Здравствуйте, настраиваю на Spring Boot + JCP (jcp-2.0.40035)
Выставил согласно документации настроки, но пока что у меня не получается настроить односторонюю аутентификацию. Я точно что-то упустил :) Можете подсказать, что не так?
Ошибка:
INFO [main] [o.a.c.h.Http11NioProtocol] [] [] - Initializing ProtocolHandler ["https-jsse-nio-8443"]
INFO [main] [o.a.c.h.Http11NioProtocol] [] [] - Starting ProtocolHandler ["https-jsse-nio-8443"]
INFO [main] [r.C.ssl.SSLLogger] [] [] - SSLContextImpl init.
INFO [main] [r.C.ssl.SSLLogger] [] [] - trustStore is : No File Available, using empty keystore.
INFO [main] [r.C.ssl.SSLLogger] [] [] - trustStore type is : HDImageStore
INFO [main] [r.C.ssl.SSLLogger] [] [] - trustStore provider is :
INFO [main] [r.C.ssl.SSLLogger] [] [] - init truststore
INFO [main] [r.C.J.t.JCPLogger] [] [] - Loading JCP 2.0.40035
INFO [main] [r.C.J.t.JCPLogger] [] [] - JCP loaded.
INFO [main] [r.C.ssl.SSLLogger] [] [] - trigger seeding of SecureRandom
INFO [main] [r.C.ssl.SSLLogger] [] [] - done seeding SecureRandom
INFO [main] [r.C.ssl.SSLLogger] [] [] - SSLContextImpl initialized.
INFO [main] [r.C.ssl.SSLLogger] [] [] - %% adding as private keys %%
INFO [main] [r.C.ssl.SSLLogger] [] [] - %% adding as private keys %%
INFO [main] [r.C.ssl.SSLLogger] [] [] - trustStore is : No File Available, using empty keystore.
INFO [main] [r.C.ssl.SSLLogger] [] [] - trustStore type is : HDImageStore
INFO [main] [r.C.ssl.SSLLogger] [] [] - trustStore provider is :
INFO [main] [r.C.ssl.SSLLogger] [] [] - init truststore
INFO [main] [o.a.t.u.n.NioSelectorPool] [] [] - Using a shared selector for servlet write/read
INFO [main] [o.s.b.c.e.t.TomcatEmbeddedServletContainer] [] [] - Tomcat started on port(s): 8443 (https)
INFO [main] [r.r.e.d.f.Application] [] [] - Started Application in 34.473 seconds (JVM running for 35.517)
.....
затем делаю запрос: csptest -tlsc -port 8443 -v -file index.jsp -nocheck
020-07-15 12:51:35,526 ERROR [https-jsse-nio-8443-exec-1] [o.a.t.u.n.NioEndpoint] [] [] -
java.lang.IllegalArgumentException: Unsupported ciphersuite TLS_CIPHER_2012
at sun.security.ssl.CipherSuite.valueOf(CipherSuite.java:228)
at sun.security.ssl.CipherSuiteList.<init>(CipherSuiteList.java:79)
at sun.security.ssl.SSLEngineImpl.setEnabledCipherSuites(SSLEngineImpl.java:2047)
at org.apache.tomcat.util.net.AbstractJsseEndpoint.createSSLEngine(AbstractJsseEndpoint.java:177)
at org.apache.tomcat.util.net.SecureNioChannel.processSNI(SecureNioChannel.java:331)
at org.apache.tomcat.util.net.SecureNioChannel.handshake(SecureNioChannel.java:175)
at org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.doRun(NioEndpoint.java:1436)
at org.apache.tomcat.util.net.SocketProcessorBase.run(SocketProcessorBase.java:49)
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
at org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61)
at java.lang.Thread.run(Thread.java:748)
Выставленные настройки для Tomcat(Apache Tomcat/8.5.27):
Код:public void customizeTomcat(TomcatEmbeddedServletContainerFactory factory) {
factory.addConnectorCustomizers(new TomcatConnectorCustomizer() {
@Override
public void customize(Connector connector) {
connector.setScheme("https");
connector.setPort(8443);
connector.setSecure(true);
connector.setEnableLookups(false);
Http11NioProtocol protocol = (Http11NioProtocol) connector.getProtocolHandler();
protocol.setSslImplementationName("ru.CryptoPro.ssl.tomcat.jsse.JCPJSSEImplementation");
protocol.setAlgorithm("GostX509");
protocol.setTruststoreAlgorithm("GostX509");
protocol.setKeystoreType("HDImageStore");
protocol.setKeystoreFile("/root/certStore");
protocol.setKeystorePass("123");
protocol.setKeystoreProvider("JCP");
protocol.setSSLCipherSuite("TLS_CIPHER_2012");
protocol.setSSLProtocol("GostTLS");
protocol.setSslEnabledProtocols("TLSv1");
protocol.setDisableUploadTimeout(true);
protocol.setSSLEnabled(true);
Спасибо
Отредактировано пользователем 15 июля 2020 г. 15:39:45(UTC)
| Причина: Не указана
