Question

以下是代码：

public class connect {
    public static void main(String... args) throws Exception {
        com.rsa.authagent.authapi.AuthSessionFactory.getInstance(null);
    }
}

我打开调试后运行它，我得到：

adding as trusted cert:
  Subject: SERIALNUMBER=eab48e9c64457b5c09b033691cb81426d1315b853b83bd47eee5d9f40a5dcb4a, CN=RSA root CA for den-prod-rsa02.ch.int
  Issuer:  SERIALNUMBER=eab48e9c64457b5c09b033691cb81426d1315b853b83bd47eee5d9f40a5dcb4a, CN=RSA root CA for den-prod-rsa02.ch.int
  Algorithm: RSA; Serial number: 0x27d0015b935d1919b03b41b4e2aa42bf
  Valid from Thu Oct 16 03:41:08 PDT 2014 until Wed Dec 31 16:00:00 PST 2036

[上面再重复两次]

trigger seeding of SecureRandom
done seeding SecureRandom
Using SSLEngineImpl.
Ignoring unavailable cipher suite: TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
Ignoring unavailable cipher suite: TLS_DHE_RSA_WITH_AES_256_CBC_SHA

[忽略了十多个密码套件]

Exception in thread "main" com.rsa.authagent.authapi.AuthAgentException: com.rsa.authagent.authapi.AuthAgentException: Error in initial AuthnReq/Rsp for serverTime.Error in processing Authn request: Cannot support TLS_DHE_RSA_WITH_AES_256_CBC_SHA with currently installed providers
    at com.rsa.authagent.authapi.AuthSessionFactory.a(AuthSessionFactory.java)
    at com.rsa.authagent.authapi.AuthSessionFactory.getInstance(AuthSessionFactory.java)
    at connect.main(connect.java:5)

服务器是“正确的”，因为它是数百人每天使用的生产服务器。客户端非常小（并且来自RSA示例）。离开我的电脑：我必须以某种方式调整配置。

我找到的唯一建议是

安装无限强度美国加密库（已完成）
从服务器下载证书并使用keytool在$JAVA_HOME//lib/security目录中安装（尝试过，除了显然导致间歇性的45秒暂停，它没有明显效果）。

附加到RSA Auth Manager的“忽略不可用的密码套件”

0 个答案: