简体繁体 English

长时间的延迟，之后出现SSL错误，从而在Java / Tomcat Web应用程序中首次调用SQL Server

[英]Long delay, followed by SSL Error making first SQL Server call in Java/Tomcat web application

原文 2016-08-30 19:10:12 4 1 java/ tomcat8

I have a web application that runs using Java 8 on Tomcat 8 on Windows. 我有一个Web应用程序，该应用程序在Windows的Tomcat 8上使用Java 8运行。 When first starting the Tomcat service, the WAR unpacks and deploys as expected, but then, making the first call to the service, which makes a database connection to Microsoft SQL Server takes almost an hour to complete, then fails with a bunch of com.microsoft.sqlserver.jdbc.TDSChannel.enableSSL errors. 第一次启动Tomcat服务时，WAR会按预期方式解包并部署，但是随后，对该服务进行首次调用，即完成与Microsoft SQL Server的数据库连接需要近一个小时才能完成，然后失败，并出现一堆com。 microsoft.sqlserver.jdbc.TDSChannel.enableSSL错误。 The catalina.log is below. catalina.log在下面。

Any ideas what I can do or check? 有什么想法我可以做什么或检查吗？ I have tried a bunch of changes to the java.security file as suggested in other posts, but nothing has worked. 我已经尝试了其他帖子中建议的对java.security文件的一系列更改，但是没有任何效果。

Thanks 谢谢

27-Jan-2016 10:53:52.966 INFO [main] org.apache.catalina.startup.Catalina.start Server startup in 208547 ms 27-Jan-2016 11:50:57.371 INFO [http-apr-8080-exec-6] com.microsoft.sqlserver.jdbc.TDSChannel.enableSSL java.security path: C:\\Java\\jre8\\lib\\security Security providers: [SUN version 1.8, SunRsaSign version 1.8, SunEC version 1.8, SunJSSE version 1.8, SunJCE version 1.8, SunJGSS version 1.8, SunSASL version 1.8, XMLDSig version 1.8, SunPCSC version 1.8, SunMSCAPI version 1.8] SSLContext provider info: Sun JSSE provider(PKCS12, SunX509/PKIX key/trust factories, SSLv3/TLSv1/TLSv1.1/TLSv1.2) SSLContext provider services: [SunJSSE: KeyFactory.RSA -> sun.security.rsa.RSAKeyFactory aliases: [1.2.840.113549.1.1, OID.1.2.840.113549.1.1] , SunJSSE: KeyPairGenerator.RSA -> sun.security.rsa.RSAKeyPairGenerator 2016年1月27日10：53：52.966信息[主] org.apache.catalina.startup.Catalina.start服务器启动时间为208547毫秒2016年1月27日11：50：57.371信息[http-apr-8080-exec- 6] com.microsoft.sqlserver.jdbc.TDSChannel.enableSSL java.security路径：C：\\ Java \\ jre8 \\ lib \\ security安全提供程序：[SUN版本1.8，SunRsaSign版本1.8，SunEC版本1.8，SunJSSE版本1.8，SunJCE版本1.8，SunJGSS版本1.8，SunSASL版本1.8，XMLDSig版本1.8，SunPCSC版本1.8，SunMSCAPI版本1.8] SSLContext提供程序信息：Sun JSSE提供程序（PKCS12，SunX509 / PKIX密钥/信任工厂，SSLv3 / TLSv1 / TLSv1.1 / TLSv1。 2）SSLContext提供程序服务：[SunJSSE：KeyFactory.RSA-> sun.security.rsa.RSAKeyFactory别名：[1.2.840.113549.1.1，OID.1.2.840.113549.1.1]，SunJSSE：KeyPairGenerator.RSA-> sun.security。 rsa.RSAKeyPairGenerator
aliases: [1.2.840.113549.1.1, OID.1.2.840.113549.1.1] , SunJSSE: Signature.MD2withRSA -> sun.security.rsa.RSASignature$MD2withRSA 别名：[1.2.840.113549.1.1，OID.1.2.840.113549.1.1]，SunJSSE：Signature.MD2withRSA-> sun.security.rsa.RSASignature $ MD2withRSA
aliases: [1.2.840.113549.1.1.2, OID.1.2.840.113549.1.1.2] , SunJSSE: Signature.MD5withRSA -> sun.security.rsa.RSASignature$MD5withRSA 别名：[1.2.840.113549.1.1.2，OID.1.2.840.113549.1.1.2]，SunJSSE：Signature.MD5withRSA-> sun.security.rsa.RSASignature $ MD5withRSA
aliases: [1.2.840.113549.1.1.4, OID.1.2.840.113549.1.1.4] , SunJSSE: Signature.SHA1withRSA -> sun.security.rsa.RSASignature$SHA1withRSA 别名：[1.2.840.113549.1.1.4，OID.1.2.840.113549.1.1.4]，SunJSSE：Signature.SHA1withRSA-> sun.security.rsa.RSASignature $ SHA1withRSA
aliases: [1.2.840.113549.1.1.5, OID.1.2.840.113549.1.1.5, 1.3.14.3.2.29, OID.1.3.14.3.2.29] , SunJSSE: Signature.MD5andSHA1withRSA -> sun.security.ssl.RSASignature , SunJSSE: KeyManagerFactory.SunX509 -> sun.security.ssl.KeyManagerFactoryImpl$SunX509 , SunJSSE: KeyManagerFactory.NewSunX509 -> sun.security.ssl.KeyManagerFactoryImpl$X509 aliases: [PKIX] , SunJSSE: TrustManagerFactory.SunX509 -> sun.security.ssl.TrustManagerFactoryImpl$SimpleFactory , SunJSSE: TrustManagerFactory.PKIX -> sun.security.ssl.TrustManagerFactoryImpl$PKIXFactory aliases: [SunPKIX, X509, X.509] , SunJSSE: SSLContext.TLSv1 -> sun.security.ssl.SSLContextImpl$TLS10Context aliases: [SSLv3] , SunJSSE: SSLContext.TLSv1.1 -> sun.security.ssl.SSLContextImpl$TLS11Context , SunJSSE: SSLContext.TLSv1.2 -> sun.security.ssl.SSLContextImpl$TLS12Context , SunJSSE: SSLContext.TLS -> sun.security.ssl.SSLContextImpl$TLSContext aliases: [SSL] , SunJSSE: SSLContext.Default -> sun.security.ssl.SSLContextImpl$DefaultSSLContext , SunJ 别名：[1.2.840.113549.1.1.5，OID.1.2.840.113549.1.1.5、1.3.14.3.2.29，OID.1.3.14.3.2.29]，SunJSSE：Signature.MD5和SHA1withRSA-> sun.security.ssl.RSASignature ，SunJSSE：KeyManagerFactory.SunX509-> sun.security.ssl.KeyManagerFactoryImpl $ SunX509，SunJSSE：KeyManagerFactory.NewSunX509-> sun.security.ssl.KeyManagerFactoryImpl $ X509别名：[PKIX]，SunJSSE：TrustManagerFactory.SunX509-> sun.security .ssl.TrustManagerFactoryImpl $ SimpleFactory，SunJSSE：TrustManagerFactory.PKIX-> sun.security.ssl.TrustManagerFactoryImpl $ PKIXFactory别名：[SunPKIX，X509，X.509]，SunJSSE：SSLContext.TLSv1-> sun.security.ssl.SSLContextImpl $ TLS10Context别名：[SSLv3]，SunJSSE：SSLContext.TLSv1.1-> sun.security.ssl.SSLContextImpl $ TLS11Context，SunJSSE：SSLContext.TLSv1.2-> sun.security.ssl.SSLContextImpl $ TLS12Context，SunJSSE：SSLContext.TLS -> sun.security.ssl.SSLContextImpl $ TLSContext别名：[SSL]，SunJSSE：SSLContext.Default-> sun.security.ssl.SSLContextImpl $ DefaultSSLContext，SunJ SSE: KeyStore.PKCS12 -> sun.security.pkcs12.PKCS12KeyStore ] java.ext.dirs: C:\\Java\\jre8\\lib\\ext;C:\\Windows\\Sun\\Java\\lib\\ext 27-Jan-2016 11:50:57.371 INFO [http-apr-8080-exec-35] com.microsoft.sqlserver.jdbc.TDSChannel.enableSSL java.security path: C:\\Java\\jre8\\lib\\security Security providers: [SUN version 1.8, SunRsaSign version 1.8, SunEC version 1.8, SunJSSE version 1.8, SunJCE version 1.8, SunJGSS version 1.8, SunSASL version 1.8, XMLDSig version 1.8, SunPCSC version 1.8, SunMSCAPI version 1.8] SSLContext provider info: Sun JSSE provider(PKCS12, SunX509/PKIX key/trust factories, SSLv3/TLSv1/TLSv1.1/TLSv1.2) SSLContext provider services: [SunJSSE: KeyFactory.RSA -> sun.security.rsa.RSAKeyFactory aliases: [1.2.840.113549.1.1, OID.1.2.840.113549.1.1] , SunJSSE: KeyPairGenerator.RSA -> sun.security.rsa.RSAKeyPairGenerator SSE：KeyStore.PKCS12-> sun.security.pkcs12.PKCS12KeyStore] java.ext.dirs：C：\\ Java \\ jre8 \\ lib \\ ext; C：\\ Windows \\ Sun \\ Java \\ lib \\ ext 2016年1月27日11 ：50：57.371信息[http-apr-8080-exec-35] com.microsoft.sqlserver.jdbc.TDSChannel.enableSSL java.security路径：C：\\ Java \\ jre8 \\ lib \\ security安全提供程序：[SUN版本1.8， SunRsaSign版本1.8，SunEC版本1.8，SunJSSE版本1.8，SunJCE版本1.8，SunJGSS版本1.8，SunSASL版本1.8，XMLDSig版本1.8，SunPCSC版本1.8，SunMSCAPI版本1.8] SSLContext提供程序信息：Sun JSSE提供程序（PKCS12，SunX509 / PKIX键/ trust factory，SSLv3 / TLSv1 / TLSv1.1 / TLSv1.2）SSLContext提供程序服务：[SunJSSE：KeyFactory.RSA-> sun.security.rsa.RSAKeyFactory别名：[1.2.840.113549.1.1，OID.1.2.840.113549。 1.1]，SunJSSE：KeyPairGenerator.RSA-> sun.security.rsa.RSAKeyPairGenerator
aliases: [1.2.840.113549.1.1, OID.1.2.840.113549.1.1] , SunJSSE: Signature.MD2withRSA -> sun.security.rsa.RSASignature$MD2withRSA 别名：[1.2.840.113549.1.1，OID.1.2.840.113549.1.1]，SunJSSE：Signature.MD2withRSA-> sun.security.rsa.RSASignature $ MD2withRSA
aliases: [1.2.840.113549.1.1.2, OID.1.2.840.113549.1.1.2] , SunJSSE: Signature.MD5withRSA -> sun.security.rsa.RSASignature$MD5withRSA 别名：[1.2.840.113549.1.1.2，OID.1.2.840.113549.1.1.2]，SunJSSE：Signature.MD5withRSA-> sun.security.rsa.RSASignature $ MD5withRSA
aliases: [1.2.840.113549.1.1.4, OID.1.2.840.113549.1.1.4] , SunJSSE: Signature.SHA1withRSA -> sun.security.rsa.RSASignature$SHA1withRSA 别名：[1.2.840.113549.1.1.4，OID.1.2.840.113549.1.1.4]，SunJSSE：Signature.SHA1withRSA-> sun.security.rsa.RSASignature $ SHA1withRSA
aliases: [1.2.840.113549.1.1.5, OID.1.2.840.113549.1.1.5, 1.3.14.3.2.29, OID.1.3.14.3.2.29] , SunJSSE: Signature.MD5andSHA1withRSA -> sun.security.ssl.RSASignature , SunJSSE: KeyManagerFactory.SunX509 -> sun.security.ssl.KeyManagerFactoryImpl$SunX509 , SunJSSE: KeyManagerFactory.NewSunX509 -> sun.security.ssl.KeyManagerFactoryImpl$X509 aliases: [PKIX] , SunJSSE: TrustManagerFactory.SunX509 -> sun.security.ssl.TrustManagerFactoryImpl$SimpleFactory , SunJSSE: TrustManagerFactory.PKIX -> sun.security.ssl.TrustManagerFactoryImpl$PKIXFactory aliases: [SunPKIX, X509, X.509] , SunJSSE: SSLContext.TLSv1 -> sun.security.ssl.SSLContextImpl$TLS10Context aliases: [SSLv3] , SunJSSE: SSLContext.TLSv1.1 -> sun.security.ssl.SSLContextImpl$TLS11Context , SunJSSE: SSLContext.TLSv1.2 -> sun.security.ssl.SSLContextImpl$TLS12Context , SunJSSE: SSLContext.TLS -> sun.security.ssl.SSLContextImpl$TLSContext aliases: [SSL] , SunJSSE: SSLContext.Default -> sun.security.ssl.SSLContextImpl$DefaultSSLContext , SunJ 别名：[1.2.840.113549.1.1.5，OID.1.2.840.113549.1.1.5、1.3.14.3.2.29，OID.1.3.14.3.2.29]，SunJSSE：Signature.MD5和SHA1withRSA-> sun.security.ssl.RSASignature ，SunJSSE：KeyManagerFactory.SunX509-> sun.security.ssl.KeyManagerFactoryImpl $ SunX509，SunJSSE：KeyManagerFactory.NewSunX509-> sun.security.ssl.KeyManagerFactoryImpl $ X509别名：[PKIX]，SunJSSE：TrustManagerFactory.SunX509-> sun.security .ssl.TrustManagerFactoryImpl $ SimpleFactory，SunJSSE：TrustManagerFactory.PKIX-> sun.security.ssl.TrustManagerFactoryImpl $ PKIXFactory别名：[SunPKIX，X509，X.509]，SunJSSE：SSLContext.TLSv1-> sun.security.ssl.SSLContextImpl $ TLS10Context别名：[SSLv3]，SunJSSE：SSLContext.TLSv1.1-> sun.security.ssl.SSLContextImpl $ TLS11Context，SunJSSE：SSLContext.TLSv1.2-> sun.security.ssl.SSLContextImpl $ TLS12Context，SunJSSE：SSLContext.TLS -> sun.security.ssl.SSLContextImpl $ TLSContext别名：[SSL]，SunJSSE：SSLContext.Default-> sun.security.ssl.SSLContextImpl $ DefaultSSLContext，SunJ SSE: KeyStore.PKCS12 -> sun.security.pkcs12.PKCS12KeyStore ] java.ext.dirs: C:\\Java\\jre8\\lib\\ext;C:\\Windows\\Sun\\Java\\lib\\ext 27-Jan-2016 11:50:57.371 INFO [pool-3-thread-1] com.microsoft.sqlserver.jdbc.TDSChannel.enableSSL java.security path: C:\\Java\\jre8\\lib\\security Security providers: [SUN version 1.8, SunRsaSign version 1.8, SunEC version 1.8, SunJSSE version 1.8, SunJCE version 1.8, SunJGSS version 1.8, SunSASL version 1.8, XMLDSig version 1.8, SunPCSC version 1.8, SunMSCAPI version 1.8] SSLContext provider info: Sun JSSE provider(PKCS12, SunX509/PKIX key/trust factories, SSLv3/TLSv1/TLSv1.1/TLSv1.2) SSLContext provider services: [SunJSSE: KeyFactory.RSA -> sun.security.rsa.RSAKeyFactory aliases: [1.2.840.113549.1.1, OID.1.2.840.113549.1.1] , SunJSSE: KeyPairGenerator.RSA -> sun.security.rsa.RSAKeyPairGenerator SSE：KeyStore.PKCS12-> sun.security.pkcs12.PKCS12KeyStore] java.ext.dirs：C：\\ Java \\ jre8 \\ lib \\ ext; C：\\ Windows \\ Sun \\ Java \\ lib \\ ext 2016年1月27日11 ：50：57.371信息[pool-3-thread-1] com.microsoft.sqlserver.jdbc.TDSChannel.enableSSL java.security路径：C：\\ Java \\ jre8 \\ lib \\ security安全提供程序：[SUN版本1.8，SunRsaSign版本1.8，SunEC版本1.8，SunJSSE版本1.8，SunJCE版本1.8，SunJGSS版本1.8，SunSASL版本1.8，XMLDSig版本1.8，SunPCSC版本1.8，SunMSCAPI版本1.8] SSLContext提供程序信息：Sun JSSE提供程序（PKCS12，SunX509 / PKIX密钥/信任工厂，SSLv3 / TLSv1 / TLSv1.1 / TLSv1.2）SSLContext提供程序服务：[SunJSSE：KeyFactory.RSA-> sun.security.rsa.RSAKeyFactory别名：[1.2.840.113549.1.1，OID.1.2.840.113549.1.1] ，SunJSSE：KeyPairGenerator.RSA-> sun.security.rsa.RSAKeyPairGenerator
aliases: [1.2.840.113549.1.1, OID.1.2.840.113549.1.1] , SunJSSE: Signature.MD2withRSA -> sun.security.rsa.RSASignature$MD2withRSA 别名：[1.2.840.113549.1.1，OID.1.2.840.113549.1.1]，SunJSSE：Signature.MD2withRSA-> sun.security.rsa.RSASignature $ MD2withRSA
aliases: [1.2.840.113549.1.1.2, OID.1.2.840.113549.1.1.2] , SunJSSE: Signature.MD5withRSA -> sun.security.rsa.RSASignature$MD5withRSA 别名：[1.2.840.113549.1.1.2，OID.1.2.840.113549.1.1.2]，SunJSSE：Signature.MD5withRSA-> sun.security.rsa.RSASignature $ MD5withRSA
aliases: [1.2.840.113549.1.1.4, OID.1.2.840.113549.1.1.4] , SunJSSE: Signature.SHA1withRSA -> sun.security.rsa.RSASignature$SHA1withRSA 别名：[1.2.840.113549.1.1.4，OID.1.2.840.113549.1.1.4]，SunJSSE：Signature.SHA1withRSA-> sun.security.rsa.RSASignature $ SHA1withRSA
aliases: [1.2.840.113549.1.1.5, OID.1.2.840.113549.1.1.5, 1.3.14.3.2.29, OID.1.3.14.3.2.29] , SunJSSE: Signature.MD5andSHA1withRSA -> sun.security.ssl.RSASignature , SunJSSE: KeyManagerFactory.SunX509 -> sun.security.ssl.KeyManagerFactoryImpl$SunX509 , SunJSSE: KeyManagerFactory.NewSunX509 -> sun.security.ssl.KeyManagerFactoryImpl$X509 aliases: [PKIX] , SunJSSE: TrustManagerFactory.SunX509 -> sun.security.ssl.TrustManagerFactoryImpl$SimpleFactory , SunJSSE: TrustManagerFactory.PKIX -> sun.security.ssl.TrustManagerFactoryImpl$PKIXFactory aliases: [SunPKIX, X509, X.509] , SunJSSE: SSLContext.TLSv1 -> sun.security.ssl.SSLContextImpl$TLS10Context aliases: [SSLv3] , SunJSSE: SSLContext.TLSv1.1 -> sun.security.ssl.SSLContextImpl$TLS11Context , SunJSSE: SSLContext.TLSv1.2 -> sun.security.ssl.SSLContextImpl$TLS12Context , SunJSSE: SSLContext.TLS -> sun.security.ssl.SSLContextImpl$TLSContext aliases: [SSL] , SunJSSE: SSLContext.Default -> sun.security.ssl.SSLContextImpl$DefaultSSLContext , SunJ 别名：[1.2.840.113549.1.1.5，OID.1.2.840.113549.1.1.5、1.3.14.3.2.29，OID.1.3.14.3.2.29]，SunJSSE：Signature.MD5和SHA1withRSA-> sun.security.ssl.RSASignature ，SunJSSE：KeyManagerFactory.SunX509-> sun.security.ssl.KeyManagerFactoryImpl $ SunX509，SunJSSE：KeyManagerFactory.NewSunX509-> sun.security.ssl.KeyManagerFactoryImpl $ X509别名：[PKIX]，SunJSSE：TrustManagerFactory.SunX509-> sun.security .ssl.TrustManagerFactoryImpl $ SimpleFactory，SunJSSE：TrustManagerFactory.PKIX-> sun.security.ssl.TrustManagerFactoryImpl $ PKIXFactory别名：[SunPKIX，X509，X.509]，SunJSSE：SSLContext.TLSv1-> sun.security.ssl.SSLContextImpl $ TLS10Context别名：[SSLv3]，SunJSSE：SSLContext.TLSv1.1-> sun.security.ssl.SSLContextImpl $ TLS11Context，SunJSSE：SSLContext.TLSv1.2-> sun.security.ssl.SSLContextImpl $ TLS12Context，SunJSSE：SSLContext.TLS -> sun.security.ssl.SSLContextImpl $ TLSContext别名：[SSL]，SunJSSE：SSLContext.Default-> sun.security.ssl.SSLContextImpl $ DefaultSSLContext，SunJ SSE: KeyStore.PKCS12 -> sun.security.pkcs12.PKCS12KeyStore ] java.ext.dirs: C:\\Java\\jre8\\lib\\ext;C:\\Windows\\Sun\\Java\\lib\\ext SSE：KeyStore.PKCS12-> sun.security.pkcs12.PKCS12KeyStore] java.ext.dirs：C：\\ Java \\ jre8 \\ lib \\ ext; C：\\ Windows \\ Sun \\ Java \\ lib \\ ext

1 个解决方案

It might help to get more details ssl debug information. 可能有助于获取更多详细信息ssl调试信息。 See http://docs.oracle.com/javase/7/docs/technotes/guides/security/jsse/ReadDebug.html on how to enable very detailed ssl logging. 有关如何启用非常详细的ssl日志记录，请参见http://docs.oracle.com/javase/7/docs/technotes/guides/security/jsse/ReadDebug.html 。 The output should hopefully show more information on what it's doing and why it's taking so long. 希望输出应该显示有关它在做什么以及为什么需要这么长时间的更多信息。