從套接字讀取/解密時發生java.io.EOFException

Question

我有一個很大的客戶端服務器程序。

但是，如果我發送一個加密的程序包，則在嘗試接收和解密它時會導致java.io.EOFException 。

如果我使用非加密方式（例如ping），則可以正常工作。

客戶端代碼 （接收）：

InputStream is = subChannel.getInputStream();
ObjectInputStream pre = new ObjectInputStream(is);
ObjectInputStream ois;
boolean crypt = (boolean) pre.readObject();

if (crypt) {
    ois = new ObjectInputStream(SimpleAES.decryptInputStream(c.getAesKey(), is));
} else {
    ois = new ObjectInputStream(is);
}

Response<? extends Serializable> res = (Response<? extends Serializable>) ois.readObject();
req.onResponse(res);
is.close();

subChannel是一個單獨連接的套接字。

我知道我得到了答復，這不可能是錯誤。

SimpleAES

private final static byte[] iv = new byte[16];
private static final String TRANSFORMATION = "AES/CBC/NoPadding";

public static CipherOutputStream cryptOutputStream(SecretKey key,OutputStream os) throws InvalidKeyException, InvalidAlgorithmParameterException, NoSuchAlgorithmException, NoSuchPaddingException {
        Cipher cipher = Cipher.getInstance(TRANSFORMATION);
        IvParameterSpec ivspec = new IvParameterSpec(iv);
        cipher.init(Cipher.ENCRYPT_MODE, key, ivspec);
        CipherOutputStream out = new CipherOutputStream(os, cipher);
        return out;
}

public static CipherInputStream decryptInputStream(SecretKey key,InputStream os) throws InvalidKeyException, InvalidAlgorithmParameterException, NoSuchAlgorithmException, NoSuchPaddingException {
        Cipher cipher = Cipher.getInstance(TRANSFORMATION);
        IvParameterSpec ivspec = new IvParameterSpec(iv);
        cipher.init(Cipher.DECRYPT_MODE, key, ivspec);
        CipherInputStream out = new CipherInputStream(os, cipher);
        return out;
}

服務器代碼 （發送）：

OutputStream base;
base = sock.getOutputStream();

ObjectOutputStream infoStream = new ObjectOutputStream(base);

infoStream.writeObject(pack.isEncrypted());
ObjectOutputStream packageStream;

if (pack.isEncrypted()) {
    String tolken = pack.getClientTolken();
    Session s = getSession(tolken);
    packageStream = new ObjectOutputStream(SimpleAES.cryptOutputStream(s.getAesKey(), base));
}
else
    packageStream = new ObjectOutputStream(base);

packageStream.writeObject(pack);
packageStream.flush();

if (pack instanceof Request) {
    InputStream baseIn = sock.getInputStream();
    ObjectInputStream res;

    if (pack.isEncrypted()) {
        res = new ObjectInputStream(SimpleAES.decryptInputStream(getSession(pack.getClientTolken()).getAesKey(), baseIn));
    } else {
        res = new ObjectInputStream(baseIn);
    }

    @SuppressWarnings("unchecked")
    Response<? extends Serializable> response = (Response<? extends Serializable>) res.readObject();
    ((Request) pack).onResponse(response);
    res.close();
}

base.close();

我認為堆棧跟蹤不會為您提供大量信息，但是它是：

Ping Response : 8ms
[Client] Added TolkenRequest to Query
[Client] Added RSARequest to Query
[Client] Added AESKeyPack to Query
[Client] Added ValidIdRequest to Query
java.io.EOFException
Fatal Error Exit
    at java.io.ObjectInputStream$PeekInputStream.readFully(Unknown Source)
    at java.io.ObjectInputStream$BlockDataInputStream.readShort(Unknown Source)
    at java.io.ObjectInputStream.readShort(Unknown Source)
    at java.io.ObjectStreamClass.readNonProxy(Unknown Source)
    at java.io.ObjectInputStream.readClassDescriptor(Unknown Source)
    at java.io.ObjectInputStream.readNonProxyDesc(Unknown Source)
    at java.io.ObjectInputStream.readClassDesc(Unknown Source)
    at java.io.ObjectInputStream.readOrdinaryObject(Unknown Source)
    at java.io.ObjectInputStream.readObject0(Unknown Source)
    at java.io.ObjectInputStream.defaultReadFields(Unknown Source)
    at java.io.ObjectInputStream.readSerialData(Unknown Source)
    at java.io.ObjectInputStream.readOrdinaryObject(Unknown Source)
    at java.io.ObjectInputStream.readObject0(Unknown Source)
    at java.io.ObjectInputStream.readObject(Unknown Source)
    at com.niton.tele.core.network.client.ClientListenerThread.run(ClientListenerThread.java:104)

ClientListenerThread.java:104是這一行Response res =（Response）ois.readObject（）;

Answer 1

您不能在同一套接字上混合使用不同的緩沖流。 他們將互相竊取數據。 您需要在套接字的生命周期內使用單個ObjectInputStream和ObjectOutputStream重新設計並重寫它。

可能您正在尋找SealedObject ？