如何修复“驱动程序无法使用安全套接字层 (SSL) 加密与 SQL Server 建立安全连接”错误

Question

I am trying to connect MS SQL server 2016 through java. I am using JDK1.8 and mssql-jdbc-7.2.1.jre8.jar file.

public class ConnectToMSSQL {
    public static void main(String[] args) {
        String connectionURL = "jdbc:sqlserver://localhost:1433;databaseName=TestSQL;user=sa;password=password";
        try {
            Class.forName("com.microsoft.sqlserver.jdbc.SQLServerDriver");
            Connection connection = DriverManager.getConnection(connectionURL);
            if (connection != null) {
                System.out.println("Connected");
            }
        } catch (Exception e) {
            e.printStackTrace();
        }
    }
}

While running the above code, got the below error, how to fix this?

com.microsoft.sqlserver.jdbc.SQLServerException: The driver could not establish a secure connection to SQL Server by using Secure Sockets Layer (SSL) encryption. Error: "RSA premaster secret error". ClientConnectionId:8438be77-02cd-4d82-b84d-16c0045ac415
    at com.microsoft.sqlserver.jdbc.SQLServerConnection.terminate(SQLServerConnection.java:2887)
    at com.microsoft.sqlserver.jdbc.TDSChannel.enableSSL(IOBuffer.java:1881)
    at com.microsoft.sqlserver.jdbc.SQLServerConnection.connectHelper(SQLServerConnection.java:2452)
    at com.microsoft.sqlserver.jdbc.SQLServerConnection.login(SQLServerConnection.java:2103)
    at com.microsoft.sqlserver.jdbc.SQLServerConnection.connectInternal(SQLServerConnection.java:1950)
    at com.microsoft.sqlserver.jdbc.SQLServerConnection.connect(SQLServerConnection.java:1162)
    at com.microsoft.sqlserver.jdbc.SQLServerDriver.connect(SQLServerDriver.java:735)
    at java.sql.DriverManager.getConnection(Unknown Source)
    at java.sql.DriverManager.getConnection(Unknown Source)
    at database.ConnectToMSSQL.main(ConnectToMSSQL.java:12)
Caused by: javax.net.ssl.SSLKeyException: RSA premaster secret error
    at sun.security.ssl.RSAClientKeyExchange.<init>(Unknown Source)
    at sun.security.ssl.ClientHandshaker.serverHelloDone(Unknown Source)
    at sun.security.ssl.ClientHandshaker.processMessage(Unknown Source)
    at sun.security.ssl.Handshaker.processLoop(Unknown Source)
    at sun.security.ssl.Handshaker.process_record(Unknown Source)
    at sun.security.ssl.SSLSocketImpl.readRecord(Unknown Source)
    at sun.security.ssl.SSLSocketImpl.performInitialHandshake(Unknown Source)
    at sun.security.ssl.SSLSocketImpl.startHandshake(Unknown Source)
    at sun.security.ssl.SSLSocketImpl.startHandshake(Unknown Source)
    at com.microsoft.sqlserver.jdbc.TDSChannel.enableSSL(IOBuffer.java:1799)
    ... 8 more
Caused by: java.security.NoSuchAlgorithmException: SunTls12RsaPremasterSecret KeyGenerator not available
    at javax.crypto.KeyGenerator.<init>(KeyGenerator.java:169)
    at javax.crypto.KeyGenerator.getInstance(KeyGenerator.java:223)
    at sun.security.ssl.JsseJce.getKeyGenerator(Unknown Source)
    ... 18 more

Answer 1

It is working fine now. Just I have done the following: in Eclipse > Window > Preferences > Java > Installed JREs > removed and added the same JDK path, now it is working fine.

Answer 2

You should use logging. First create a logging property file:

handlers= java.util.logging.ConsoleHandler, java.util.logging.FileHandler
.level= FINEST
java.util.logging.ConsoleHandler.level= FINEST
java.util.logging.FileHandler.level= FINEST
java.util.logging.FileHandler.pattern=%t/edpLog%u%g.log
java.util.logging.ConsoleHandler.formatter = java.util.logging.XmlFormatter
java.util.logging.FileHandler.formatter = java.util.logging.XmlFormatter
com.microsoft.sqlserver.jdbc.TDSChannel.level = FINEST
com.microsoft.sqlserver.jdbc.TDSReader.level = FINEST
com.microsoft.sqlserver.jdbc.TDSWriter.level = FINEST
com.microsoft.sqlserver.jdbc.TDS.DATA.level = FINEST

The %t in %t/edpLog%u%g.log means the log file will be saved to your systems temporary folder.

Next add the logging class to your class.

import  java.util.logging.*;

public class ConnectToMSSQL {

 private static Logger logger;
  static {
      System.setProperty("java.util.logging.config.file",  "C:\\Path\\To\\Log\\Property\\File\\logging.properties");
      logger =  Logger.getLogger(ConnectToMSSQL.class.getName());
   }

    public static void main(String[] args) {
    ....
    }
}

You should get a log file and the output sent to your console. It's going to be quite verbose, so good luck.