Question

我试图用Java构建一个独立的WebSocket客户端，该客户端连接到C＃中的WebSocket服务器。我正在使用为WebSocket服务器生成的自签名证书。我可以使用WSS在Chrome浏览器中连接到WebSocket服务器，而不会出现任何问题。尝试使用TooTallNate/Java-WebSocket库时，它不起作用。连接时会立即调用OnClose方法。

我在用于C＃服务器的* .pfx文件中有一个自签名证书，该证书已导入到我的受信任的根存储中。我使用keytool从该文件中创建了一个* .jks（我想我已经正确地做到了）。我正在使用由keytool在我的代码中生成的keystore.jks。

这是我的主要方法：

public static void main(String[] args) throws Exception {
    ChatClient chatclient = new ChatClient("wss://thomas.localnetwork.com:65120/wsserver?userId=Thomas", "Thomas", "1", "1", "L");
    // load up the key store
    String STORETYPE = "JKS";
    String KEYSTORE = "C:\\Users\\thomas\\Desktop\\keystore.jks";
    String STOREPASSWORD = "test12345";
    String KEYPASSWORD = "test";

    KeyStore ks = KeyStore.getInstance( STORETYPE );
    File kf = new File( KEYSTORE );
    ks.load( new FileInputStream( kf ), STOREPASSWORD.toCharArray() );

    KeyManagerFactory kmf = KeyManagerFactory.getInstance( "SunX509" );
    kmf.init( ks, KEYPASSWORD.toCharArray() );
    TrustManagerFactory tmf = TrustManagerFactory.getInstance( "SunX509" );
    tmf.init( ks );

    SSLContext sslContext = null;
    sslContext = SSLContext.getInstance( "TLS" );
    sslContext.init( kmf.getKeyManagers(), tmf.getTrustManagers(), null );
    // sslContext.init( null, null, null ); // will use java's default key and trust store which is sufficient unless you deal with self-signed certificates

    SSLSocketFactory factory = sslContext.getSocketFactory();// (SSLSocketFactory) SSLSocketFactory.getDefault();

    chatclient.setSocketFactory( factory );

    chatclient.connectBlocking();

    BufferedReader reader = new BufferedReader( new InputStreamReader( System.in ) );
    while ( true ) {
        String line = reader.readLine();
        if( line.equals( "close" ) ) {
            chatclient.closeBlocking();
        } else if ( line.equals( "open" ) ) {
            chatclient.reconnect();
        } else {
            ucm.send( line );
        }
    }
}

这是我收到的例外情况：

Closed connection on wss://laptop-thomas.compuflex1.com:65120/wsucm_deviceagent?userId=Thomas
javax.net.ssl.SSLException: java.net.SocketException: Connection reset
    at sun.security.ssl.Alerts.getSSLException(Alerts.java:208)
    at sun.security.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1949)
    at sun.security.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1906)
    at sun.security.ssl.SSLSocketImpl.handleException(SSLSocketImpl.java:1870)
    at sun.security.ssl.SSLSocketImpl.handleException(SSLSocketImpl.java:1815)
    at sun.security.ssl.AppInputStream.read(AppInputStream.java:116)
    at java.io.InputStream.read(InputStream.java:101)
    at org.java_websocket.client.WebSocketClient.run(WebSocketClient.java:424)
    at java.lang.Thread.run(Thread.java:748)
Caused by: java.net.SocketException: Connection reset
    at java.net.SocketInputStream.read(SocketInputStream.java:210)
    at java.net.SocketInputStream.read(SocketInputStream.java:141)
    at sun.security.ssl.InputRecord.readFully(InputRecord.java:465)
    at sun.security.ssl.InputRecord.read(InputRecord.java:503)
    at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:973)
    at sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1375)
    at sun.security.ssl.SSLSocketImpl.readDataRecord(SSLSocketImpl.java:928)
    at sun.security.ssl.AppInputStream.read(AppInputStream.java:105)
    ... 3 more

有什么办法可以获取有关握手的更多详细信息或实际问题是什么？异常堆栈跟踪似乎根本没有帮助。

Answer 1

我的问题是我的本地防火墙引起了问题。我还发现我可以将证书安装到Java的受信任的根存储中。

请注意，每个Java版本（JDK和JRE）都有自己的“证书”文件。确保为您的开发或运行时环境安装正确的版本。我之所以把头撞在墙上是因为直到我意识到这一点，它才在IntelliJ中起作用。

Install the certificate to the JVM trusted root store
Check if it's been installed correctly
删除代码中的密钥库部分

将证书安装到正确的位置后，这是我的代码更改。

public static void main(String[] args) throws Exception {
    ChatClient chatclient = new ChatClient("wss://thomas.localnetwork.com:65120/wsserver?userId=Thomas", "Thomas", "1", "1", "L");

    chatclient.connectBlocking();

    BufferedReader reader = new BufferedReader( new InputStreamReader( System.in ) );
    while ( true ) {
        String line = reader.readLine();
        if( line.equals( "close" ) ) {
            chatclient.closeBlocking();
        } else if ( line.equals( "open" ) ) {
            chatclient.reconnect();
        } else {
            chatclient.send( line );
        }
    }
}

WebSocket客户端在连接时关闭

1 个答案: