Question

收到错误：

Caused by: sun.security.validator.ValidatorException: PKIX path validation failed: org.bouncycastle.jce.exception.ExtCertPathValidatorException: Additional certificat
e path checker failed.
        at sun.security.validator.PKIXValidator.doValidate(PKIXValidator.java:362)
        at sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:259)
        at sun.security.validator.Validator.validate(Validator.java:260)
        at sun.security.ssl.X509TrustManagerImpl.validate(X509TrustManagerImpl.java:324)
        at sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:229)
        at sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:124)
        at sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1496)
        ... 73 more
Caused by: org.bouncycastle.jce.exception.ExtCertPathValidatorException: Additional certificate path checker failed.
        at org.bouncycastle.jce.provider.RFC3280CertPathUtilities.wrapupCertF(Unknown Source)
        at org.bouncycastle.jce.provider.PKIXCertPathValidatorSpi.engineValidate(Unknown Source)
        at java.security.cert.CertPathValidator.validate(CertPathValidator.java:292)
        at sun.security.validator.PKIXValidator.doValidate(PKIXValidator.java:357)
        ... 79 more
Caused by: java.security.cert.CertPathValidatorException: Algorithm constraints check failed on signature algorithm: SHA1WithRSAEncryption
        at sun.security.provider.certpath.AlgorithmChecker.check(AlgorithmChecker.java:278)
        ... 83 more

握手期间

我已将java.security文件放在路径jdk/jre/lib/security中并更改了属性

jdk.certpath.disabledAlgorithms=
jdk.jar.disabledAlgorithms=
jdk.tls.disabledAlgorithms=

所以现在名单上没有算法，但我仍然得到同样的错误！？

我的证书是使用SHA1WITHRSA / RSA 1024位签名的，我需要使用那个。

任何有任何想法我还可以尝试，在JBoss 6.2上运行的java版本1.8.0_141

签名算法上的算法约束检查失败

0 个答案: