1
我目前正在尝试开发一个小型实用程序，它可以向给定的https url发送http请求。我已经尝试通过将系统属性“java.net.debug”设置为“ssl”进行调试。但是，我想知道是否有方法知道谁在连接的另一端。这很重要，以便我可以了解我的问题是由于代理（我必须使用）还是由于目标本身。这可能吗？Java：SSL身份验证/ SSL调试问题
我很乐意提供任何其他可能有助于解决此问题的信息。 （这已经花了我很长的时间，我非常想看到它在我身后）
另外，我将在下面发布我的错误输出的提取（在尝试连接时使用“ssl”调试标志通过代理）。
由于任何人谁可能有想法，建议，资源帮助等
Error output (extract):
trigger seeding of SecureRandom
done seeding SecureRandom
main, setSoTimeout(0) called
Allow unsafe renegotiation: false
Allow legacy hello messages: true
Is initial handshake: true
Is secure renegotiation: false
%% No cached client session
*** ClientHello, TLSv1
RandomCookie: GMT: 1315387357 bytes = { 204, 54, 224, 210, 62, 4, 115, 194, 63, 143, 61, 163, 43, 167, 63, 217, 104, 166, 123, 152, 32, 226, 42, 143, 191, 249, 183, 192 }
Session ID: {}
Cipher Suites: [SSL_RSA_WITH_RC4_128_MD5, SSL_RSA_WITH_RC4_128_SHA, TLS_RSA_WITH_AES_128_CBC_SHA, TLS_DHE_RSA_WITH_AES_128_CBC_SHA, TLS_DHE_DSS_WITH_AES_128_CBC_SHA, SSL_RSA_WITH_3DES_EDE_CBC_SHA, SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA, SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHA, SSL_RSA_WITH_DES_CBC_SHA, SSL_DHE_RSA_WITH_DES_CBC_SHA, SSL_DHE_DSS_WITH_DES_CBC_SHA, SSL_RSA_EXPORT_WITH_RC4_40_MD5, SSL_RSA_EXPORT_WITH_DES40_CBC_SHA, SSL_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA, SSL_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA, TLS_EMPTY_RENEGOTIATION_INFO_SCSV]
Compression Methods: { 0 }
***
[write] MD5 and SHA1 hashes: len = 75
0000: 01 00 00 47 03 01 4E 67 38 DD CC 36 E0 D2 3E 04 ...G..Ng8..6..>.
0010: 73 C2 3F 8F 3D A3 2B A7 3F D9 68 A6 7B 98 20 E2 s.?.=.+.?.h... .
0020: 2A 8F BF F9 B7 C0 00 00 20 00 04 00 05 00 2F 00 *....... ...../.
0030: 33 00 32 00 0A 00 16 00 13 00 09 00 15 00 12 00 3.2.............
0040: 03 00 08 00 14 00 11 00 FF 01 00 ...........
main, WRITE: TLSv1 Handshake, length = 75
[write] MD5 and SHA1 hashes: len = 101
0000: 01 03 01 00 3C 00 00 00 20 00 00 04 01 00 80 00 ....<... .......
0010: 00 05 00 00 2F 00 00 33 00 00 32 00 00 0A 07 00 ..../..3..2.....
0020: C0 00 00 16 00 00 13 00 00 09 06 00 40 00 00 15 [email protected]
0030: 00 00 12 00 00 03 02 00 80 00 00 08 00 00 14 00 ................
0040: 00 11 00 00 FF 4E 67 38 DD CC 36 E0 D2 3E 04 73 .....Ng8..6..>.s
0050: C2 3F 8F 3D A3 2B A7 3F D9 68 A6 7B 98 20 E2 2A .?.=.+.?.h... .*
0060: 8F BF F9 B7 C0 .....
main, WRITE: SSLv2 client hello message, length = 101
main, received EOFException: error
main, handling exception: javax.net.ssl.SSLHandshakeException: Remote host closed connection during handshake
main, SEND TLSv1 ALERT: fatal, description = handshake_failure
main, WRITE: TLSv1 Alert, length = 2
main, called closeSocket()
main, IOException in getSession(): javax.net.ssl.SSLHandshakeException: Remote host closed connection during handshake
main, called close()
main, called closeInternal(true)
main, called close()
main, called closeInternal(true)
javax.net.ssl.SSLPeerUnverifiedException: peer not authenticated
at com.sun.net.ssl.internal.ssl.SSLSessionImpl.getPeerCertificates(SSLSessionImpl.java:352)
at org.apache.http.conn.ssl.AbstractVerifier.verify(AbstractVerifier.java:128)
at org.apache.http.conn.ssl.SSLSocketFactory.connectSocket(SSLSocketFactory.java:397)
at org.apache.http.impl.conn.DefaultClientConnectionOperator.openConnection(DefaultClientConnectionOperator.java:148)
at org.apache.http.impl.conn.AbstractPoolEntry.open(AbstractPoolEntry.java:149)
at org.apache.http.impl.conn.AbstractPooledConnAdapter.open(AbstractPooledConnAdapter.java:121)
at org.apache.http.impl.client.DefaultRequestDirector.tryConnect(DefaultRequestDirector.java:573)
at org.apache.http.impl.client.DefaultRequestDirector.execute(DefaultRequestDirector.java:425)
at org.apache.http.impl.client.AbstractHttpClient.execute(AbstractHttpClient.java:820)
at org.apache.http.impl.client.AbstractHttpClient.execute(AbstractHttpClient.java:754)
at <my.fqdn.class>.run(EisRequestResponseMonitor.java:193)
at <my.fqdn.class>.main(EisRequestResponseMonitor.java:81)
UPDATE： 由于我的职位，我能得到一些更多的信息。我的问题似乎确实与代理有关。当我看到我的调试信息时（错误被写入日志并且错过了它），我收到了一个407 HTTP代码。 我使用Apache的httpclient组件（此日期是4.1.2的最新版本），现在我正在努力正确“附加”我的凭证提供程序。我说“挣扎”，因为我发现的所有例子都是针对版本3.x，并且自那时起api已经发生了变化。
UPDATE.V2： 好了，多了很多的测试后，我发现，有人告诉我做我的工作机器无法访问代理。但是，这些信息直接来自安全人员。除了他们之外，其他人都认为这是可能的。