javax.net.ssl.SSLHandshakeException: "Remote host closed connection during handshake" 使用 HTMLUnit 打开 HTTPS 页面
javax.net.ssl.SSLHandshakeException: "Remote host closed connection during handshake" opening an HTTPS page with HTMLUnit
我正在尝试获取 HTTPS 页面 https://portal.mvp.bafin.de/database/AnteileInfo/ using HTML Unit 2.23 Java 7, Ubuntu Linux.
以下代码直到几天前才有效，但现在我收到了下面报告的异常。
问题应该与使用的安全证书类型有关，但使用 vm 选项执行代码没有任何变化 "-Dhttps.protocols=TLSv1.1,TLSv1.2" =40=] 当我阅读 here
代码：
import java.io.IOException;
import java.net.MalformedURLException;
import com.gargoylesoftware.htmlunit.FailingHttpStatusCodeException;
import com.gargoylesoftware.htmlunit.WebClient;
import com.gargoylesoftware.htmlunit.html.HtmlPage;
public class SSLTest {
public static void main(String[] args) throws FailingHttpStatusCodeException, MalformedURLException, IOException {
final String URL = "https://portal.mvp.bafin.de/database/AnteileInfo/";
final WebClient wc = new WebClient();
// the code should be ok without the following line,
// but even with it, it doesn't work
// wc.getOptions().setSSLClientProtocols(new String[]{"TLSv1.1","TLSv1.2"});
final HtmlPage mainPage = wc.getPage(URL);
}
}
异常如下：握手期间远程主机关闭连接
Exception in thread "main" javax.net.ssl.SSLHandshakeException: Remote host closed connection during handshake
at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:880)
at sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1262)
at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1289)
at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1273)
at org.apache.http.conn.ssl.SSLConnectionSocketFactory.createLayeredSocket(SSLConnectionSocketFactory.java:394)
at org.apache.http.conn.ssl.SSLConnectionSocketFactory.connectSocket(SSLConnectionSocketFactory.java:353)
at com.gargoylesoftware.htmlunit.httpclient.HtmlUnitSSLConnectionSocketFactory.connectSocket(HtmlUnitSSLConnectionSocketFactory.java:189)
at org.apache.http.impl.conn.DefaultHttpClientConnectionOperator.connect(DefaultHttpClientConnectionOperator.java:141)
at org.apache.http.impl.conn.PoolingHttpClientConnectionManager.connect(PoolingHttpClientConnectionManager.java:353)
at org.apache.http.impl.execchain.MainClientExec.establishRoute(MainClientExec.java:380)
at org.apache.http.impl.execchain.MainClientExec.execute(MainClientExec.java:236)
at org.apache.http.impl.execchain.ProtocolExec.execute(ProtocolExec.java:184)
at org.apache.http.impl.execchain.RetryExec.execute(RetryExec.java:88)
at org.apache.http.impl.execchain.RedirectExec.execute(RedirectExec.java:110)
at org.apache.http.impl.client.InternalHttpClient.doExecute(InternalHttpClient.java:184)
at org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:71)
at com.gargoylesoftware.htmlunit.HttpWebConnection.getResponse(HttpWebConnection.java:183)
at com.gargoylesoftware.htmlunit.WebClient.loadWebResponseFromWebConnection(WebClient.java:1358)
at com.gargoylesoftware.htmlunit.WebClient.loadWebResponse(WebClient.java:1275)
at com.gargoylesoftware.htmlunit.WebClient.getPage(WebClient.java:382)
at com.gargoylesoftware.htmlunit.WebClient.getPage(WebClient.java:304)
at com.gargoylesoftware.htmlunit.WebClient.getPage(WebClient.java:451)
at com.gargoylesoftware.htmlunit.WebClient.getPage(WebClient.java:436)
at fetchers.bafin.SSLTest.main(SSLTest.java:16)
Caused by: java.io.EOFException: SSL peer shut down incorrectly
at sun.security.ssl.InputRecord.read(InputRecord.java:352)
at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:861)
... 23 more
如果取消注释以下行
wc.getOptions().setSSLClientProtocols(new String[]{"TLSv1.1","TLSv1.2"});
我得到下面的异常，它给出了一个稍微不同的消息：致命警报：handshake_failure
Exception in thread "main" javax.net.ssl.SSLHandshakeException: Received fatal alert: handshake_failure
at sun.security.ssl.Alerts.getSSLException(Alerts.java:192)
at sun.security.ssl.Alerts.getSSLException(Alerts.java:154)
at sun.security.ssl.SSLSocketImpl.recvAlert(SSLSocketImpl.java:1911)
at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:1027)
[...]
有什么建议吗？
升级到Java8问题解决了，正如海辉在评论中所说的（但我在评论之前刚刚升级）。
我在阅读 Oracle's blog about HTTPS debugging 并复制 $JAVA_HOME/lib/security 中建议的 JCE 文件后升级到 Java 8（未更改）。
我看到 this site about SSL Site debugging 也无法使用 java 7 连接后，我决定升级到 java 8。
在调试过程中，我将其添加到 JRE 参数中
-Djavax.net.debug=all
看看发生了什么。
我正在尝试获取 HTTPS 页面 https://portal.mvp.bafin.de/database/AnteileInfo/ using HTML Unit 2.23 Java 7, Ubuntu Linux.
以下代码直到几天前才有效，但现在我收到了下面报告的异常。
问题应该与使用的安全证书类型有关，但使用 vm 选项执行代码没有任何变化 "-Dhttps.protocols=TLSv1.1,TLSv1.2" =40=] 当我阅读 here
代码：
import java.io.IOException;
import java.net.MalformedURLException;
import com.gargoylesoftware.htmlunit.FailingHttpStatusCodeException;
import com.gargoylesoftware.htmlunit.WebClient;
import com.gargoylesoftware.htmlunit.html.HtmlPage;
public class SSLTest {
public static void main(String[] args) throws FailingHttpStatusCodeException, MalformedURLException, IOException {
final String URL = "https://portal.mvp.bafin.de/database/AnteileInfo/";
final WebClient wc = new WebClient();
// the code should be ok without the following line,
// but even with it, it doesn't work
// wc.getOptions().setSSLClientProtocols(new String[]{"TLSv1.1","TLSv1.2"});
final HtmlPage mainPage = wc.getPage(URL);
}
}
异常如下：握手期间远程主机关闭连接
Exception in thread "main" javax.net.ssl.SSLHandshakeException: Remote host closed connection during handshake
at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:880)
at sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1262)
at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1289)
at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1273)
at org.apache.http.conn.ssl.SSLConnectionSocketFactory.createLayeredSocket(SSLConnectionSocketFactory.java:394)
at org.apache.http.conn.ssl.SSLConnectionSocketFactory.connectSocket(SSLConnectionSocketFactory.java:353)
at com.gargoylesoftware.htmlunit.httpclient.HtmlUnitSSLConnectionSocketFactory.connectSocket(HtmlUnitSSLConnectionSocketFactory.java:189)
at org.apache.http.impl.conn.DefaultHttpClientConnectionOperator.connect(DefaultHttpClientConnectionOperator.java:141)
at org.apache.http.impl.conn.PoolingHttpClientConnectionManager.connect(PoolingHttpClientConnectionManager.java:353)
at org.apache.http.impl.execchain.MainClientExec.establishRoute(MainClientExec.java:380)
at org.apache.http.impl.execchain.MainClientExec.execute(MainClientExec.java:236)
at org.apache.http.impl.execchain.ProtocolExec.execute(ProtocolExec.java:184)
at org.apache.http.impl.execchain.RetryExec.execute(RetryExec.java:88)
at org.apache.http.impl.execchain.RedirectExec.execute(RedirectExec.java:110)
at org.apache.http.impl.client.InternalHttpClient.doExecute(InternalHttpClient.java:184)
at org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:71)
at com.gargoylesoftware.htmlunit.HttpWebConnection.getResponse(HttpWebConnection.java:183)
at com.gargoylesoftware.htmlunit.WebClient.loadWebResponseFromWebConnection(WebClient.java:1358)
at com.gargoylesoftware.htmlunit.WebClient.loadWebResponse(WebClient.java:1275)
at com.gargoylesoftware.htmlunit.WebClient.getPage(WebClient.java:382)
at com.gargoylesoftware.htmlunit.WebClient.getPage(WebClient.java:304)
at com.gargoylesoftware.htmlunit.WebClient.getPage(WebClient.java:451)
at com.gargoylesoftware.htmlunit.WebClient.getPage(WebClient.java:436)
at fetchers.bafin.SSLTest.main(SSLTest.java:16)
Caused by: java.io.EOFException: SSL peer shut down incorrectly
at sun.security.ssl.InputRecord.read(InputRecord.java:352)
at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:861)
... 23 more
如果取消注释以下行
wc.getOptions().setSSLClientProtocols(new String[]{"TLSv1.1","TLSv1.2"});
我得到下面的异常，它给出了一个稍微不同的消息：致命警报：handshake_failure
Exception in thread "main" javax.net.ssl.SSLHandshakeException: Received fatal alert: handshake_failure
at sun.security.ssl.Alerts.getSSLException(Alerts.java:192)
at sun.security.ssl.Alerts.getSSLException(Alerts.java:154)
at sun.security.ssl.SSLSocketImpl.recvAlert(SSLSocketImpl.java:1911)
at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:1027)
[...]
有什么建议吗？
升级到Java8问题解决了，正如海辉在评论中所说的（但我在评论之前刚刚升级）。
我在阅读 Oracle's blog about HTTPS debugging 并复制 $JAVA_HOME/lib/security 中建议的 JCE 文件后升级到 Java 8（未更改）。
我看到 this site about SSL Site debugging 也无法使用 java 7 连接后，我决定升级到 java 8。
在调试过程中，我将其添加到 JRE 参数中
-Djavax.net.debug=all
看看发生了什么。