javax.net.ssl.SSLHandshakeException: Remote host closed connection during handshake
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:808)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1112)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1139)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1123)
at org.mortbay.jetty.security.SslSocketConnector$SslConnection.run(SslSocketConnector.java:631)
at org.mortbay.thread.BoundedThreadPool$PoolThread.run(BoundedThreadPool.java:451)
Caused by: java.io.EOFException: SSL peer shut down incorrectly
at com.sun.net.ssl.internal.ssl.InputRecord.read(InputRecord.java:333)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:789)
更新：
我启用了SSL调试选项,并且在ServerHelloDone消息之后立即得到这个异常.这是服务器发送证书的消息,以及相关客户端证书的请求.我不知道在第一次阅读时发生了什么.任何帮助深深的赞赏.
*** ClientHello,TLSv1 **** %% Created: [Session-1,TLS_RSA_WITH_AES_128_CBC_SHA] *** ServerHello,TLSv1 *** Certificate chain *** *** CertificateRequest Cert Types: RSA,DSS Cert Authorities: *** ServerHelloDone WRITE: TLSv1 Handshake,length = 703 received EOFException: error handling exception: javax.net.ssl.SSLHandshakeException: Remote host closed connection during handshake
更新：
更新JDK到最新版本,23并尝试使用这两个属性启用/禁用.仍然得到同样的行为.
更多信息：
所有浏览器都启用了TLSv1和SSLv3.没有启用客户端认证,通信正常发生.使用客户端认证,始终我们在第一次握手时会收到异常,并且下一个正在完成并且无异常执行.在服务器端使用jetty版本6.1.14
解决方法
http://www.oracle.com/technetwork/java/javase/documentation/tlsreadme2-176330.html
In SSL/TLS,renegotiations can be initiated by either side. Like the Phase 1 fix,applications communicating with an un-upgraded peer in Interoperable mode and that attempt to initiate renegotiation (via
SSLSocket.startHandshake()orSSLEngine.beginHandshake()) will receive aSSLHandshakeException(IOException) and the connection will be shutdown (handshake_failure). Applications that receive a renegotiation request from a non-upgraded peer will respond according to the type of connection in place:
- TLSv1: A warning
Alertmessage of type “no_renegotiation(100)” will be sent to the peer and the connection will remain open. Older versions of SunJSSE will shutdown the connection when a “no_renegotiation” Alert is received.- SSLv3: The application will receive a
SSLHandshakeException,and the connection will be closed (handshake_failure). (“no_renegotiation” is not defined in the SSLv3 spec.)To set these modes,two system properties are used:
sun.security.ssl.allowUnsafeRenegotiation– Introduced in Phase 1,this controls whether legacy (unsafe) renegotiations are permitted.sun.security.ssl.allowLegacyHelloMessages– Introduced in Phase 2,this allows the peer to handshake without requiring the proper RFC 5746 messages.
如果仍然没有帮助,您可以尝试打开SSL dedug,并看看握手.-Djavax.net.debug =所有
