小博子 发表于 2022-4-28 13:45:42

请问自签ssl证书,是否支持国密ssl(gmssl)方式

在本地使用gmssl(国密ssl)生成的证书配置https,一直报错:

java.io.IOException: keystore password was incorrect
        at java.base/sun.security.pkcs12.PKCS12KeyStore.engineLoad(PKCS12KeyStore.java:2117)
        at java.base/sun.security.util.KeyStoreDelegator.engineLoad(KeyStoreDelegator.java:243)
        at java.base/java.security.KeyStore.load(KeyStore.java:1479)
        at org.eclipse.jetty.util.security.CertificateUtils.getKeyStore(CertificateUtils.java:54)
        at org.eclipse.jetty.util.ssl.SslContextFactory.loadKeyStore(SslContextFactory.java:1191)
        at org.eclipse.jetty.util.ssl.SslContextFactory.load(SslContextFactory.java:323)
        at org.eclipse.jetty.util.ssl.SslContextFactory.doStart(SslContextFactory.java:245)
        at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:72)
        at org.eclipse.jetty.util.component.ContainerLifeCycle.start(ContainerLifeCycle.java:169)
        at org.eclipse.jetty.util.component.ContainerLifeCycle.doStart(ContainerLifeCycle.java:117)
        at org.eclipse.jetty.server.SslConnectionFactory.doStart(SslConnectionFactory.java:97)
        at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:72)
        at org.eclipse.jetty.util.component.ContainerLifeCycle.start(ContainerLifeCycle.java:169)
        at org.eclipse.jetty.util.component.ContainerLifeCycle.doStart(ContainerLifeCycle.java:117)
        at org.eclipse.jetty.server.AbstractConnector.doStart(AbstractConnector.java:321)
        at org.eclipse.jetty.server.AbstractNetworkConnector.doStart(AbstractNetworkConnector.java:81)
        at org.eclipse.jetty.server.ServerConnector.doStart(ServerConnector.java:234)
        at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:72)
        at org.eclipse.jetty.server.Server.doStart(Server.java:401)
        at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:72)
        at com.x.server.console.server.application.ApplicationServerTools.start(ApplicationServerTools.java:158)
        at com.x.server.console.server.Servers.startApplicationServer(Servers.java:116)
        at com.x.server.console.Main.startApplicationServer(Main.java:340)
        at com.x.server.console.Main.startAll(Main.java:425)
        at com.x.server.console.Main.main(Main.java:146)
Caused by: java.security.UnrecoverableKeyException: failed to decrypt safe contents entry: java.security.cert.CertificateParsingException: java.io.IOException: Unknown named curve: 1.2.156.10197.1.301
        ... 25 more


显示的是密码不正确,但是我已经在token.json中配置了正确的密码。
网上查找的反馈是 jdk自带的解析证书解析不了 国密证书;
百度链接地址:
https://blog.csdn.net/qq_40806881/article/details/120524669

麻烦各位大佬给看下是什么问题。

启蒙星 发表于 2022-4-29 17:26:58

确实平台对这样的签证还不支持,需要底层修改适配,你可以自己尝试修改,或者尝试使用nginx解析https,也可以通过官网联系我们商务获取支持

小博子 发表于 2022-5-5 09:24:49

启蒙星 发表于 2022-4-29 17:26
确实平台对这样的签证还不支持,需要底层修改适配,你可以自己尝试修改,或者尝试使用nginx解析https,也可 ...

好的,感谢大佬回复

论坛管理员 发表于 2022-5-5 09:48:17

:)
页: [1]
查看完整版本: 请问自签ssl证书,是否支持国密ssl(gmssl)方式