Здравствуйте! Возникает ошибка при попытке обмена данными Java-шлюзом, подписанными сертификатами с помощью CryptoPro. Вот логи Java-шлюза:
|||||||||||||||||||||||||||||||||||||
эю 27, 2015 2:38:40 PM ru.CryptoPro.ssl.ao r
FINE: %% No cached client session
эю 27, 2015 2:38:40 PM ru.CryptoPro.ssl.f q
FINE: %% ClientHello, TLSv1; Cipher Suites: [TLS_CIPHER_2012, TLS_CIPHER_2001, S
SL3_CK_GVO_KB2]; Compression Methods: 0; Extensions: Extension ext_hash_and_mac_
alg_select, ext_hash_and_mac_alg_select: [48, 32, 48, 30, 48, 8, 6, 6, 42, -123,
3, 2, 2, 9, 48, 8, 6, 6, 42, -123, 3, 2, 2, 22, 48, 8, 6, 6, 42, -123, 3, 2, 2,
23], Extension renegotiation_info, renegotiated_connection: <empty>;
эю 27, 2015 2:38:40 PM ru.CryptoPro.ssl.ad <init>
FINE: ServerHello sessionId: {154, 219, 235, 61, 36, 34, 208, 64, 146, 29, 126,
199, 92, 79, 230, 48, 81, 124, 242, 193, 223, 192, 231, 56, 244, 210, 11, 132, 1
85, 73, 161, 87}
эю 27, 2015 2:38:40 PM ru.CryptoPro.ssl.ao a
FINE: %% ServerHello, TLSv1; Cipher Suite: TLS_CIPHER_2001; Compression Method:
0; Extensions: Extension ext_hash_and_mac_alg_select, ext_hash_and_mac_alg_selec
t: [48, 30, 48, 8, 6, 6, 42, -123, 3, 2, 2, 9, 48, 8, 6, 6, 42, -123, 3, 2, 2, 2
2, 48, 8, 6, 6, 42, -123, 3, 2, 2, 23];
эю 27, 2015 2:38:40 PM ru.CryptoPro.ssl.ao a
FINE: Warning: No renegotiation indication extension in ServerHello
эю 27, 2015 2:38:40 PM ru.CryptoPro.ssl.f a
FINE: handshakeDigest :3cc77c
эю 27, 2015 2:38:40 PM ru.CryptoPro.ssl.ao a
FINE: ** New session TLS_CIPHER_2001
эю 27, 2015 2:38:40 PM ru.CryptoPro.ssl.ao a
FINE: %% Certificate message:
Subject: CN=*******.******.com, O=UCB, L=Moscow, C=RU, EMAILADDRESS=******@****.ru
Valid from Tue Jun 09 16:12:00 GMT+03:00 2015 until Thu Jun 09 16:22:00 GMT+03
:00 2016
эю 27, 2015 2:38:40 PM ru.CryptoPro.ssl.w a
FINE: [PKIX] Signature provider: JCP
эю 27, 2015 2:38:40 PM ru.CryptoPro.ssl.w a
FINE: [PKIX] Set some additional (intermediate) certificates
эю 27, 2015 2:38:40 PM ru.CryptoPro.ssl.w a
FINE: [PKIX] parameters:
com.sun.security.enableCRLDP=false
com.ibm.security.enableCRLDP=false
эю 27, 2015 2:38:40 PM ru.CryptoPro.ssl.w a
FINE: [PKIX] Certificate chain was built.
эю 27, 2015 2:38:40 PM ru.CryptoPro.JCP.pref.JCPPref getBoolean
CONFIG: User Preference Node: /ru/CryptoPro/ssl.Enable_revocation_default=false
эю 27, 2015 2:38:40 PM ru.CryptoPro.JCP.tools.TestVerifyClassJar run
FINE: file:/C:/Program%20Files/Java/jre1.8.0_65/lib/ext/JCryptoP.jar is being ch
ecked...
эю 27, 2015 2:38:41 PM ru.CryptoPro.JCP.tools.TestVerifyClassJar run
FINE: file:/C:/Program%20Files/Java/jre1.8.0_65/lib/ext/JCryptoP.jar has been su
ccessfully checked.
эю 27, 2015 2:38:41 PM ru.CryptoPro.ssl.w a
FINE: [PKIX] Offline verification is disabled. CRL timer is turned OFF.
эю 27, 2015 2:38:41 PM ru.CryptoPro.ssl.ao a
FINE: %% ServerHelloDone (empty)
эю 27, 2015 2:38:41 PM ru.CryptoPro.ssl.at d
FINE: Ephemeral key generator: GOST3410DHELEPH, Crypto
эю 27, 2015 2:38:41 PM ru.CryptoPro.JCP.pref.JCPPref getOID
CONFIG: System Preference Node: /ru/CryptoPro/JCP/params.EllipticParamsSpecDH201
2_512_class_defaultECC2012=null
эю 27, 2015 2:38:41 PM ru.CryptoPro.JCP.pref.JCPPref getOID
CONFIG: System Preference Node: /ru/CryptoPro/JCP/params.EllipticParamsSpec2012_
512_class_defaultECC2012=null
эю 27, 2015 2:38:41 PM ru.CryptoPro.ssl.ao a
FINE: %% ClientKeyExchange...
эю 27, 2015 2:38:41 PM ru.CryptoPro.ssl.f a
FINE: clntEncIV:63 35 07 F2 B2 5A 1E 2E
эю 27, 2015 2:38:41 PM ru.CryptoPro.ssl.f a
FINE: svrEncIV:4C B3 5F BB 6E EA E3 1E
эю 27, 2015 2:38:41 PM ru.CryptoPro.ssl.ao b
FINE: %% Finished.
эю 27, 2015 2:38:41 PM ru.CryptoPro.ssl.f a
FINE: ChangeCipherSpec %% Finished.
эю 27, 2015 2:38:41 PM ru.CryptoPro.ssl.ao a
FINE: %% Finished.
эю 27, 2015 2:38:41 PM ru.CryptoPro.ssl.ao a
FINE: %% Cached client session: [Session-1, TLS_CIPHER_2001]
эю 27, 2015 2:38:41 PM ru.CryptoPro.ssl.f a
FINE: Allow unsafe renegotiation: true
Allow legacy hello messages: true
Is initial handshake: false
Is secure renegotiation: false
эю 27, 2015 2:38:41 PM ru.CryptoPro.ssl.ao a
FINE: %% HelloRequest (empty)
эю 27, 2015 2:38:41 PM ru.CryptoPro.ssl.ao a
FINE: Warning: continue with insecure renegotiation
эю 27, 2015 2:38:41 PM ru.CryptoPro.ssl.ao r
FINE: %% Client cached [Session-1, TLS_CIPHER_2001]
эю 27, 2015 2:38:41 PM ru.CryptoPro.ssl.ao r
FINE: %% Try resuming [Session-1, TLS_CIPHER_2001] from port 1421
эю 27, 2015 2:38:41 PM ru.CryptoPro.ssl.f q
FINE: %% ClientHello, TLSv1; Cipher Suites: [TLS_CIPHER_2012, TLS_CIPHER_2001, S
SL3_CK_GVO_KB2]; Compression Methods: 0; Extensions: Extension ext_hash_and_mac_
alg_select, ext_hash_and_mac_alg_select: [48, 32, 48, 30, 48, 8, 6, 6, 42, -123,
3, 2, 2, 9, 48, 8, 6, 6, 42, -123, 3, 2, 2, 22, 48, 8, 6, 6, 42, -123, 3, 2, 2,
23], Extension renegotiation_info, renegotiated_connection: <empty>;
эю 27, 2015 2:38:41 PM ru.CryptoPro.ssl.an a
FINE: THROW
java.net.SocketException: Connection reset
at java.net.SocketInputStream.read(Unknown Source)
at java.net.SocketInputStream.read(Unknown Source)
at ru.CryptoPro.ssl.v.a(Unknown Source)
at ru.CryptoPro.ssl.v.a(Unknown Source)
at ru.CryptoPro.ssl.an.a(Unknown Source)
at ru.CryptoPro.ssl.an.a(Unknown Source)
at ru.CryptoPro.ssl.aa.read(Unknown Source)
at sun.nio.cs.StreamDecoder.readBytes(Unknown Source)
at sun.nio.cs.StreamDecoder.implRead(Unknown Source)
at sun.nio.cs.StreamDecoder.read(Unknown Source)
at java.io.InputStreamReader.read(Unknown Source)
at java.io.BufferedReader.fill(Unknown Source)
at java.io.BufferedReader.readLine(Unknown Source)
at java.io.BufferedReader.readLine(Unknown Source)
at lib.GateServer.processRequestAndGetOKBResponse(GateServer.java:135)
at lib.GateServer.handleClientSocket(GateServer.java:89)
at lib.GateServer$1.run(GateServer.java:47)
at java.lang.Thread.run(Unknown Source)
эю 27, 2015 2:38:41 PM ru.CryptoPro.ssl.an a
FINE: Thread-0, SEND TLSv1 ALERT: fatal, description = UNEXPECTED_MESSAGE
java.net.SocketException: Connection reset
at java.net.SocketInputStream.read(Unknown Source)
at java.net.SocketInputStream.read(Unknown Source)
at ru.CryptoPro.ssl.v.a(Unknown Source)
at ru.CryptoPro.ssl.v.a(Unknown Source)
at ru.CryptoPro.ssl.an.a(Unknown Source)
at ru.CryptoPro.ssl.an.a(Unknown Source)
at ru.CryptoPro.ssl.aa.read(Unknown Source)
at sun.nio.cs.StreamDecoder.readBytes(Unknown Source)
at sun.nio.cs.StreamDecoder.implRead(Unknown Source)
at sun.nio.cs.StreamDecoder.read(Unknown Source)
at java.io.InputStreamReader.read(Unknown Source)
at java.io.BufferedReader.fill(Unknown Source)
at java.io.BufferedReader.readLine(Unknown Source)
at java.io.BufferedReader.readLine(Unknown Source)
at lib.GateServer.processRequestAndGetOKBResponse(GateServer.java:135)
at lib.GateServer.handleClientSocket(GateServer.java:89)
at lib.GateServer$1.run(GateServer.java:47)
at java.lang.Thread.run(Unknown Source)
