java - 使用 Apache CXF 时，org.bouncycaSTLe.asn1.x509.SubjectPublicKeyInfo 出现 NoClassDefFoundError

Question

尝试使用我的应用传输肥皂请求时，我收到 NoClassDefFoundError。

我读到，NoClassDefFoundError 通常可能是由初始化相关类的异常引起的，但我查看了日志，这是应用程序报告的唯一错误。

我已经能够记录类名:

val classPath = SubjectPublicKeyInfo::class.java.getResource(SubjectPublicKeyInfo::class.java.simpleName + ".class").toString()
log.info("Class: $classPath")

并验证了 bouncy caSTLe 的版本是我的 Apache CXF 版本所期望的版本:

implementation("org.apache.cxf:apache-cxf:3.3.5")
implementation("org.bouncycastle:bcprov-jdk15on:1.54")

这可能是不同类加载器的问题吗？或者 Tomcat 正在做......一些奇怪的事情？ Tomcat 版本是 7.0.76，Java 版本是 java 8。

异常(exception):

java.lang.NoClassDefFoundError: org/bouncycastle/asn1/x509/SubjectPublicKeyInfo
org.bouncycastle.jcajce.provider.asymmetric.util.BaseKeyFactorySpi.engineGeneratePublic(Unknown Source)
org.bouncycastle.jcajce.provider.asymmetric.rsa.KeyFactorySpi.engineGeneratePublic(Unknown Source)
java.security.KeyFactory.generatePublic(KeyFactory.java:334)
sun.security.x509.X509Key.buildX509Key(X509Key.java:223)
sun.security.x509.X509Key.parse(X509Key.java:170)
sun.security.x509.CertificateX509Key.<init>(CertificateX509Key.java:75)
sun.security.x509.X509CertInfo.parse(X509CertInfo.java:667)
sun.security.x509.X509CertInfo.<init>(X509CertInfo.java:167)
sun.security.x509.X509CertImpl.parse(X509CertImpl.java:1804)
sun.security.x509.X509CertImpl.<init>(X509CertImpl.java:195)
sun.security.provider.X509Factory.engineGenerateCertificate(X509Factory.java:102)
java.security.cert.CertificateFactory.generateCertificate(CertificateFactory.java:339)
sun.security.provider.JavaKeyStore.engineLoad(JavaKeyStore.java:716)
sun.security.provider.JavaKeyStore$JKS.engineLoad(JavaKeyStore.java:56)
sun.security.provider.KeyStoreDelegator.engineLoad(KeyStoreDelegator.java:224)
sun.security.provider.JavaKeyStore$DualFormatJKS.engineLoad(JavaKeyStore.java:70)
java.security.KeyStore.load(KeyStore.java:1445)
org.apache.wss4j.common.crypto.Merlin.load(Merlin.java:370)
org.apache.wss4j.common.crypto.Merlin.loadProperties(Merlin.java:228)
org.apache.wss4j.common.crypto.Merlin.<init>(Merlin.java:156)
org.apache.wss4j.common.crypto.CryptoFactory.getInstance(CryptoFactory.java:119)
org.apache.cxf.ws.security.wss4j.WSS4JUtils.loadCryptoFromPropertiesFile(WSS4JUtils.java:300)
org.apache.cxf.ws.security.wss4j.AbstractWSS4JInterceptor.loadCryptoFromPropertiesFile(AbstractWSS4JInterceptor.java:221)
org.apache.wss4j.dom.handler.WSHandler.loadCrypto(WSHandler.java:979)
org.apache.wss4j.dom.handler.WSHandler.loadSignatureCrypto(WSHandler.java:874)
org.apache.wss4j.dom.handler.WSHandler.doSenderAction(WSHandler.java:158)
org.apache.cxf.ws.security.wss4j.WSS4JOutInterceptor.access$100(WSS4JOutInterceptor.java:57)
org.apache.cxf.ws.security.wss4j.WSS4JOutInterceptor$WSS4JOutInterceptorInternal.handleMessageInternal(WSS4JOutInterceptor.java:275)
org.apache.cxf.ws.security.wss4j.WSS4JOutInterceptor$WSS4JOutInterceptorInternal.handleMessage(WSS4JOutInterceptor.java:147)
org.apache.cxf.ws.security.wss4j.WSS4JOutInterceptor$WSS4JOutInterceptorInternal.handleMessage(WSS4JOutInterceptor.java:132)
org.apache.cxf.phase.PhaseInterceptorChain.doIntercept(PhaseInterceptorChain.java:308)
org.apache.cxf.endpoint.ClientImpl.doInvoke(ClientImpl.java:530)
org.apache.cxf.endpoint.ClientImpl.invoke(ClientImpl.java:441)
org.apache.cxf.endpoint.ClientImpl.invoke(ClientImpl.java:356)
org.apache.cxf.endpoint.ClientImpl.invoke(ClientImpl.java:314)
org.apache.cxf.frontend.ClientProxy.invokeSync(ClientProxy.java:96)
org.apache.cxf.jaxws.JaxWsClientProxy.invoke(JaxWsClientProxy.java:140)
com.sun.proxy.$Proxy197.bulkRequestTransmitter(Unknown Source)
com.myapp.transmission.irsservices.CXFWebServiceHelper.callTransmitterWebService(CXFWebServiceHelper.java:135)
com.myapp.transmission.controllers.SubmitController.doGet(SubmitController.java:131)
javax.servlet.http.HttpServlet.service(HttpServlet.java:624)
javax.servlet.http.HttpServlet.service(HttpServlet.java:731)
org.apache.tomcat.websocket.server.WsFilter.doFilter(WsFilter.java:52)

我进一步研究后得到的一些附加信息:

JDK版本是:

openjdk version "1.9.0_191"
OpenJDK Runtime Environment (build 1.8.0_191-b12)

使用 Gradle 构建项目。我还发现，在本地运行它时，我遇到了一个安全异常，该异常似乎是在该过程的后期出现的。所以我认为该类在本地运行时已正确加载，但在远程服务器上则未正确加载。但是我怎样才能毫无异常(exception)地在本地和远程打印类(class)信息呢？

这是我的 build.gradle.kts 文件的完整依赖项部分(请注意，我已经删除了直接的充气城堡依赖项。无论哪种方式都会拉出相同的版本):

dependencies {
    implementation("org.mongodb:bson:3.6.4")
    implementation("org.apache.commons:commons-collections4:4.1")
    implementation("commons-fileupload:commons-fileupload:1.3.1")
    implementation("commons-io:commons-io:2.4")
    implementation("commons-lang:commons-lang:2.3")
    implementation("com.google.code.gson:gson:2.3.1")
    implementation("com.google.guava:guava:19.0")
    implementation("com.fasterxml.jackson.core:jackson-annotations:2.7.0")
    implementation("com.fasterxml.jackson.core:jackson-core:2.8.0.rc2")
    implementation("com.fasterxml.jackson.core:jackson-databind:2.8.0.rc2")
    implementation("ch.qos.logback:logback-classic:1.1.3")
    implementation("ch.qos.logback:logback-core:1.1.3")
    implementation("org.mongodb:mongodb-driver:3.6.4")
    implementation("org.mongodb:mongodb-driver-core:3.6.4")
    implementation("org.apache.pdfbox:pdfbox-app:2.0.17")
    implementation("org.slf4j:slf4j-api:1.7.7")
    implementation("org.apache.xmlbeans:xmlbeans:2.5.0")
    implementation("org.apache.cxf:apache-cxf:3.1.18")
    implementation("org.jetbrains:annotations:18.0.0")
    implementation("org.jetbrains.kotlin:kotlin-stdlib-jdk8")
    implementation("org.jetbrains.kotlin:kotlin-reflect")

    providedCompile("javax.servlet:javax.servlet-api:3.1.0")
    providedCompile("javax.mail:javax.mail-api:1.6.2")

    testImplementation("httpunit:httpunit:1.7")
}

Answer 1

看起来您的应用程序中的库与 Tomcat 加载的库之间存在依赖性冲突。请注意，Tomcat lib 文件夹中嵌入的所有库均优于应用程序中部署的库，因为 Tomcat 通过其通用类加载器提供它们。官方文档中的更多详细信息:https://tomcat.apache.org/tomcat-7.0-doc/class-loader-howto.html

很高兴为您提供帮助!