Question

我正在开发Java EE应用程序（Netbeans IDE 8.0.2，Glassfish 4.1，JDK 1.8.0_45）。

应该通过https保护对应用程序页面的访问，因此我修改了web.xml：

<security-constraint>
    <web-resource-collection>
        <url-pattern>/*</url-pattern>
    </web-resource-collection>
    <user-data-constraint>
        <description/>
        <transport-guarantee>CONFIDENTIAL</transport-guarantee>
    </user-data-constraint>
</security-constraint>

当我部署＆amp;通过Netbeans启动Glassfish我可以通过

访问我的应用程序

https://localhost:8181/MyApp/

当我将我的应用程序捆绑在.war文件中并将其手动部署到netbeans使用的相同glassfish安装文件的副本时，我在尝试连接到应用程序时遇到异常：

    WARNING (35) GRIZZLY0013: Exception during FilterChain execution
java.lang.RuntimeException: Could not generate dummy secret
  at sun.security.ssl.Handshaker.checkThrown(Handshaker.java:1429)
  at sun.security.ssl.SSLEngineImpl.checkTaskThrown(SSLEngineImpl.java:535)
  at sun.security.ssl.SSLEngineImpl.readNetRecord(SSLEngineImpl.java:813)
  at sun.security.ssl.SSLEngineImpl.unwrap(SSLEngineImpl.java:781)
  at javax.net.ssl.SSLEngine.unwrap(SSLEngine.java:624)
  at org.glassfish.grizzly.ssl.SSLConnectionContext.unwrap(SSLConnectionContext.java:172)
  at org.glassfish.grizzly.ssl.SSLUtils.handshakeUnwrap(SSLUtils.java:263)
  at org.glassfish.grizzly.ssl.SSLBaseFilter.doHandshakeStep(SSLBaseFilter.java:603)
  at org.glassfish.grizzly.ssl.SSLBaseFilter.doHandshakeStep(SSLBaseFilter.java:552)
  at org.glassfish.grizzly.ssl.SSLBaseFilter.handleRead(SSLBaseFilter.java:273)
  at org.glassfish.grizzly.filterchain.ExecutorResolver$9.execute(ExecutorResolver.java:119)
  at org.glassfish.grizzly.filterchain.DefaultFilterChain.executeFilter(DefaultFilterChain.java:284)
  at org.glassfish.grizzly.filterchain.DefaultFilterChain.executeChainPart(DefaultFilterChain.java:201)
  at org.glassfish.grizzly.filterchain.DefaultFilterChain.execute(DefaultFilterChain.java:133)
  at org.glassfish.grizzly.filterchain.DefaultFilterChain.process(DefaultFilterChain.java:112)
  at org.glassfish.grizzly.ProcessorExecutor.execute(ProcessorExecutor.java:77)
  at org.glassfish.grizzly.nio.transport.TCPNIOTransport.fireIOEvent(TCPNIOTransport.java:561)
  at org.glassfish.grizzly.strategies.AbstractIOStrategy.fireIOEvent(AbstractIOStrategy.java:112)
  at org.glassfish.grizzly.strategies.WorkerThreadIOStrategy.run0(WorkerThreadIOStrategy.java:117)
  at org.glassfish.grizzly.strategies.WorkerThreadIOStrategy.access$100(WorkerThreadIOStrategy.java:56)
  at org.glassfish.grizzly.strategies.WorkerThreadIOStrategy$WorkerThreadRunnable.run(WorkerThreadIOStrategy.java:137)
  at org.glassfish.grizzly.threadpool.AbstractThreadPool$Worker.doWork(AbstractThreadPool.java:565)
  at org.glassfish.grizzly.threadpool.AbstractThreadPool$Worker.run(AbstractThreadPool.java:545)
  at java.lang.Thread.run(Thread.java:745)
Caused by: java.lang.RuntimeException: Could not generate dummy secret
  at sun.security.ssl.RSAClientKeyExchange.<init>(RSAClientKeyExchange.java:132)
  at sun.security.ssl.ServerHandshaker.processMessage(ServerHandshaker.java:238)
  at sun.security.ssl.Handshaker.processLoop(Handshaker.java:979)
  at sun.security.ssl.Handshaker$1.run(Handshaker.java:919)
  at sun.security.ssl.Handshaker$1.run(Handshaker.java:916)
  at java.security.AccessController.doPrivileged(Native Method)
  at sun.security.ssl.Handshaker$DelegatedTask.run(Handshaker.java:1369)
  at org.glassfish.grizzly.ssl.SSLUtils.executeDelegatedTask(SSLUtils.java:247)
  at org.glassfish.grizzly.ssl.SSLBaseFilter.doHandshakeStep(SSLBaseFilter.java:638)
  ... 16 more
Caused by: java.security.NoSuchAlgorithmException: Cannot find any provider supporting RSA/ECB/PKCS1Padding
  at javax.crypto.Cipher.getInstance(Cipher.java:540)
  at sun.security.ssl.JsseJce.getCipher(JsseJce.java:229)
  at sun.security.ssl.RSAClientKeyExchange.<init>(RSAClientKeyExchange.java:115)
  ... 24 more

如果我在web.xml中没有CONFIDENTIAL transport-guarantee的情况下重复手动部署过程（.war），我可以访问我的应用程序

http://localhost:8080/MyApp/

我做错了什么？ Netbeans对我手动做错了什么？

Answer 1

当我尝试将glassfish 4.1.1域切换到自定义JVM时，我遇到了同样的问题。我更新了domain.xml - 这导致了类似的Stacktrace。

我通过重置domain.xml（不再指定特定的JVM或java主目录）并在AS_JAVA中配置glassfish\config\asenv.bat来解决此问题，如下所示：

SET AS_JAVA=C:\Program Files\Java\...

java.lang.RuntimeException：无法在sun.security.ssl.RSAClientKeyExchange生成伪秘密。<init>

1 个答案: