java - 非法参数异常 : Unsupported ciphersuite

Question

对于在 WAS 8.5 中运行的应用程序客户端，我们有代码创建套接字失败并出现以下错误。

    SSLSocketFactory factory = (SSLSocketFactory) SSLSocketFactory.getDefault();
    SSLSocket socket = (SSLSocket) factory.createSocket();
    String pickedCipher[] = {"TLS_DHE-RSA-AES128-SHA256"};
    socket.setEnabledCipherSuites(pickedCipher);
    String[] protocols = socket.getEnabledProtocols();

日志:

java.lang.IllegalArgumentException: Unsupported ciphersuite SSL_DHE-RSA-AES128-SHA256 at com.ibm.jsse2.r.a(r.java:245) at com.ibm.jsse2.s.(s.java:51) at com.ibm.jsse2.SSLSocketImpl.setEnabledCipherSuites(SSLSocketImpl.java:186)

有什么想法吗？

Answer 1

这是 Java 支持的密码套件列表 - http://docs.oracle.com/javase/7/docs/technotes/guides/security/StandardNames.html

TLS_DHE_RSA_WITH_AES_128_CBC_SHA

TLS_DHE_RSA_WITH_AES_128_CBC_SHA256

TLS_DHE_RSA_WITH_AES_128_GCM_SHA256