Статус: Активный участник
Группы: Участники
Зарегистрирован: 01.08.2019(UTC) Сообщений: 43
Сказал(а) «Спасибо»: 2 раз
|
Здравствуйте, да, теперь в проект добавил в самом начале следующее: Код:
System.setProperty("tls_prohibit_disabled_validation", "false");
System.setProperty("default_crl_location", "C:\\Work\\Work\\certs");
System.setProperty("default_crl_revocation_offline", "true");
System.setProperty("default_crl_revocation_online", "false");
System.setProperty("default_enable_revocation","false");
опция "tls_prohibit_disabled_validation" срабатывает, подскажите какие опции в настройке jvm и как нужно изменить что-бы отключить проверку сертификатов. На данном этапе программы пытается проверить сертификаты по сети. Комбинирование настроек в программе "TLSSettings." и "System.setProperty(" не помогло. Лог программы следующий: Код:
C:\Work\Work\jcp_GKH\dist>"C:\Program Files\Java\jdk1.8.0_221\jre\bin\java.exe" -jar jcp_GKH.jar
рту 28, 2019 8:11:14 AM ru.CryptoPro.JCP.tools.Starter check
INFO: Loading JCP 2.0.40424
рту 28, 2019 8:11:14 AM ru.CryptoPro.JCP.tools.Starter check
INFO: JCP loaded.
рту 28, 2019 8:11:14 AM ru.CryptoPro.ssl.cl_38 <init>
INFO: %% adding as private keys %%
рту 28, 2019 8:11:15 AM ru.CryptoPro.ssl.SSLContextImpl engineInit
INFO: SSLContextImpl init.
рту 28, 2019 8:11:15 AM ru.CryptoPro.ssl.SSLContextImpl engineInit
INFO: trigger seeding of SecureRandom
рту 28, 2019 8:11:15 AM ru.CryptoPro.ssl.SSLContextImpl engineInit
INFO: done seeding SecureRandom
рту 28, 2019 8:11:15 AM ru.CryptoPro.ssl.SSLContextImpl engineInit
INFO: SSLContextImpl initialized.
рту 28, 2019 8:11:15 AM ru.CryptoPro.ssl.SSLContextImpl$DefaultSSLContext l
INFO: keyStore is :
рту 28, 2019 8:11:15 AM ru.CryptoPro.ssl.SSLContextImpl$DefaultSSLContext l
INFO: keyStore type is :
рту 28, 2019 8:11:15 AM ru.CryptoPro.ssl.SSLContextImpl$DefaultSSLContext l
INFO: keyStore provider is :
рту 28, 2019 8:11:15 AM ru.CryptoPro.ssl.SSLContextImpl$DefaultSSLContext l
INFO: init keystore
рту 28, 2019 8:11:15 AM ru.CryptoPro.ssl.SSLContextImpl$DefaultSSLContext l
INFO: init keymanager of type GostX509
рту 28, 2019 8:11:15 AM ru.CryptoPro.ssl.cl_38 <init>
INFO: %% adding as private keys %%
рту 28, 2019 8:11:15 AM ru.CryptoPro.ssl.cl_38 <init>
WARNING: %% No appropriate keys for handshake
PATH: c:\Work\Work\HDImageStore\
рту 28, 2019 8:11:15 AM ru.CryptoPro.ssl.TrustManagerFactoryImpl a
INFO: trustStore is : No File Available, using empty keystore.
рту 28, 2019 8:11:15 AM ru.CryptoPro.ssl.TrustManagerFactoryImpl a
INFO: trustStore type is : CertStore
рту 28, 2019 8:11:15 AM ru.CryptoPro.ssl.TrustManagerFactoryImpl a
INFO: trustStore provider is :
рту 28, 2019 8:11:15 AM ru.CryptoPro.ssl.TrustManagerFactoryImpl a
INFO: init truststore
рту 28, 2019 8:11:15 AM ru.CryptoPro.ssl.SSLContextImpl engineInit
INFO: SSLContextImpl init.
рту 28, 2019 8:11:15 AM ru.CryptoPro.ssl.SSLContextImpl engineInit
INFO: trigger seeding of SecureRandom
рту 28, 2019 8:11:15 AM ru.CryptoPro.ssl.SSLContextImpl engineInit
INFO: done seeding SecureRandom
рту 28, 2019 8:11:15 AM ru.CryptoPro.ssl.SSLContextImpl engineInit
INFO: SSLContextImpl initialized.
рту 28, 2019 8:11:15 AM ru.CryptoPro.ssl.SSLContextImpl$DefaultSSLContext <init>
INFO: DefaultSSLContext initialized.
рту 28, 2019 8:11:16 AM ru.CryptoPro.ssl.SSLSocketImpl a
WARNING: main, handling exception: javax.net.ssl.SSLHandshakeException: ru.CryptoPro.ssl.pc_4.cl_5: PKIX path building failed: ru.CryptoPro.reprov.certpath.JCPCertPathBuilderException: unable to find
valid certification path to requested target
рту 28, 2019 8:11:16 AM jcp_gkh.Jcp_GKH start
SEVERE: null
javax.net.ssl.SSLHandshakeException: ru.CryptoPro.ssl.pc_4.cl_5: PKIX path building failed: ru.CryptoPro.reprov.certpath.JCPCertPathBuilderException: unable to find valid certification path to request
ed target
at ru.CryptoPro.ssl.cl_2.a(Unknown Source)
at ru.CryptoPro.ssl.SSLSocketImpl.a(Unknown Source)
at ru.CryptoPro.ssl.cl_58.a(Unknown Source)
at ru.CryptoPro.ssl.cl_58.a(Unknown Source)
at ru.CryptoPro.ssl.cl_15.a(Unknown Source)
at ru.CryptoPro.ssl.cl_15.a(Unknown Source)
at ru.CryptoPro.ssl.cl_58.w(Unknown Source)
at ru.CryptoPro.ssl.cl_58.a(Unknown Source)
at ru.CryptoPro.ssl.SSLSocketImpl.a(Unknown Source)
at ru.CryptoPro.ssl.SSLSocketImpl.n(Unknown Source)
at ru.CryptoPro.ssl.SSLSocketImpl.b(Unknown Source)
at ru.CryptoPro.ssl.SSLSocketImpl.startHandshake(Unknown Source)
at sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:559)
at sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:185)
at sun.net.www.protocol.https.HttpsURLConnectionImpl.connect(HttpsURLConnectionImpl.java:167)
at jcp_gkh.Jcp_GKH.start(Jcp_GKH.java:113)
at jcp_gkh.Jcp_GKH.main(Jcp_GKH.java:54)
Caused by: ru.CryptoPro.ssl.pc_4.cl_5: PKIX path building failed: ru.CryptoPro.reprov.certpath.JCPCertPathBuilderException: unable to find valid certification path to requested target
at ru.CryptoPro.ssl.pc_4.cl_2.a(Unknown Source)
at ru.CryptoPro.ssl.pc_4.cl_2.a(Unknown Source)
at ru.CryptoPro.ssl.pc_4.cl_4.b(Unknown Source)
at ru.CryptoPro.ssl.cl_121.a(Unknown Source)
at ru.CryptoPro.ssl.cl_121.a(Unknown Source)
at ru.CryptoPro.ssl.cl_121.checkServerTrusted(Unknown Source)
... 13 more
Caused by: ru.CryptoPro.reprov.certpath.JCPCertPathBuilderException: unable to find valid certification path to requested target
at ru.CryptoPro.reprov.certpath.SunCertPathBuilder.engineBuild(Unknown Source)
at ru.CryptoPro.reprov.CPCertPathBuilder.engineBuild(Unknown Source)
at java.security.cert.CertPathBuilder.build(CertPathBuilder.java:280)
... 19 more
C:\Work\Work\jcp_GKH\dist>"C:\Program Files\Java\jdk1.8.0_221\jre\bin\java.exe" -jar jcp_GKH.jar
Перечисление опций в строке запуска не помогло. Спасибо.
|