Question

我有两台运行Oracle 11g的独立服务器。

服务器已使用Oracle补丁集修补，以升级JVM。升级后，我可以使用HTTPS和TLSv1.2与外部Web服务进行通信，但只能在服务器“ A”上进行通信。服务器“ B”给我类似的错误：

javax.net.ssl.SSLHandshakeException: Received fatal alert: handshake_failure
at com.sun.net.ssl.internal.ssl.Alerts.getSSLException(Alerts.java)
at com.sun.net.ssl.internal.ssl.Alerts.getSSLException(Alerts.java)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.recvAlert(SSLSocketImpl.java)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java)
at sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java)
at sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java)
at sun.net.www.protocol.https.HttpsURLConnectionImpl.connect(HttpsURLConnectionImpl.java:142)
at FursTestBaza.Test(FursTestBaza:92)

我们已经检查了补丁集，并且两台服务器“都”安装了相同的补丁集：

服务器A：

服务器B：

Java存储过程是具有一个静态方法的简单Class。此过程从文件系统加载证书，并与指定的URL建立HTTPS连接（为测试目的而进行硬编码）。在源代码中，我包含了System.setProperty("javax.net.debug", "all")，以获取一些日志记录。

Java存储过程的源代码：

    CREATE OR REPLACE AND RESOLVE JAVA SOURCE NAMED INIS_PROD."FursTestBaza" as 
import java.io.File;
import java.io.FileInputStream;
import java.io.IOException;
import java.io.InputStream;
import java.net.URL;
import java.security.InvalidKeyException;
import java.security.Key;
import java.security.KeyManagementException;
import java.security.KeyStore;
import java.security.KeyStoreException;
import java.security.NoSuchAlgorithmException;
import java.security.PrivateKey;
import java.security.Signature;
import java.security.UnrecoverableKeyException;
import java.security.cert.Certificate;
import java.security.cert.CertificateException;
import java.security.cert.CertificateFactory;
import java.util.Enumeration;
import java.util.Properties;
import java.util.logging.Level;
import java.util.logging.Logger;
import javax.net.ssl.HttpsURLConnection;
import javax.net.ssl.KeyManagerFactory;
import javax.net.ssl.SSLContext;
import javax.net.ssl.TrustManager;
import javax.net.ssl.TrustManagerFactory;
public class FursTestBaza {

    static String napaka="";
    public static void Test() 
    {
        try
        {
        String URL = "https://blagajne.fu.gov.si:9003/v1/cash_registers";
        System.out.println("Testiranje povezave na: " + URL);
        System.setProperty("javax.net.debug", "all");

            System.out.println("==================================");
            System.out.println("1");
            KeyStore p12 = KeyStore.getInstance("pkcs12");

            String geslo = "*******"; //private key password

            System.out.println("2");
            p12.load(new FileInputStream(new File("/oracle/orasw/Wallet/Certifikat/Furs/privateCert/FURS-AS_davcne_blagajne.p12")), geslo.toCharArray());
            Enumeration e = p12.aliases();
            String alias = (String) e.nextElement();
            System.out.println("alias certifikata: " + alias);
            //privatni ključ
            Key privateKey = p12.getKey(alias, geslo.toCharArray());

            System.out.println("3");
            //podpis
            Signature podpis = Signature.getInstance("SHA256WithRSA");
            podpis.initSign((PrivateKey) privateKey);

            System.out.println("4");
            //določimo svoj keystore in TLS1.2
            SSLContext sslcontext = SSLContext.getInstance("TLSv1.2");
            KeyManagerFactory kmf = KeyManagerFactory.getInstance("SunX509");
            KeyStore ks = KeyStore.getInstance("PKCS12");

            System.out.println("5");
            ks.load(new FileInputStream(new File("/oracle/orasw/Wallet/Certifikat/Furs/privateCert/FURS-AS_davcne_blagajne.p12")), geslo.toCharArray());
            kmf.init(ks, geslo.toCharArray());

            CertificateFactory cf = CertificateFactory.getInstance("X.509");
            Certificate ca = cf.generateCertificate(new FileInputStream(new File("/oracle/orasw/Wallet/Certifikat/Furs/privateCert/blagajne.fu.gov.si.cer")));

            System.out.println("6");
            KeyStore keyStore = KeyStore.getInstance(KeyStore.getDefaultType());
            keyStore.load(null, null);
            keyStore.setCertificateEntry("ca", ca);

            System.out.println("7");
            TrustManagerFactory tmf = TrustManagerFactory.getInstance(TrustManagerFactory.getDefaultAlgorithm());
            tmf.init(keyStore);

            System.out.println("8");
            TrustManager[] tm = tmf.getTrustManagers();
            sslcontext.init(kmf.getKeyManagers(), tm, null);

            System.out.println("8.1");

            HttpsURLConnection.setDefaultSSLSocketFactory(sslcontext.getSocketFactory());

            System.out.println("9");
            URL url = new URL(URL);
            HttpsURLConnection httpsURLConnection = (HttpsURLConnection) url.openConnection();

            System.out.println("10");
            httpsURLConnection.connect();
            System.out.println("Povezan na: " + URL + ", chiper:" + httpsURLConnection.getCipherSuite());
            System.out.println("Prekinjam povezavo...");
            httpsURLConnection.disconnect();
            System.out.println("Povezava zaprta.");
            }
            catch(Exception e)
             {
                e.printStackTrace();
             }

    }

}

然后使用PL / SQL执行了以下代码：

begin
dbms_java.set_output(500000);
p_test_furs;
end;

来自服务器A的连接正常，并且一切正常，但是问题出在服务器B上。

在服务器“ B”上，我遇到了异常（以上），如果比较javax.net.debug，我会注意到此异常：

两台服务器上的证书相同。

我的数据库上的Java版本是相同的：

服务器A：

select dbms_java.get_ojvm_property(propstring=>'java.version') from dual返回：1.6.0_191

服务器B：

select dbms_java.get_ojvm_property(propstring=>'java.version') from dual返回：1.6.0_191

有什么问题还是我可以在服务器/数据库端检查什么？

Oracle 11g，使用TLSv1.2与Java存储过程进行HTTPS连接

0 个答案: