Thread-6，RECV TLSv1 ALERT：致命，handshake_failure

这段代码有什么问题，它应该信任所有主机，但它不会...

它适用于例如google.com，但没有在我的机器上本地运行的API网关服务，为什么？

SSL DEBUG OUTPUT

触发SecureRandom的种子播种SecureRandom忽略不支持的密码套件：TLS_DHE_DSS_WITH_AES_128_CBC_SHA256 ...忽略不支持的密码套件：TLS_RSA_WITH_AES_128_CBC_SHA256允许不安全的重新协商：false允许传统的hello消息：true初始握手：true是安全重新协商：false Thread-6，setSoTimeout（ 0）调用%%没有缓存的客户端会话*** ClientHello，TLSv1 RandomCookie：GMT：1434280256 bytes = {216 ... 40}会话ID：{}密码套件：[TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA，...... SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHA，SSL_RSA_WITH_RC4_128_MD5，TLS_EMPTY_RENEGOTIATION_INFO_SCSV]压缩方法：{0}扩展椭圆曲线，曲线名称：扩展ec_point_formats，格式：[未压缩] Thread-6，WRITE：TLSv1握手，长度= 163 Thread-6，READ：TLSv1 Alert，length = 2 Thread-6，RECV TLSv1 ALERT：致命，handshake_failure Thread-6，名为closeSocket（）Thread-6，处理异常：javax.net.ssl.SSLHan dshakeException：**收到致命警报：handshake_failure

**

import java.io.InputStreamReader;
import java.io.Reader;
import java.net.URL;
import java.net.URLConnection;

import javax.net.ssl.HostnameVerifier;
import javax.net.ssl.HttpsURLConnection;
import javax.net.ssl.SSLContext;
import javax.net.ssl.SSLSession;
import javax.net.ssl.TrustManager;
import javax.net.ssl.X509TrustManager;
import java.security.cert.X509Certificate;

public class ConnectHttps {
  public static void main(String[] args) throws Exception {
    /*
     *  fix for
     *    Exception in thread "main" javax.net.ssl.SSLHandshakeException:
     *       sun.security.validator.ValidatorException:
     *           PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException:
     *               unable to find valid certification path to requested target
     */
    TrustManager[] trustAllCerts = [
        [ getAcceptedIssuers: { -> null },
          checkClientTrusted: { X509Certificate[] certs, String authType -> },
          checkServerTrusted: { X509Certificate[] certs, String authType -> } ] as X509TrustManager
    ]

    SSLContext sc = SSLContext.getInstance("SSL");
    sc.init(null, trustAllCerts, new java.security.SecureRandom());
    HttpsURLConnection.setDefaultSSLSocketFactory(sc.getSocketFactory());

    // Create all-trusting host name verifier
    HostnameVerifier allHostsValid = new HostnameVerifier() {
        public boolean verify(String hostname, SSLSession session) {
          return true;
        }
    };
    // Install the all-trusting host verifier
    HttpsURLConnection.setDefaultHostnameVerifier(allHostsValid);
    /*
     * end of the fix
     */

    //URL url = new URL("https://google.com"); //WORKS
    URL url = new URL("https://localhost:8090");   // DOES NOT WORK, WHY?
    URLConnection con = url.openConnection();
    Reader reader = new InputStreamReader(con.getInputStream());
    while (true) {
      int ch = reader.read();
      if (ch==-1) {
        break;
      }
      System.out.print((char)ch);
    }
  }
}

运行the code found here它表明客户端未启用TLSv1.2：

支持的协议：5 SSLv2Hello SSLv3 TLSv1 TLSv1.1 TLSv1.2启用协议：2 SSLv3 TLSv1