java - TlsPremasterSecret SecretKeyFactory 不可用

Question

我在与 https URL 握手期间遇到此错误。如何添加特定的 SecretKeyFactory？该错误必须与此特定 URL 的 https 设置有关，因为对于其他类似的 URL，我没有收到该错误。我正在使用 JDK 1.8.0_162

javax.net.ssl.SSLHandshakeException: Could not generate secret
        at sun.security.ssl.DHCrypt.getAgreedSecret(DHCrypt.java:219)
        at sun.security.ssl.ClientHandshaker.serverHelloDone(ClientHandshaker.java:1106)
        at sun.security.ssl.ClientHandshaker.processMessage(ClientHandshaker.java:348)
        at sun.security.ssl.Handshaker.processLoop(Handshaker.java:1052)
        at sun.security.ssl.Handshaker.process_record(Handshaker.java:987)
        at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:1072)
        at sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1385)
        at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1413)
        at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1397)
        at sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:559)
        at sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:185)
        at sun.net.www.protocol.https.HttpsURLConnectionImpl.connect(HttpsURLConnectionImpl.java:162)
        at de.martinm.tools.EBICS.EBICSKernel.fetchHPB(EBICSKernel.java:918)
        at de.martinm.tools.EBICS.EBICSKernel.doFetch(EBICSKernel.java:675)
        at de.martinm.tools.EBICS.EBICSKernel.checkBankKeys(EBICSKernel.java:2013)
        at de.martinm.tools.EBICS.MyIFPEBICS.process(MyIFPEBICS.java:126)
        at de.martinm.tools.EBICS.MyIFPEBICS.main(MyIFPEBICS.java:144)
Caused by: java.security.NoSuchAlgorithmException: TlsPremasterSecret SecretKeyFactory not available
        at javax.crypto.SecretKeyFactory.<init>(SecretKeyFactory.java:122)
        at javax.crypto.SecretKeyFactory.getInstance(SecretKeyFactory.java:160)
        at iaik.security.dh.DHKeyAgreement.engineGenerateSecret(Unknown Source)
        at javax.crypto.KeyAgreement.generateSecret(KeyAgreement.java:648)
        at sun.security.ssl.DHCrypt.getAgreedSecret(DHCrypt.java:217)
        ... 16 more
Exception in thread "main" java.lang.NullPointerException
        at de.martinm.tools.EBICS.EBICSKernel.doFetch(EBICSKernel.java:679)
        at de.martinm.tools.EBICS.EBICSKernel.checkBankKeys(EBICSKernel.java:2013)
        at de.martinm.tools.EBICS.MyIFPEBICS.process(MyIFPEBICS.java:126)
        at de.martinm.tools.EBICS.MyIFPEBICS.main(MyIFPEBICS.java:144)

Answer 1

异常的原因是我必须在我的代码中添加 IAIK 提供程序

IAIK.addAsProvider(false);

此提供商后来混淆了 https 通信。添加后

Security.removeProvider("IAIK");

在使用 IAIK 的代码末尾添加异常不再发生