key:
0000: 9C 9E FA A5 68 6E 27 2C   E0 6E 80 9D ED C9 1C 01  ....hn',.n......
Server write key:
0000: B7 5A 24 DD 6F 65 5A 7E   C8 AD 4A 29 E4 09 08 6D  .Z$.oeZ...J)...m
... no IV used for this cipher
http-nio-9443-exec-13, WRITE: SSLv3 Change Cipher Spec, length = 1
*** Finished
verify_data:  { 174, 247, 182, 190, 5, 104, 242, 127, 216, 79, 94, 15, 215, 236, 236,   211, 30, 51, 116, 56, 138, 144, 19, 125, 0, 54, 52, 114, 173, 138, 170, 166, 24, 67, 108, 102 }
***
http-nio-9443-exec-13, WRITE: SSLv3 Handshake, length = 56
http-nio-9443-exec-13, READ: SSLv3 Alert, length = 2
http-nio-9443-exec-13, RECV SSLv3 ALERT:  fatal, handshake_failure
http-nio-9443-exec-13, called closeSocket()
http-nio-9443-exec-13, handling exception: javax.net.ssl.SSLHandshakeException:     Received fatal alert
: handshake_failure
http-nio-9443-exec-13, WRITE: TLSv1 Application Data, length = 1
http-nio-9443-exec-13, WRITE: TLSv1 Application Data, length = 154
http-nio-9443-ClientPoller-0, called closeOutbound()
http-nio-9443-ClientPoller-0, closeOutboundInternal()
http-nio-9443-ClientPoller-0, SEND TLSv1 ALERT:  warning, description = close_notify
http-nio-9443-ClientPoller-0, WRITE: TLSv1 Alert, length = 32
Finalizer, called close()
Finalizer, called closeInternal(true)

我尝试将axis2配置文件中的https.protocols = SSLv3，SSLv2Hello或https.protocols = SSLv3作为https发件人传输传递给但是这也无济于事。

欢迎提出建议。谢谢康拉德

如何使用HostnameVerifier AllowAll配置WSO2 ESB SSL访问

0 个答案: