记一次TrustAnchor with subject异常解决

最新推荐文章于 2024-03-02 03:05:44 发布

原创

最新推荐文章于 2024-03-02 03:05:44 发布 · 1.2k 阅读

2 ·

CC 4.0 BY-SA版权

文章标签：

#java #服务器

本文讲述了在升级JDK到1.8.0.273后遇到的SSLHandshakeException，原因在于JDK对CA证书验证严格。提供了规避和根本解决方案，包括临时禁用校验和修改CA证书属性。

新部署的ARM环境报如下异常（更新了JDK到1.8.0.273）：

io.netty.handler.codec.DecoderException: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path validation failed: sun.security.validator.ValidatorException: TrustAnchor with subject "CN=rootca, OU=cn, O=ww, L=hz, ST=zj, C=cn" is not a CA certificate
   at io.netty.handler.codec.ByteToMessageDecoder.callDecode(ByteToMessageDecoder.java:442)
   at io.netty.handler.codec.ByteToMessageDecoder.channelRead(ByteToMessageDecoder.java:248)
   at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:357)
   at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:343)
   at io.netty.channel.AbstractChannelHandlerContext.fireChannelRead(AbstractChannelHandlerContext.java:336)
   at io.netty.channel.DefaultChannelPipeline$HeadContext.channelRead(DefaultChannelPipeline.java:1294)
   at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:357)
   at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:343)
   at i