java - 发布消息时得到 "Unrecognized Windows Sockets error: 0: recv failed"

Question

我正在尝试通过 HttpClient 将 HTTP POST 发布到启用了客户端身份验证的服务器。这是我的代码

public class Send2Remote {

private static String sslMode = null;
private static String clientKeyStore = null;
private static String clientStoreType = null;
private static String clientStorePW = null;

private static String trustKeyStore = null;
private static String trustStoreType = null;
private static String trustStorePW = null;

public Send2Remote(String sslmode, String clientKS, String clientST, String clientTPW, 
        String trustKS, String trustST, String trustSPW) {
    sslMode = sslmode;
    clientKeyStore = clientKS;
    clientStoreType = clientST;
    clientStorePW = clientTPW;

    trustKeyStore = trustKS;
    trustStoreType = trustST;
    trustStorePW = trustSPW;
}

private final class X509HostnameVerifierImplementation implements X509HostnameVerifier {
    @Override
    public void verify(String host, SSLSocket ssl) throws IOException {
    }

    @Override
    public void verify(String host, X509Certificate cert) throws SSLException {
    }

    @Override
    public void verify(String host, String[] cns, String[] subjectAlts) throws SSLException {
    }

    @Override
    public boolean verify(String s, SSLSession sslSession) {
        return true;
    }
}

public String post(String uRL, List<NameValuePair> formparams) {        
    SSLContext sslContext = null;
    KeyManagerFactory kmf = null;
    TrustManagerFactory tmf = null;
    KeyStore ks = null;
    KeyStore tks = null;
    try {           
        sslContext = SSLContext.getInstance(sslMode);
        kmf = KeyManagerFactory.getInstance(KeyManagerFactory.getDefaultAlgorithm());
        tmf = TrustManagerFactory.getInstance(KeyManagerFactory.getDefaultAlgorithm());

        ks = KeyStore.getInstance(clientStoreType);
        tks = KeyStore.getInstance(trustStoreType);

        ks.load(new FileInputStream(clientKeyStore), clientStorePW.toCharArray());
        tks.load(new FileInputStream(trustKeyStore), trustStorePW.toCharArray());

        kmf.init(ks, clientStorePW.toCharArray());
        tmf.init(tks);

        sslContext.init(kmf.getKeyManagers(), tmf.getTrustManagers(), null);

    } catch (NoSuchAlgorithmException | CertificateException | IOException | KeyStoreException | UnrecoverableKeyException | KeyManagementException e1) {
        Log4j.log.error("Error occurred: " + e1.getClass() + ":" + e1.getMessage() + ", Full Stacktrace: " + new Gson().toJson(e1.getStackTrace()));
        return null;
    }

    SSLConnectionSocketFactory sslsf = new SSLConnectionSocketFactory(
            sslContext, new X509HostnameVerifierImplementation());

    Registry<ConnectionSocketFactory> socketFactoryRegistry = RegistryBuilder
            .<ConnectionSocketFactory> create().register("https", sslsf)
            .build();

    PoolingHttpClientConnectionManager cm = new PoolingHttpClientConnectionManager(
            socketFactoryRegistry);
    CloseableHttpClient httpclient = HttpClients.custom()
            .setConnectionManager(cm).build();

    HttpPost httppost = new HttpPost(uRL);

    UrlEncodedFormEntity uefEntity;
    String returnCode = null;
    try {
        uefEntity = new UrlEncodedFormEntity(formparams, "UTF-8");
        httppost.setEntity(uefEntity);

        CloseableHttpResponse response = httpclient.execute(httppost);
        try {
            HttpEntity entity = response.getEntity();
            if (entity != null) {
                returnCode = EntityUtils.toString(entity, "UTF-8");
            }
        } finally {
            response.close();
        }
    } catch (ClientProtocolException e) {
        Log4j.log.error("Error occurred: " + e.getClass() + ":" + e.getMessage() + ", Full Stacktrace: " + new Gson().toJson(e.getStackTrace()));
        return null;
    } catch (UnsupportedEncodingException e1) {
        Log4j.log.error("Error occurred: " + e1.getClass() + ":" + e1.getMessage() + ", Full Stacktrace: " + new Gson().toJson(e1.getStackTrace()));
        return null;
    } catch (IOException e) {
        Log4j.log.error("Error occurred: " + e.getClass() + ":" + e.getMessage() + ", Full Stacktrace: " + new Gson().toJson(e.getStackTrace()));
        return null;
    } finally {
        try {
            httpclient.close();
        } catch (IOException e) {
            e.printStackTrace();
        } finally {
            close(httpclient);
        }
    }
    return returnCode;
}

public void close(Closeable io) {
    if (io != null) {
        try {
            io.close();
        } catch (IOException ignore) {
        }
    }
}

} 

当我用我自己的 keystore 执行它时，我在发布消息时遇到异常

class javax.net.ssl.SSLHandshakeException:java.net.SocketException: Unrecognized Windows Sockets error: 0: recv failed

服务器管理员给了我他的部分日志

[2017/8/21   20:10:16:477 CST] 000000f7 SystemOut     O WebContainer : 20, WRITE: TLSv1.2 Handshake, length = 96
[2017/8/21   20:10:16:477 CST] 000000f7 SystemOut     O WebContainer : 20, waiting for close_notify or alert: state 1
[2017/8/21   20:10:16:477 CST] 000000f7 SystemOut     O WebContainer : 20, Exception while waiting for close java.net.SocketException: Unrecognized Windows Sockets error: 0: recv failed
[2017/8/21   20:10:16:477 CST] 000000f7 SystemOut     O %% Invalidated:  [Session-18, SSL_ECDHE_RSA_WITH_AES_256_CBC_SHA384]
[2017/8/21   20:10:16:477 CST] 000000f7 SystemOut     O WebContainer : 20, SEND TLSv1.2 ALERT:  fatal, description = handshake_failure
[2017/8/21   20:10:16:477 CST] 000000f7 SystemOut     O WebContainer : 20, WRITE: TLSv1.2 Alert, length = 80
[2017/8/20   20:10:16:477 CST] 000000f7 SystemOut     O WebContainer : 20, Exception sending alert: java.net.SocketException: Unrecognized Windows Sockets error: 0: socket write error
[2017/8/20   20:10:16:477 CST] 000000f7 SystemOut     O WebContainer : 20, called closeSocket()
[2017/8/20   20:10:16:477 CST] 000000f7 SystemOut     O WebContainer : 20, handling exception: javax.net.ssl.SSLHandshakeException: java.net.SocketException: Unrecognized Windows Sockets error: 0: recv failed

服务器和我把对方的证书添加到自己的信任 keystore 中，所以应该不是互相信任的问题。但我找不到其他线程也可以解决这个问题。

Answer 1

这可能会导致问题:

服务器同时启用了 IPv4 和 IPv6？

原因:

当在 Windows 服务器上同时启用 IPv4 和 IPv6 时，Java 虚拟机 (JVM) 可能会在操作系统级别打开或关闭套接字时出现问题。

可能的修复:

如果可能，JVM 将需要在 IPv4 上运行。为此，请添加以下设置JVM 选项:
-Djava.net.preferIPv4Stack=true