SSLPeerUnverifiedException:未验证主机名

时间:2017-10-30 15:28:09

标签: java ssl okhttp3 truststore minio

我在尝试使用使用okHttp3的Minio时遇到此异常。我一直在搜索,无法找到任何解决方案。 这些是我做的步骤:

  1. 生成私钥
  2. 生成具有主题alt名称的证书签名请求
  3. 具有主题alt名称的自签名证书请求
  4. 将证书添加到JRE信任库(jre / lib / security / cacerts)
  5. 绝对阻碍事情。我不想修改okHttp3中的内容来盲目地验证所有内容。我想要一个解决这个问题的安全方案。如果您能提出任何有用的信息,请提前感谢。

    Exception in thread "main" javax.net.ssl.SSLPeerUnverifiedException: Hostname 127.0.0.1 not verified:
    certificate: sha256/HQpBYmmAI2DSeD1sElkaZB4SpxP1RwUVREMaeWafjq8=
    DN: CN=localhost, O=XXX, L=XXX, ST=XXX, C=GE
    subjectAltNames: [127.0.0.1, localhost]
    at okhttp3.internal.connection.RealConnection.connectTls(RealConnection.java:277)
    at okhttp3.internal.connection.RealConnection.establishProtocol(RealConnection.java:238)
    at okhttp3.internal.connection.RealConnection.connect(RealConnection.java:149)
    at okhttp3.internal.connection.StreamAllocation.findConnection(StreamAllocation.java:192)
    at okhttp3.internal.connection.StreamAllocation.findHealthyConnection(StreamAllocation.java:121)
    at okhttp3.internal.connection.StreamAllocation.newStream(StreamAllocation.java:100)
    at okhttp3.internal.connection.ConnectInterceptor.intercept(ConnectInterceptor.java:42)
    at okhttp3.internal.http.RealInterceptorChain.proceed(RealInterceptorChain.java:92)
    at okhttp3.internal.http.RealInterceptorChain.proceed(RealInterceptorChain.java:67)
    at okhttp3.internal.cache.CacheInterceptor.intercept(CacheInterceptor.java:93)
    at okhttp3.internal.http.RealInterceptorChain.proceed(RealInterceptorChain.java:92)
    at okhttp3.internal.http.RealInterceptorChain.proceed(RealInterceptorChain.java:67)
    at okhttp3.internal.http.BridgeInterceptor.intercept(BridgeInterceptor.java:93)
    at okhttp3.internal.http.RealInterceptorChain.proceed(RealInterceptorChain.java:92)
    at okhttp3.internal.http.RetryAndFollowUpInterceptor.intercept(RetryAndFollowUpInterceptor.java:120)
    at okhttp3.internal.http.RealInterceptorChain.proceed(RealInterceptorChain.java:92)
    at okhttp3.internal.http.RealInterceptorChain.proceed(RealInterceptorChain.java:67)
    at okhttp3.RealCall.getResponseWithInterceptorChain(RealCall.java:185)
    at okhttp3.RealCall.execute(RealCall.java:69)
    at io.minio.MinioClient.execute(MinioClient.java:998)
    at io.minio.MinioClient.updateRegionCache(MinioClient.java:1114)
    at io.minio.MinioClient.getRegion(MinioClient.java:1160)
    at io.minio.MinioClient.executeHead(MinioClient.java:1207)
    at io.minio.MinioClient.bucketExists(MinioClient.java:2842)
    at ge.minio.Main.main(Main.java:28)
    

0 个答案:

没有答案