java - 收到致命警报，bad_certificate

Question

我正在尝试与服务器建立 SSL 连接。我已经创建了一个 Truststore 并将服务器的证书以及我的证书作为受信任的条目导入到 Keystore 中。服务器人员还将我的证书导入到他们的 keystore 中。但是当我尝试连接时，出现此错误:

Received fatal alert: bad_certificate

在服务器上，他们收到此错误:

javax.net.ssl.SSLHandshakeException: null cert chain

我可能做错了什么？，我该如何解决这个错误？很长一段时间以来，我一直在与这个问题作斗争。

我的客户端代码

import java.io.*;
import java.net.*;
import java.security.*;


import java.util.Enumeration;
import javax.net.ssl.*;

public class SSLConnect {

public String MakeSSlCall(String meternum) {
    String message = "";
    FileWriter file = null;
    try {
        file = new FileWriter("C:\\SSLCERT\\ClientJavalog.txt");

    } catch (Exception ee) {
        message = ee.getMessage();

    }
    //writer = new BufferedWriter(file );
    try {
        file.write("KeyStore Generated\r\n");
        KeyStore keystore = KeyStore.getInstance("JKS");
        keystore.load(new FileInputStream("C:\\SSLCERT\\newclientkeystore"), "client".toCharArray());
        file.write("KeyStore Generated\r\n");
        Enumeration enumeration = keystore.aliases();
        while (enumeration.hasMoreElements()) {
            String alias = (String) enumeration.nextElement();
            file.write("alias name: " + alias + "\r\n");
            keystore.getCertificate(alias);
            file.write(keystore.getCertificate(alias).toString() + "\r\n");
        }
        TrustManagerFactory tmf =TrustManagerFactory.getInstance("SunX509");
        tmf.init(keystore);
        file.write("KeyStore Stored\r\n");
        SSLContext context = SSLContext.getInstance("SSL");
        TrustManager[] trustManagers = tmf.getTrustManagers();
        context.init(null, trustManagers, null);

        SSLSocketFactory f = context.getSocketFactory();
        file.write("About to Connect to Ontech\r\n");
        SSLSocket c = (SSLSocket) f.createSocket("192.168.1.16", 4447);
        file.write("Connection Established to 196.14.30.33 Port: 8462\r\n");
        file.write("About to Start Handshake\r\n");
        c.startHandshake();

        file.write("Handshake Established\r\n");
        file.flush();
        file.close();
        return "Connection Established";
    } catch (Exception e) {
        try {
            file.write("An Error Occured\r\n");
            file.write(e.getMessage() + "\r\n");
            file.flush();
            file.close();
        } catch (Exception eee) {
            message = eee.getMessage();
        }
        return "Connection Failed";
    }
}
}

用于创建我的信任库的 Keytool 命令

keytool -import -alias client -file client.cer -keystore MyKeystore -storepass mystore

keytool -import -alias server -file server.cer -keystore MyKeystore -storepass mystore

而且我还将这两个证书添加到我的 cacerts keystore

Answer 1

已经有一段时间了，但我不得不面对类似的问题。这是我的工作代码:

    Properties systemProps = System.getProperties();
    systemProps.put("javax.net.debug","ssl");
    systemProps.put("javax.net.ssl.trustStore","<path to trustore>");
    systemProps.put("javax.net.ssl.trustStorePassword","password");
    System.setProperties(systemProps);

    SSLContext sslcontext;
    KeyStore keyStore;
    final char[] JKS_PASSWORD = "password".toCharArray();
    final char[] KEY_PASSWORD = "password".toCharArray();

    try {
        final InputStream is = new FileInputStream("<path_to_keystore.pkcs12>");
        keyStore = KeyStore.getInstance("pkcs12");
        keyStore.load(is, JKS_PASSWORD);
        final KeyManagerFactory kmf = KeyManagerFactory.getInstance(KeyManagerFactory.getDefaultAlgorithm());
        kmf.init(keyStore, KEY_PASSWORD);

        sslcontext=SSLContext.getInstance("TLS");
        sslcontext.init(kmf.getKeyManagers(), null, new java.security.SecureRandom());
    } catch (Exception ex) {
        throw new IllegalStateException("Failure initializing default SSL context", ex);
    }

    SSLSocketFactory sslsocketfactory = sslcontext.getSocketFactory();  
    DataOutputStream os = null;

    try {
        SSLSocket sslsocket = (SSLSocket) sslsocketfactory.createSocket();
        sslsocket.connect(new InetSocketAddress(host, port), connectTimeout);
        sslsocket.startHandshake();

        os = new DataOutputStream(sslsocket.getOutputStream());
        // log.info("Sending echo packet");
        String toSend = "{\"echo\":\"echo\"}";
        os.writeBytes(toSend);
    } catch (UnknownHostException e) {
        // TODO Auto-generated catch block
        e.printStackTrace();
    } catch (IOException e) {
        // TODO Auto-generated catch block
        e.printStackTrace();
    } catch (InterruptedException e) {
        // TODO Auto-generated catch block
        e.printStackTrace();
    }