简体繁体 English

SSL 握手失败，无法从 WSO2 ESB 代理服务调用 Tibco BW6 安全 API

[英]SSL handshake failure to call Tibco BW6 secured API from WSO2 ESB proxy service

原文 2016-11-04 12:40:37 7 1 ssl/ https/ wso2esb/ tibco

I have created a proxy service in WSO2 ESB 4.9.0 and I am calling a secured https API which is made in Tibco BW6.我在 WSO2 ESB 4.9.0 中创建了一个代理服务，我正在调用一个在 Tibco BW6 中制作的安全 https API。 This API is secured with SSL security.此 API 受 SSL 安全保护。 When I send my message from proxy service to Tibco API, I get SSL hand shake problem.当我从代理服务向 Tibco API 发送消息时，出现 SSL 握手问题。
Also I have imported a client.cer certificate in my jks carbon key store on my WSO2 ESB but still I am unable to send my message on API.此外，我在 WSO2 ESB 上的 jks carbon 密钥存储中导入了 client.cer 证书，但仍然无法在 API 上发送我的消息。 Note: I have no experience about SSL注意：我对 SSL 没有经验

ERROR IN LOGS: javax.net.ssl.SSLHandshakeException: General SSLEngine problem日志中的错误：javax.net.ssl.SSLHandshakeException：一般 SSLEngine 问题

1 个解决方案

You can export the server certificate via the browser.您可以通过浏览器导出服务器证书。 Then import it into the client-truststore.jks.然后将其导入 client-truststore.jks。 For trouble shooting you may have to do an SSL debug and my blog post [1] will help you doing this.对于故障排除，您可能需要进行 SSL 调试，我的博客文章 [1] 将帮助您完成此操作。

You can follow the following steps to import your server certificate into wso2esb client's keystore as follows:您可以按照以下步骤将您的服务器证书导入 wso2esb 客户端的密钥库，如下所示：

Go to backend service in your browser, and then click the HTTPS trust icon on the address bar (eg, the padlock next to the URL in Firefox).在浏览器中转到后端服务，然后单击地址栏上的 HTTPS 信任图标（例如，Firefox 中 URL 旁边的挂锁）。
View the certificate details (the steps vary by browser) and then export the trust certificate to the file system.查看证书详细信息（步骤因浏览器而异），然后将信任证书导出到文件系统。
Use the ESB Management Console or the following command to import that certificate into the ESB client keystore.使用 ESB 管理控制台或以下命令将该证书导入 ESB 客户端密钥库。 keytool -importcert -file -keystore /repository/resources/security/client-truststore.jks -alias "your-alias" keytool -importcert -file -keystore /repository/resources/security/client-truststore.jks -alias “你的别名”
Restart the server.重新启动服务器。