разумеется я же пролез весь форум и прописал эти настройки.
Если:
Код:
URL site = new URL("https://icrs.nbki.ru");
site.openConnection().connect(); //падает
System.out.println(site.getContent());
падает:
SEVERE: javax.net.ssl.SSLException: Server selected improper ciphersuite SSL_NULL_WITH_NULL_NULL
javax.net.ssl.SSLException: Server selected improper ciphersuite SSL_NULL_WITH_NULL_NULL
at com.sun.net.ssl.internal.ssl.Alerts.getSSLException(Alerts.java:190)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1731)
at com.sun.net.ssl.internal.ssl.Handshaker.fatalSE(Handshaker.java:241)
at com.sun.net.ssl.internal.ssl.Handshaker.fatalSE(Handshaker.java:231)
at com.sun.net.ssl.internal.ssl.ClientHandshaker.serverHello(ClientHandshaker.java:412)
at com.sun.net.ssl.internal.ssl.ClientHandshaker.processMessage(ClientHandshaker.java:126)
at com.sun.net.ssl.internal.ssl.Handshaker.processLoop(Handshaker.java:593)
at com.sun.net.ssl.internal.ssl.Handshaker.process_record(Handshaker.java:529)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:925)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1170)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1197)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1181)
at sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:434)
at sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:166)
at sun.net.www.protocol.https.HttpsURLConnectionImpl.connect(HttpsURLConnectionImpl.java:133)
at nbki.JTLS_samples.Client.main(Client.java:103)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at com.intellij.rt.execution.application.AppMain.main(AppMain.java:120)
если подключить криптопрошную фабрику
Код:
final SSLSocketFactoryImpl sslFact = new SSLSocketFactoryImpl();
HttpsURLConnection.setDefaultSSLSocketFactory(sslFact);
URL site = new URL("https://icrs.nbki.ru");
site.openConnection().connect();// падает
System.out.println(site.getContent());
то падает так:
SEVERE: javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: Unknown authType: GOST3410DH
javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: Unknown authType: GOST3410DH
at ru.CryptoPro.ssl.K.a(Unknown Source)
at ru.CryptoPro.ssl.t.a(Unknown Source)
at ru.CryptoPro.ssl.L.a(Unknown Source)
at ru.CryptoPro.ssl.L.a(Unknown Source)
at ru.CryptoPro.ssl.a.a(Unknown Source)
at ru.CryptoPro.ssl.L.a(Unknown Source)
at ru.CryptoPro.ssl.t.a(Unknown Source)
at ru.CryptoPro.ssl.t.i(Unknown Source)
at ru.CryptoPro.ssl.t.startHandshake(Unknown Source)
at sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:434)
at sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:166)
at sun.net.www.protocol.https.HttpsURLConnectionImpl.connect(HttpsURLConnectionImpl.java:133)
at nbki.JTLS_samples.Client.main(Client.java:104)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at com.intellij.rt.execution.application.AppMain.main(AppMain.java:120)
Caused by: java.security.cert.CertificateException: Unknown authType: GOST3410DH
at sun.security.validator.EndEntityChecker.checkTLSServer(EndEntityChecker.java:264)
at sun.security.validator.EndEntityChecker.check(EndEntityChecker.java:124)
at sun.security.validator.Validator.validate(Validator.java:221)
at com.sun.net.ssl.internal.ssl.X509TrustManagerImpl.validate(X509TrustManagerImpl.java:126)
at com.sun.net.ssl.internal.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:209)
at ru.CryptoPro.ssl.G.checkServerTrusted(Unknown Source)
... 14 more