Java 使用 SSL 握手失败连接到 SOAP Web 服务

Question

谁能告诉我，这个 ssl 握手的问题是什么？我无法解释此消息以了解出了什么问题。

我使用 Java 1.8u171 和自定义密钥和信任库。

由于 ssl 调试跟踪太大而无法在此处发布，因此我仅添加了它的结尾。让我知道是否需要添加更多行。

*** ECDH ServerKeyExchange

Signature Algorithm SHA512withRSA

Server key: Sun EC public key, 256 bits

  public x coord: 22370889587224987359608899225847605413175776292485254209693360141628593926267

  public y coord: 46421316867312726832394508124945403534455242739986432133408176290773445555000

  parameters: secp256r1 [NIST P-256, X9.62 prime256v1] (1.2.840.10045.3.1.7)

main, READ: TLSv1.2 Handshake, length = 1296

*** CertificateRequest

Cert Types: RSA, DSS, ECDSA

Supported Signature Algorithms: SHA512withRSA, Unknown (hash:0x6, signature:0x2), SHA512withECDSA, SHA384withRSA, Unknown (hash:0x5, signature:0x2), SHA384withECDSA, SHA256withRSA, SHA256withDSA, SHA256withECDSA, Unknown (hash:0x3, signature:0x1), Unknown (hash:0x3, signature:0x2), Unknown (hash:0x3, signature:0x3), SHA1withRSA, SHA1withDSA, SHA1withECDSA

Cert Authorities:

<CN=Admin-Root-CA, OU=Certification Authorities, OU=Services, O=admin, C=ch>

<CN=SwissDefence-CA1, OU=Certification Authorities, OU=Verteidigung, O=Admin, C=CH>

<CN=SwissDefence-RootCA, OU=Certification Authorities, OU=Verteidigung, O=Admin, C=CH>

<CN=Swiss Government Regular CA 01, OU=Certification Authorities, OU=Services, O=Admin, C=CH>

<CN=Swiss Government Enhanced CA 01, OU=Certification Authorities, OU=Services, O=Admin, C=CH>

<CN=Swiss Government Enhanced CA 02, OU=Certification Authorities, OU=Services, O=Admin, C=CH>

<CN=Swiss Government SSL CA 01, OU=Certification Authorities, OU=Services, O=Swiss Government PKI, C=CH>

<CN=Swiss Government Root CA I, OU=Certification Authorities, OU=Services, O=The Federal Authorities of the Swiss Confederation, C=CH>

<CN=Swiss Government Root CA II, OU=Certification Authorities, OU=Services, O=The Federal Authorities of the Swiss Confederation, C=CH>

*** ServerHelloDone

Warning: no suitable certificate found - continuing without client authentication

*** Certificate chain

<Empty>

Answer 1

“警告：未找到合适的证书 - 无需客户端身份验证继续” - 您的证书与目标主机不匹配，请检查证书。