ule子https入站端點

Question

我正在使用入站https端點在mule中開發一個REST Web服務。我已經使用tls-key-store和tls-server配置了https連接器（使用keytool生成了相同的）。

下面是配置文件：

    <https:connector name="httpsConnector" doc:name="HTTP\HTTPS"       validateConnections="true">
    <https:tls-key-store path="keystore.jks" keyPassword="welcome" storePassword="welcome"/>
    <https:tls-server path="truststore.jks"  storePassword="welcome"/>
    </https:connector>
    <flow name="RESTFlow1" doc:name="RESTFlow1">
    <https:inbound-endpoint exchange-pattern="request-response" host="0.0.0.0" port="8082" connector-ref="httpsConnector" doc:name="HTTPS"/>
    <jersey:resources doc:name="REST">
    <component class="com.thinxtream.rest.restWebservices"/>
    </jersey:resources>
    </flow>

客戶端是一個Flex應用程序，它連接到此Mule Rest Web服務，它給出以下錯誤：

httpsConnector.receiver.02] org.mule.exception.DefaultSystemExceptionStrategy: Caught exception in Exception Strategy: Received fatal alert: bad_certificate
javax.net.ssl.SSLHandshakeException: Received fatal alert: bad_certificate
at sun.security.ssl.Alerts.getSSLException(Unknown Source)
at sun.security.ssl.Alerts.getSSLException(Unknown Source)
at sun.security.ssl.SSLSocketImpl.recvAlert(Unknown Source)
at sun.security.ssl.SSLSocketImpl.readRecord(Unknown Source)
at sun.security.ssl.SSLSocketImpl.readDataRecord(Unknown Source)
at sun.security.ssl.AppInputStream.read(Unknown Source)
at sun.security.ssl.AppInputStream.read(Unknown Source)
at org.apache.commons.httpclient.HttpParser.readRawLine(HttpParser.java:78)
at org.apache.commons.httpclient.HttpParser.readLine(HttpParser.java:106)
at org.mule.transport.http.HttpServerConnection.readLine(HttpServerConnection.java:219)
at org.mule.transport.http.HttpServerConnection.readRequest(HttpServerConnection.java:185)
at org.mule.transport.http.HttpMessageReceiver$HttpWorker.run(HttpMessageReceiver.java:155)
at org.mule.work.WorkerContext.run(WorkerContext.java:311)
at java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source)
at java.lang.Thread.run(Unknown Source)

flex應用程序上也有任何配置嗎？

Answer 1

如果您自己創建了服務器端證書，則該證書可能是自簽名的，也可能是使用您自己的CA證書簽名的。 客戶端需要信任簽名證書或服務器證書本身。 為此，您需要將服務器證書（鏈）導入到客戶端使用的信任庫中。