java - Spring Cloud Vault错误: nested exception is javax.net.ssl.SSLHandshakeException:扩展名(5)不应出现在certificate_request中

Question

我正在尝试在 Spring Boot 项目上使用 Spring Cloud Vault 来使用 HashiCorp Vault。我将 bootstrap.yml 文件配置为使用应用程序角色和 secret ID 来获取密码

bootstrap.yml

spring:
  application:
    name: pres
  cloud:
    vault:
      authentication: APPROLE
      app-role:
        role-id: ${role-id}
        secret-id: ${secret-id}
        role: pres-read
        app-role-path: approle
      uri: https://hostname:8200
      kv:
        enabled: true
        backend: secret
        application-name: pres
  profiles:
    include: dev

在启动过程中出现以下异常

org.springframework.vault.authentication.VaultLoginException: Cannot login using org.springframework.web.client.ResourceAccessException: I/O error on POST request for "https://hostname:8200/v1/auth/approle/login": extension (5) should not be presented in certificate_request; nested exception is javax.net.ssl.SSLHandshakeException: extension (5) should not be presented in certificate_request

我正在使用 spring-cloud-starter-vault-config 依赖项来访问保管库

 <dependency>
            <groupId>org.springframework.cloud</groupId>
            <artifactId>spring-cloud-starter-vault-config</artifactId>
            <version> 2.2.2.RELEASE</version>
 </dependency>

Answer 1

好的。看起来这是一个Java TLS Bug ，希望java团队能够在Java 11.0.8中修复这个问题。

更新:该问题已在最新的 Java 11 版本中修复