PHP客户端和Java服务器之间的SSL套接字连接

我试图在PHP客户端和Java服务器之间建立SSL连接。我对SSL一无所知，我对此很困惑。PHP客户端和Java服务器之间的SSL套接字连接

连接不需要被信任或验证，它只需要加密数据以使其安全传输。

PHP客户端能够连接（确认连接）和Java服务器，但在两者之间的握手，我reveive在Java中出现以下错误：

javax.net.ssl.SSLException: Connection has been shutdown: javax.net.ssl.SSLHandshakeException: no cipher suites in common 
    at sun.security.ssl.SSLSocketImpl.checkEOF(SSLSocketImpl.java:1458) 
    at sun.security.ssl.AppInputStream.read(AppInputStream.java:92) 
    at sun.nio.cs.StreamDecoder.readBytes(StreamDecoder.java:283) 
    at sun.nio.cs.StreamDecoder.implRead(StreamDecoder.java:325) 
    at sun.nio.cs.StreamDecoder.read(StreamDecoder.java:177) 
    at java.io.InputStreamReader.read(InputStreamReader.java:184) 
    at java.io.BufferedReader.fill(BufferedReader.java:154) 
    at java.io.BufferedReader.readLine(BufferedReader.java:317) 
    at java.io.BufferedReader.readLine(BufferedReader.java:382) 
    at com.test.ConnectionHandler.getRequest(ConnectionHandler.java:23) 
    at com.test.Interaction.run(Interaction.java:35) 
    at java.lang.Thread.run(Thread.java:722) 
Caused by: javax.net.ssl.SSLHandshakeException: no cipher suites in common 
    at sun.security.ssl.Alerts.getSSLException(Alerts.java:192) 
    at sun.security.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1868) 
    at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:276) 
    at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:266) 
    at sun.security.ssl.ServerHandshaker.chooseCipherSuite(ServerHandshaker.java:892) 
    at sun.security.ssl.ServerHandshaker.clientHello(ServerHandshaker.java:620) 
    at sun.security.ssl.ServerHandshaker.processMessage(ServerHandshaker.java:167) 
    at sun.security.ssl.Handshaker.processLoop(Handshaker.java:868) 
    at sun.security.ssl.Handshaker.process_record(Handshaker.java:804) 
    at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:998) 
    at sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1294) 
    at sun.security.ssl.SSLSocketImpl.writeRecord(SSLSocketImpl.java:685) 
    at sun.security.ssl.AppOutputStream.write(AppOutputStream.java:111) 
    at sun.nio.cs.StreamEncoder.writeBytes(StreamEncoder.java:221) 
    at sun.nio.cs.StreamEncoder.implFlushBuffer(StreamEncoder.java:291) 
    at sun.nio.cs.StreamEncoder.implFlush(StreamEncoder.java:295) 
    at sun.nio.cs.StreamEncoder.flush(StreamEncoder.java:141) 
    at java.io.OutputStreamWriter.flush(OutputStreamWriter.java:229) 
    at java.io.BufferedWriter.flush(BufferedWriter.java:254) 
    at java.io.PrintWriter.newLine(PrintWriter.java:482) 
    at java.io.PrintWriter.println(PrintWriter.java:629) 
    at java.io.PrintWriter.println(PrintWriter.java:740) 
    at com.test.ConnectionHandler.println(ConnectionHandler.java:28) 
    at com.test.Interaction.run(Interaction.java:29) 
    ... 1 more

和PHP这些错误：

Warning: fsockopen(): SSL operation failed with code 1. OpenSSL Error messages: 
error:14077410:SSL routines:func(119):reason(1040) in /var/www/html/inc/node.class.php on line 48 

Warning: fsockopen(): Failed to enable crypto in /var/www/html/inc/node.class.php on line 48 

Warning: fsockopen(): unable to connect to ssl://127.0.0.1:30627 (Unknown error) in /var/www/html/inc/node.class.php on line 48

这是我在Java代码中负责处理插槽设置：

SSLServerSocketFactory socketfactory; 
SSLServerSocket ssock; 

SSLContext sslContext = SSLContext.getInstance("SSL"); 

KeyStore ks = KeyStore.getInstance("JKS"); 
InputStream ksIs = ClassLoader.class.getResourceAsStream("resources/keystore.jks"); 
try { 
    ks.load(ksIs, "password".toCharArray()); 
} catch (CertificateException e) { 
    e.printStackTrace(); 
} finally { 
    if (ksIs != null) { 
     ksIs.close(); 
    } 
} 

KeyManagerFactory kmf = KeyManagerFactory.getInstance(KeyManagerFactory.getDefaultAlgorithm()); 
kmf.init(ks, "password".toCharArray()); 

sslContext.init(kmf.getKeyManagers(), null, null); 
socketfactory = sslContext.getServerSocketFactory(); 

socketfactory = (SSLServerSocketFactory) SSLServerSocketFactory.getDefault(); 

ssock = (SSLServerSocket) socketfactory.createServerSocket(myPort); 

for(String item : ssock.getEnabledCipherSuites()) { 
    System.out.println(item); 
} 

while(true) { 
    SSLSocket sock = (SSLSocket) ssock.accept(); 

    new Interaction(sock); 
}

这是处理连接到Java服务器我的PHP代码：（在48行开始）

$this->stream = fsockopen("ssl://127.0.0.1", 30627, $errno, $errstr); 
if(!$this->stream) { 
    return array(
    'errornum' => $errno, 
    'errorstr' => $errstr, 
); 
} else { 
    return true; 
}

有人能帮忙解释一下我做错了或提供解决方案？

- 编辑

我已经使用Java客户端连接到看到问题所在试过。但我仍然收到相同的错误，这是显示在Java客户端上：

javax.net.ssl.SSLException: Connection has been shutdown: javax.net.ssl.SSLHands 
hakeException: Received fatal alert: handshake_failure 
     at com.sun.net.ssl.internal.ssl.SSLSocketImpl.checkEOF(SSLSocketImpl.jav 
a:1293) 
     at com.sun.net.ssl.internal.ssl.SSLSocketImpl.checkWrite(SSLSocketImpl.j 
ava:1305) 
     at com.sun.net.ssl.internal.ssl.AppOutputStream.write(AppOutputStream.ja 
va:43) 
     at sun.nio.cs.StreamEncoder.writeBytes(StreamEncoder.java:202) 
     at sun.nio.cs.StreamEncoder.implFlushBuffer(StreamEncoder.java:272) 
     at sun.nio.cs.StreamEncoder.implFlush(StreamEncoder.java:276) 
     at sun.nio.cs.StreamEncoder.flush(StreamEncoder.java:122) 
     at java.io.OutputStreamWriter.flush(OutputStreamWriter.java:212) 
     at java.io.BufferedWriter.flush(BufferedWriter.java:236) 
     at Main.main(Main.java:55) 
Caused by: javax.net.ssl.SSLHandshakeException: Received fatal alert: handshake_ 
failure 
     at com.sun.net.ssl.internal.ssl.Alerts.getSSLException(Alerts.java:174) 
     at com.sun.net.ssl.internal.ssl.Alerts.getSSLException(Alerts.java:136) 
     at com.sun.net.ssl.internal.ssl.SSLSocketImpl.recvAlert(SSLSocketImpl.ja 
va:1720) 
     at com.sun.net.ssl.internal.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.j 
ava:954) 
     at com.sun.net.ssl.internal.ssl.SSLSocketImpl.performInitialHandshake(SS 
LSocketImpl.java:1138) 
     at com.sun.net.ssl.internal.ssl.SSLSocketImpl.readDataRecord(SSLSocketIm 
pl.java:753) 
     at com.sun.net.ssl.internal.ssl.AppInputStream.read(AppInputStream.java: 
75) 
     at sun.nio.cs.StreamDecoder.readBytes(StreamDecoder.java:264) 
     at sun.nio.cs.StreamDecoder.implRead(StreamDecoder.java:306) 
     at sun.nio.cs.StreamDecoder.read(StreamDecoder.java:158) 
     at java.io.InputStreamReader.read(InputStreamReader.java:167) 
     at java.io.BufferedReader.fill(BufferedReader.java:136) 
     at java.io.BufferedReader.readLine(BufferedReader.java:299) 
     at java.io.BufferedReader.readLine(BufferedReader.java:362) 
     at Main$Output.run(Main.java:77) 
     at java.lang.Thread.run(Thread.java:662)

来源

2014-01-23 Jack B

你有密钥库中的私钥的合适证书吗？ “*没有共同的密码套件* ...”[往往是由错误配置的密钥库导致]（http://stackoverflow.com/a/15406581/372643）。你至少可以连接浏览器吗？另外，在Java方面拥有这种信任管理器毫无意义（使用这些方法通常是一个糟糕的主意）。（我不确定在PHP方面证书验证是否足够，使用'ssl：//'，但这可能很难修复。） – Bruno

我使用命令'keytool -genkey -alias MyKey -keyalg RSA -keystore keystore .jks -keysize 2048'来生成我的密钥库。我已经修改了Java服务器现在不使用信任库，但使用PHP客户端时仍然发生相同的错误。我从我的密钥库中导出了公钥，并将其作为受信任的根CA安装在Windows中，并尝试使用简单的Java客户端进行连接，但同样发生了同样的错误。 –

我发现问题是加载密钥库。我将它作为资源检索的方式不起作用。

我得到了正确加载的keystore，然后一切正常。

来源

2014-01-27 00:09:04

PHP客户端和Java服务器之间的SSL套接字连接

回答

相关问题