简体繁体 English

JDK 11. javax.net.ssl.SSLPeerUnverifiedException：对等方未通过身份验证

[英]JDK 11. javax.net.ssl.SSLPeerUnverifiedException: peer not authenticated

原文 2019-03-12 18:27:30 8 1 java/ ssl/ facebook-graph-api/ java-11

I'm migrating our platform to JDK 11, and one of the services has the following issue when calling to graph.facebook.com API: 我正在将平台迁移到JDK 11，并且在调用graph.facebook.com API时，其中一项服务存在以下问题：

org.springframework.web.client.ResourceAccessException: I/O error on GET request for " https://graph.facebook.com/v3.1/xxxxx/adaccounts ": peer not authenticated; org.springframework.web.client.ResourceAccessException：“ https://graph.facebook.com/v3.1/xxxxx/adaccounts ”的GET请求出现I / O错误：对等方未通过身份验证； nested exception is javax.net.ssl.SSLPeerUnverifiedException: peer not authenticated... Caused by: javax.net.ssl.SSLPeerUnverifiedException: peer not authenticated 嵌套的异常是javax.net.ssl.SSLPeerUnverifiedException：对等方未认证...原因：javax.net.ssl.SSLPeerUnverifiedException：对等方未认证

I've checked ca-certs on the machine, everything looks fine: 我已经在机器上检查了ca-certs，一切看起来都很好：

ca-certificates is already the newest version (20180409). ca-certificates已经是最新版本（20180409）。 0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded. 0已升级，0新安装，0已删除和0未升级。

1 个解决方案

You might try updating OpenJDK to 11.0.3 or higher. 您可以尝试将OpenJDK更新到11.0.3或更高版本。

I recently had a SSLPeerUnverifiedException show up sporadically in an app on 11.0.2, along with an occasional SSLException: No PSK available. Unable to resume. 最近，我在11.0.2的应用程序中偶尔显示了SSLPeerUnverifiedException以及偶尔的SSLException: No PSK available. Unable to resume. SSLException: No PSK available. Unable to resume. failure. 失败。 The latter seems to be from a known bug in JDK 11.0.2. 后者似乎来自JDK 11.0.2中的一个已知错误。 When I updated to 11.0.4, both problems disappeared. 当我更新到11.0.4时，两个问题都消失了。