WSO2 API 经理收到致命警报：handshake_failure

Question

使用 WSO2 API 管理器 (V1.10)，我发布了一个 API 并将 SSL 证书导入到 client-truststore.jks.但是当我调用这个 API 时，我收到了这个错误：

2016-07-11 11:42:11,296 [-] [HTTPS-Sender I/O dispatcher-7] ERROR TargetHandler I/O error: Received fatal alert: handshake_failure
javax.net.ssl.SSLException: Received fatal alert: handshake_failure
at sun.security.ssl.Alerts.getSSLException(Alerts.java:208)
at sun.security.ssl.SSLEngineImpl.fatal(SSLEngineImpl.java:1650)
at sun.security.ssl.SSLEngineImpl.fatal(SSLEngineImpl.java:1618)
at sun.security.ssl.SSLEngineImpl.recvAlert(SSLEngineImpl.java:1787)
at sun.security.ssl.SSLEngineImpl.readRecord(SSLEngineImpl.java:1071)
at sun.security.ssl.SSLEngineImpl.readNetRecord(SSLEngineImpl.java:893)
at sun.security.ssl.SSLEngineImpl.unwrap(SSLEngineImpl.java:767)
at javax.net.ssl.SSLEngine.unwrap(SSLEngine.java:624)
at org.apache.http.nio.reactor.ssl.SSLIOSession.doUnwrap(SSLIOSession.java:228)
at org.apache.http.nio.reactor.ssl.SSLIOSession.doHandshake(SSLIOSession.java:263)
at org.apache.http.nio.reactor.ssl.SSLIOSession.isAppInputReady(SSLIOSession.java:391)
at org.apache.http.impl.nio.reactor.AbstractIODispatch.inputReady(AbstractIODispatch.java:119)
at org.apache.http.impl.nio.reactor.BaseIOReactor.readable(BaseIOReactor.java:159)
at org.apache.http.impl.nio.reactor.AbstractIOReactor.processEvent(AbstractIOReactor.java:338)
at org.apache.http.impl.nio.reactor.AbstractIOReactor.processEvents(AbstractIOReactor.java:316)
at org.apache.http.impl.nio.reactor.AbstractIOReactor.execute(AbstractIOReactor.java:277)
at org.apache.http.impl.nio.reactor.BaseIOReactor.execute(BaseIOReactor.java:105)
at org.apache.http.impl.nio.reactor.AbstractMultiworkerIOReactor$Worker.run(AbstractMultiworkerIOReactor.java:586)
at java.lang.Thread.run(Thread.java:745)

Answer 1

我怀疑您的 API 调用客户端程序没有 API 服务器的证书。（通常您将证书导入 JRE 的 jacerts 或其他信任库）

But When I call this API, I 'm receving this error:

当您调用此 API 时，此 API 调用客户端程序（例如 Java）是否也导入了此 WSO2 服务器的证书？这可能会解决您的问题。

Answer 2

根据错误日志，这种情况发生在 http 发件人中。即当 api 管理器调用后端时。如果您的后端是 "HTTPS"，您需要将其 public 证书导入 APIM

的受托方

Answer 3

在 Java 1.7 中遇到了同样的问题。 Java 1.8 解决了我的问题

WSO2 API 经理收到致命警报：handshake_failure

WSO2 API Manager Received fatal alert: handshake_failure

wso2

wso2-am

api-manager