使用JDK 8编译JDK 8时,Bouncycastle ALPN破碎了
我设置了我的JDK提供商 security.addprovider(new Bouncycastlefipsprovider())
。
通过以下方式将其设置在GRPC客户端中:
SslContextBuilder sslContextBuilder = SslContextBuilder.forClient()
.sslProvider(SslProvider.JDK)
.applicationProtocolConfig(new ApplicationProtocolConfig(
ApplicationProtocolConfig.Protocol.ALPN,
ApplicationProtocolConfig.SelectorFailureBehavior.NO_ADVERTISE,
ApplicationProtocolConfig.SelectedListenerFailureBehavior.ACCEPT,
Collections.singletonList("h2")));
在成功建立连接时,成功的SSL握手后,我得到了:
不可用:失败的ALPN谈判:无法找到兼容协议 频道管道:[SSLHANDLER#0,protastnegotiators $ clienttlshandler#0,writeBufferingAndExceptionHandler#0,defaultChannelPipeline $ tailContext#0]
我正在使用GRPC 1.44版本 + BC-FIPS.JAR 1.0.2版本。
通过JDK1.8.0_291.JDK运行Java 11.0.15的Java应用程序。 看起来像Bouncycastlefipsprovider,通过其SSLParamerTesutil类,以某种方式从建议的应用程序协议列表中删除“ H2”。 将GRPC版本提高到1.46无济于事。
有什么建议吗? 谢谢。
I setup my jdk provider bySecurity.addProvider(new BouncyCastleFipsProvider())
.
Set it in the Grpc client by:
SslContextBuilder sslContextBuilder = SslContextBuilder.forClient()
.sslProvider(SslProvider.JDK)
.applicationProtocolConfig(new ApplicationProtocolConfig(
ApplicationProtocolConfig.Protocol.ALPN,
ApplicationProtocolConfig.SelectorFailureBehavior.NO_ADVERTISE,
ApplicationProtocolConfig.SelectedListenerFailureBehavior.ACCEPT,
Collections.singletonList("h2")));
When trying to establish the connection, After successful ssl handshake I get:
UNAVAILABLE: Failed ALPN negotiation: Unable to find compatible protocol
Channel Pipeline: [SslHandler#0, ProtocolNegotiators$ClientTlsHandler#0, WriteBufferingAndExceptionHandler#0, DefaultChannelPipeline$TailContext#0]
I'm using grpc 1.44 version + bc-fips.jar 1.0.2 version.
Running my app by java 11.0.15 compiled by jdk1.8.0_291.jdk.
It looks like BouncyCastleFipsProvider, by its SSLParamertesUtil class, somehow remove the "h2" from the suggested application protocols list.
increasing grpc version to 1.46 didn't help.
Any suggestions please?
Thanks.
如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。

绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱,如果其他用户或者作者回复了您的评论,将不能在第一时间通知您!
发布评论