Ключевое слово в защите информации
КЛЮЧЕВОЕ СЛОВО
в защите информации
Получить ГОСТ TLS-сертификат для домена (SSL-сертификат)
Добро пожаловать, Гость! Чтобы использовать все возможности Вход или Регистрация.

Уведомление

Icon
Error

2 Страницы12>
Опции
К последнему сообщению К первому непрочитанному
Offline Dmitry2019_2019  
#1 Оставлено : 25 декабря 2019 г. 23:02:52(UTC)
Dmitry2019_2019

Статус: Новичок

Группы: Участники
Зарегистрирован: 25.12.2019(UTC)
Сообщений: 9

Здравствуйте, прошу помочь в решении проблемы.

Задача: создать веб приложение, которое будет обмениваться запросами по https с удаленным сервером. Веб-сервер установлен на Tomcat 9.0.27

Создал проект в IDE использовал. В IDE все отрабатывает корректно. Использовал Spring с предустановленным сервером Tomcat 9.0.27.
При публикации war файла получаю ошибку:

java.net.SocketException: java.lang.ClassNotFoundException: ru.CryptoPro.ssl.SSLSocketFactoryImpl
хотя есть cpSSL.jar в WEB-INF\lib

Попробовал прописать в catalina.bat в CLASSPATH путь к java-csp-5.0.40363-A. Получаю другую ошибку: Параметры не соответствуют ни алгоритму ГОСТ Р 34.10-2001, ни алгоритму

Полный лог:
24-Dec-2019 23:18:48.735 WARNING [http-nio-8080-exec-4] ru.CryptoPro.JCSP.Key.GostExchKeyPairGenerator.initialize ERROR
java.security.InvalidAlgorithmParameterException: Параметры не соответствуют ни алгоритму ГОСТ Р 34.10-2001, ни алгоритму ГОСТ Р 34.10-2012
at ru.CryptoPro.JCSP.Key.GostExchKeyPairGenerator.initialize(Unknown Source)
at ru.CryptoPro.ssl.cl_64.c(Unknown Source)
at ru.CryptoPro.ssl.cl_15.a(Unknown Source)
at ru.CryptoPro.ssl.cl_15.a(Unknown Source)
at ru.CryptoPro.ssl.cl_57.w(Unknown Source)
at ru.CryptoPro.ssl.cl_57.a(Unknown Source)
at ru.CryptoPro.ssl.SSLSocketImpl.a(Unknown Source)
at ru.CryptoPro.ssl.SSLSocketImpl.n(Unknown Source)
at ru.CryptoPro.ssl.SSLSocketImpl.b(Unknown Source)
at ru.CryptoPro.ssl.SSLSocketImpl.startHandshake(Unknown Source)
at java.base/sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:567)
at java.base/sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:185)
at java.base/sun.net.www.protocol.http.HttpURLConnection.getOutputStream0(HttpURLConnection.java:1362)
at java.base/sun.net.www.protocol.http.HttpURLConnection.getOutputStream(HttpURLConnection.java:1337)
at java.base/sun.net.www.protocol.https.HttpsURLConnectionImpl.getOutputStream(HttpsURLConnectionImpl.java:246)
at com.eprocesses.mdlp.utils.HttpsConnectionHelper.setBody(HttpsConnectionHelper.java:33)
at com.eprocesses.mdlp.web.controllers.mdlp.MdlpIncomeDocuments.getIncomeDocuments(MdlpIncomeDocuments.java:51)
at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.base/java.lang.reflect.Method.invoke(Method.java:566)
at org.springframework.web.method.support.InvocableHandlerMethod.doInvoke(InvocableHandlerMethod.java:190)
at org.springframework.web.method.support.InvocableHandlerMethod.invokeForRequest(InvocableHandlerMethod.java:138)
at org.springframework.web.servlet.mvc.method.annotation.ServletInvocableHandlerMethod.invokeAndHandle(ServletInvocableHandlerMethod.java:106)
at org.springframework.web.servlet.mvc.method.annotation.RequestMappingHandlerAdapter.invokeHandlerMethod(RequestMappingHandlerAdapter.java:888)
at org.springframework.web.servlet.mvc.method.annotation.RequestMappingHandlerAdapter.handleInternal(RequestMappingHandlerAdapter.java:793)
at org.springframework.web.servlet.mvc.method.AbstractHandlerMethodAdapter.handle(AbstractHandlerMethodAdapter.java:87)
at org.springframework.web.servlet.DispatcherServlet.doDispatch(DispatcherServlet.java:1040)
at org.springframework.web.servlet.DispatcherServlet.doService(DispatcherServlet.java:943)
at org.springframework.web.servlet.FrameworkServlet.processRequest(FrameworkServlet.java:1006)
at org.springframework.web.servlet.FrameworkServlet.doGet(FrameworkServlet.java:898)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:634)
at org.springframework.web.servlet.FrameworkServlet.service(FrameworkServlet.java:883)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:741)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:231)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
at org.apache.tomcat.websocket.server.WsFilter.doFilter(WsFilter.java:53)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:320)
at org.springframework.security.web.access.intercept.FilterSecurityInterceptor.invoke(FilterSecurityInterceptor.java:126)
at org.springframework.security.web.access.intercept.FilterSecurityInterceptor.doFilter(FilterSecurityInterceptor.java:90)
at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:334)
at org.springframework.security.web.access.ExceptionTranslationFilter.doFilter(ExceptionTranslationFilter.java:118)
at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:334)
at org.springframework.security.web.session.SessionManagementFilter.doFilter(SessionManagementFilter.java:137)
at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:334)
at org.springframework.security.web.authentication.AnonymousAuthenticationFilter.doFilter(AnonymousAuthenticationFilter.java:111)
at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:334)
at org.springframework.security.web.servletapi.SecurityContextHolderAwareRequestFilter.doFilter(SecurityContextHolderAwareRequestFilter.java:158)
at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:334)
at org.springframework.security.web.savedrequest.RequestCacheAwareFilter.doFilter(RequestCacheAwareFilter.java:63)
at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:334)
at org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter.doFilter(AbstractAuthenticationProcessingFilter.java:200)
at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:334)
at org.springframework.security.web.authentication.logout.LogoutFilter.doFilter(LogoutFilter.java:116)
at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:334)
at org.springframework.security.web.header.HeaderWriterFilter.doHeadersAfter(HeaderWriterFilter.java:92)
at org.springframework.security.web.header.HeaderWriterFilter.doFilterInternal(HeaderWriterFilter.java:77)
at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:119)
at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:334)
at org.springframework.security.web.context.SecurityContextPersistenceFilter.doFilter(SecurityContextPersistenceFilter.java:105)
at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:334)
at org.springframework.security.web.context.request.async.WebAsyncManagerIntegrationFilter.doFilterInternal(WebAsyncManagerIntegrationFilter.java:56)
at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:119)
at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:334)
at org.springframework.security.web.FilterChainProxy.doFilterInternal(FilterChainProxy.java:215)
at org.springframework.security.web.FilterChainProxy.doFilter(FilterChainProxy.java:178)
at org.springframework.web.filter.DelegatingFilterProxy.invokeDelegate(DelegatingFilterProxy.java:358)
at org.springframework.web.filter.DelegatingFilterProxy.doFilter(DelegatingFilterProxy.java:271)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
at org.springframework.web.filter.RequestContextFilter.doFilterInternal(RequestContextFilter.java:100)
at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:119)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
at org.springframework.web.filter.FormContentFilter.doFilterInternal(FormContentFilter.java:93)
at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:119)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
at org.springframework.boot.web.servlet.support.ErrorPageFilter.doFilter(ErrorPageFilter.java:128)
at org.springframework.boot.web.servlet.support.ErrorPageFilter.access$000(ErrorPageFilter.java:66)
at org.springframework.boot.web.servlet.support.ErrorPageFilter$1.doFilterInternal(ErrorPageFilter.java:103)
at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:119)
at org.springframework.boot.web.servlet.support.ErrorPageFilter.doFilter(ErrorPageFilter.java:121)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
at org.springframework.web.filter.CharacterEncodingFilter.doFilterInternal(CharacterEncodingFilter.java:201)
at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:119)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:202)
at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:96)
at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:526)
at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:139)
at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:92)
at org.apache.catalina.valves.AbstractAccessLogValve.invoke(AbstractAccessLogValve.java:678)
at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:74)
at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:343)
at org.apache.coyote.http11.Http11Processor.service(Http11Processor.java:408)
at org.apache.coyote.AbstractProcessorLight.process(AbstractProcessorLight.java:66)
at org.apache.coyote.AbstractProtocol$ConnectionHandler.process(AbstractProtocol.java:861)
at org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.doRun(NioEndpoint.java:1579)
at org.apache.tomcat.util.net.SocketProcessorBase.run(SocketProcessorBase.java:49)
at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1128)
at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:628)
at org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61)
at java.base/java.lang.Thread.run(Thread.java:834)


Попробовал включить логирование но Tomcat зависает я подозреваю из-за того используется согласно инструкции FileHandler (пример 5catalina.org.apache.juli.FileHandler.level = ALL)
А в logging.properties используется AsyncFileHandler (пример 4host-manager.org.apache.juli.AsyncFileHandler.level = FINE)


Offline Евгений Афанасьев  
#2 Оставлено : 26 декабря 2019 г. 9:48:03(UTC)
Евгений Афанасьев

Статус: Сотрудник

Группы: Участники
Зарегистрирован: 06.12.2008(UTC)
Сообщений: 3,921
Российская Федерация
Откуда: Крипто-Про

Сказал(а) «Спасибо»: 20 раз
Поблагодарили: 688 раз в 649 постах
Здравствуйте.
Можете дать адрес, куда подключаетесь? На указанном хосте/порте поддерживается ГОСТ? Нужны логи SSLLogger уровня ALL.
Offline Dmitry2019_2019  
#3 Оставлено : 26 декабря 2019 г. 13:27:49(UTC)
Dmitry2019_2019

Статус: Новичок

Группы: Участники
Зарегистрирован: 25.12.2019(UTC)
Сообщений: 9

Путь удаленной машины
https://api.sb.mdlp.crpt.ru

На данном адресе поддерживается ГОСТ
ssl_protocols: TLSv1
ssl_ciphers: GOST2012-GOST8912-GOST8912

лог крипто про:
26-Dec-2019 13:18:52.800 FINE [main] ru.CryptoPro.JCP.tools.Loader.SystemLoad.getNativeLibraryResourcePrefix Library directory: /ru/CryptoPro/JCSP/MSCAPI/libcspjni/windows/x64
26-Dec-2019 13:18:52.800 FINE [main] ru.CryptoPro.JCP.tools.Loader.SystemLoad.extractFromResourcePath Clean temp directory...
26-Dec-2019 13:18:52.800 FINEST [main] ru.CryptoPro.JCP.tools.Loader.SystemLoad.a ENTRY
26-Dec-2019 13:18:52.802 FINE [main] ru.CryptoPro.JCP.tools.Loader.SystemLoad.a Clean directory: D:\apache-tomcat-9.0.27\temp\jni-102970646
26-Dec-2019 13:18:52.803 FINEST [main] ru.CryptoPro.JCP.tools.Loader.SystemLoad.a RETURN
26-Dec-2019 13:18:52.804 FINE [main] ru.CryptoPro.JCP.tools.Loader.SystemLoad.extractFromResourcePath Get resource: ru/CryptoPro/JCSP/MSCAPI/libcspjni/windows/x64/libcspjni.dll
26-Dec-2019 13:18:52.805 FINE [main] ru.CryptoPro.JCP.tools.Loader.SystemLoad.extractFromResourcePath Read library as stream from: ru/CryptoPro/JCSP/MSCAPI/libcspjni/windows/x64/libcspjni.dll
26-Dec-2019 13:18:52.805 FINE [main] ru.CryptoPro.JCP.tools.Loader.SystemLoad.extractFromResourcePath Generate library name...
26-Dec-2019 13:18:52.806 FINE [main] ru.CryptoPro.JCP.tools.Loader.SystemLoad.extractFromResourcePath Find temporary directory...
26-Dec-2019 13:18:52.806 FINE [main] ru.CryptoPro.JCP.tools.Loader.SystemLoad.extractFromResourcePath Temporary directory: D:\apache-tomcat-9.0.27\temp\jni-102970646
26-Dec-2019 13:18:52.808 FINE [main] ru.CryptoPro.JCP.tools.Loader.SystemLoad.extractFromResourcePath Temporary library name: D:\apache-tomcat-9.0.27\temp\jni-102970646\jni-142092866.dll
26-Dec-2019 13:18:52.809 FINE [main] ru.CryptoPro.JCP.tools.Loader.SystemLoad.extractFromResourcePath Prepare reading stream...
26-Dec-2019 13:18:52.810 FINE [main] ru.CryptoPro.JCP.tools.Loader.SystemLoad.extractFromResourcePath Created temporary library: D:\apache-tomcat-9.0.27\temp\jni-102970646\jni-142092866.dll
26-Dec-2019 13:18:52.829 CONFIG [main] ru.CryptoPro.JCP.pref.JCPPref.getInt User Preference Node: /ru/CryptoPro/JCSP/params.RSAProvType_class_default=24
26-Dec-2019 13:18:52.843 CONFIG [main] ru.CryptoPro.JCP.pref.JCPPref.get User Preference Node: /ru/CryptoPro/JCSP/params.DefaultCSPProvider_2001_class_default=Crypto-Pro GOST R 34.10-2001 Cryptographic Service Provider
26-Dec-2019 13:18:52.844 CONFIG [main] ru.CryptoPro.JCP.pref.JCPPref.get User Preference Node: /ru/CryptoPro/JCSP/params.DefaultCSPProvider_2012_256_class_default=Crypto-Pro GOST R 34.10-2012 Cryptographic Service Provider
26-Dec-2019 13:18:52.844 CONFIG [main] ru.CryptoPro.JCP.pref.JCPPref.get User Preference Node: /ru/CryptoPro/JCSP/params.DefaultCSPProvider_2012_512_class_default=Crypto-Pro GOST R 34.10-2012 Strong Cryptographic Service Provider
26-Dec-2019 13:18:52.847 CONFIG [main] ru.CryptoPro.JCP.pref.JCPPref.get User Preference Node: /ru/CryptoPro/JCSP/params.DefaultCSPProvider_RSA_class_default=
26-Dec-2019 13:18:52.848 CONFIG [main] ru.CryptoPro.JCP.pref.JCPPref.getInt User Preference Node: /ru/CryptoPro/JCSP/params.KeySet_class_default=0
26-Dec-2019 13:18:52.849 CONFIG [main] ru.CryptoPro.JCP.pref.JCPPref.getInt User Preference Node: /ru/CryptoPro/JCSP/params.NameType_class_default=0
26-Dec-2019 13:18:52.850 CONFIG [main] ru.CryptoPro.JCP.pref.JCPPref.getBoolean User Preference Node: /ru/CryptoPro/JCSP/params.add_provider_name_class_default=false
26-Dec-2019 13:18:52.866 FINE [main] ru.CryptoPro.JCP.tools.Loader.SystemLoad.deleteLibrary Delete library: D:\apache-tomcat-9.0.27\temp\jni-102970646\jni-142092866.dll
26-Dec-2019 13:18:52.867 FINEST [main] ru.CryptoPro.JCP.tools.Loader.SystemLoad.a ENTRY
26-Dec-2019 13:18:52.867 FINEST [main] ru.CryptoPro.JCP.tools.Loader.SystemLoad.a RETURN
26-Dec-2019 13:18:53.043 CONFIG [main] ru.CryptoPro.JCP.pref.JCPPref.getOID User Preference Node: /ru/CryptoPro/JCP/params.DigestParamsSpec_class_default=null
26-Dec-2019 13:18:53.044 CONFIG [main] ru.CryptoPro.JCP.pref.JCPPref.getOID User Preference Node: /ru/CryptoPro/JCP/params.DigestParamsSpec_2012_256_class_default=null
26-Dec-2019 13:18:53.044 CONFIG [main] ru.CryptoPro.JCP.pref.JCPPref.getOID User Preference Node: /ru/CryptoPro/JCP/params.DigestParamsSpec_2012_512_class_default=null
26-Dec-2019 13:18:53.053 CONFIG [main] ru.CryptoPro.JCP.pref.JCPPref.getOID User Preference Node: /ru/CryptoPro/JCP/params.AlgIdSpec_class_default=null
26-Dec-2019 13:18:53.053 CONFIG [main] ru.CryptoPro.JCP.pref.JCPPref.getOID User Preference Node: /ru/CryptoPro/JCP/params.AlgIdSpec_class_defaultDH=null
26-Dec-2019 13:18:53.053 CONFIG [main] ru.CryptoPro.JCP.pref.JCPPref.getOID User Preference Node: /ru/CryptoPro/JCP/params.AlgIdSpec_2012_256_class_default=null
26-Dec-2019 13:18:53.053 CONFIG [main] ru.CryptoPro.JCP.pref.JCPPref.getOID User Preference Node: /ru/CryptoPro/JCP/params.AlgIdSpec_2012_256_dh_class_defaultDH=null
26-Dec-2019 13:18:53.054 CONFIG [main] ru.CryptoPro.JCP.pref.JCPPref.getOID User Preference Node: /ru/CryptoPro/JCP/params.AlgIdSpec_2012_512_class_default=null
26-Dec-2019 13:18:53.054 CONFIG [main] ru.CryptoPro.JCP.pref.JCPPref.getOID User Preference Node: /ru/CryptoPro/JCP/params.AlgIdSpec_2012_512_dh_class_defaultDH=null
26-Dec-2019 13:18:53.089 INFO [main] ru.CryptoPro.ssl.Provider.b JCP license isServer: true
26-Dec-2019 13:18:53.132 FINE [main] ru.CryptoPro.JCP.KeyStore.Rutoken.RutokenReader.<init> Reader name is null
26-Dec-2019 13:18:53.132 FINE [main] ru.CryptoPro.JCP.KeyStore.Rutoken.RutokenStore.<init> RutokenStore (000) loaded. Store name null
26-Dec-2019 13:18:53.133 FINE [main] ru.CryptoPro.JCP.KeyStore.Rutoken.RutokenReader.<init> Reader name is null
26-Dec-2019 13:18:53.133 FINE [main] ru.CryptoPro.JCP.KeyStore.Rutoken.RutokenStore.<init> RutokenStore (001) loaded. Store name null
26-Dec-2019 13:18:53.134 FINE [main] ru.CryptoPro.JCP.KeyStore.Rutoken.RutokenReader.<init> Reader name is null
26-Dec-2019 13:18:53.134 FINE [main] ru.CryptoPro.JCP.KeyStore.Rutoken.RutokenStore.<init> RutokenStore (002) loaded. Store name null
26-Dec-2019 13:18:53.135 FINE [main] ru.CryptoPro.JCP.KeyStore.Rutoken.RutokenReader.<init> Reader name is null
26-Dec-2019 13:18:53.135 FINE [main] ru.CryptoPro.JCP.KeyStore.Rutoken.RutokenStore.<init> RutokenStore (003) loaded. Store name null
26-Dec-2019 13:18:53.136 FINE [main] ru.CryptoPro.JCP.KeyStore.Rutoken.RutokenReader.<init> Reader name is null
26-Dec-2019 13:18:53.136 FINE [main] ru.CryptoPro.JCP.KeyStore.Rutoken.RutokenStore.<init> RutokenStore (004) loaded. Store name null
26-Dec-2019 13:18:53.137 FINE [main] ru.CryptoPro.JCP.KeyStore.Rutoken.RutokenReader.<init> Reader name is null
26-Dec-2019 13:18:53.137 FINE [main] ru.CryptoPro.JCP.KeyStore.Rutoken.RutokenStore.<init> RutokenStore (005) loaded. Store name null
26-Dec-2019 13:18:53.137 FINE [main] ru.CryptoPro.JCP.KeyStore.Rutoken.RutokenReader.<init> Reader name is null
26-Dec-2019 13:18:53.137 FINE [main] ru.CryptoPro.JCP.KeyStore.Rutoken.RutokenStore.<init> RutokenStore (006) loaded. Store name null
26-Dec-2019 13:18:53.138 FINE [main] ru.CryptoPro.JCP.KeyStore.Rutoken.RutokenReader.<init> Reader name is null
26-Dec-2019 13:18:53.138 FINE [main] ru.CryptoPro.JCP.KeyStore.Rutoken.RutokenStore.<init> RutokenStore (007) loaded. Store name null
26-Dec-2019 13:18:53.139 FINE [main] ru.CryptoPro.JCP.KeyStore.Rutoken.RutokenReader.<init> Reader name is null
26-Dec-2019 13:18:53.139 FINE [main] ru.CryptoPro.JCP.KeyStore.Rutoken.RutokenStore.<init> RutokenStore (008) loaded. Store name null
26-Dec-2019 13:18:53.140 FINE [main] ru.CryptoPro.JCP.KeyStore.Rutoken.RutokenReader.<init> Reader name is null
26-Dec-2019 13:18:53.140 FINE [main] ru.CryptoPro.JCP.KeyStore.Rutoken.RutokenStore.<init> RutokenStore (009) loaded. Store name null
26-Dec-2019 13:18:53.142 FINER [main] ru.CryptoPro.JCP.tools.ClassConfig.convertConfig THROW
java.lang.NoClassDefFoundError: opencard/core/terminal/CardTerminalException
at ru.CryptoPro.JCP.KeyStore.OCF.OCFStore.<init>(Unknown Source)
at java.base/jdk.internal.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
at java.base/jdk.internal.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:62)
at java.base/jdk.internal.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45)
at java.base/java.lang.reflect.Constructor.newInstance(Constructor.java:490)
at java.base/java.lang.Class.newInstance(Class.java:584)
at ru.CryptoPro.JCP.tools.ClassConfig.loadClass(Unknown Source)
at ru.CryptoPro.JCP.tools.ClassConfig.convertConfig(Unknown Source)
at ru.CryptoPro.JCP.tools.ClassConfig.convert(Unknown Source)
at ru.CryptoPro.JCP.KeyStore.KeyStoreConfig.registerStoreWithoutLogger(Unknown Source)
at ru.CryptoPro.JCP.JCP.a(Unknown Source)
at ru.CryptoPro.JCP.JCP.<init>(Unknown Source)
at com.eprocesses.mdlp.spring.Crypto.initCrypto(Crypto.java:41)
at com.eprocesses.mdlp.spring.Crypto.<init>(Crypto.java:33)
at com.eprocesses.mdlp.spring.Crypto$$EnhancerBySpringCGLIB$$d7e0671c.<init>(<generated>)
at java.base/jdk.internal.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
at java.base/jdk.internal.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:62)
at java.base/jdk.internal.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45)
at java.base/java.lang.reflect.Constructor.newInstance(Constructor.java:490)
at org.springframework.beans.BeanUtils.instantiateClass(BeanUtils.java:200)
at org.springframework.beans.factory.support.SimpleInstantiationStrategy.instantiate(SimpleInstantiationStrategy.java:117)
at org.springframework.beans.factory.support.ConstructorResolver.instantiate(ConstructorResolver.java:308)
at org.springframework.beans.factory.support.ConstructorResolver.autowireConstructor(ConstructorResolver.java:293)
at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.autowireConstructor(AbstractAutowireCapableBeanFactory.java:1358)
at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.createBeanInstance(AbstractAutowireCapableBeanFactory.java:1204)
at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.doCreateBean(AbstractAutowireCapableBeanFactory.java:557)
at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.createBean(AbstractAutowireCapableBeanFactory.java:517)
at org.springframework.beans.factory.support.AbstractBeanFactory.lambda$doGetBean$0(AbstractBeanFactory.java:323)
at org.springframework.beans.factory.support.DefaultSingletonBeanRegistry.getSingleton(DefaultSingletonBeanRegistry.java:222)
at org.springframework.beans.factory.support.AbstractBeanFactory.doGetBean(AbstractBeanFactory.java:321)
at org.springframework.beans.factory.support.AbstractBeanFactory.getBean(AbstractBeanFactory.java:202)
at org.springframework.beans.factory.support.DefaultListableBeanFactory.preInstantiateSingletons(DefaultListableBeanFactory.java:879)
at org.springframework.context.support.AbstractApplicationContext.finishBeanFactoryInitialization(AbstractApplicationContext.java:878)
at org.springframework.context.support.AbstractApplicationContext.refresh(AbstractApplicationContext.java:550)
at org.springframework.boot.web.servlet.context.ServletWebServerApplicationContext.refresh(ServletWebServerApplicationContext.java:141)
at org.springframework.boot.SpringApplication.refresh(SpringApplication.java:747)
at org.springframework.boot.SpringApplication.refreshContext(SpringApplication.java:397)
at org.springframework.boot.SpringApplication.run(SpringApplication.java:315)
at org.springframework.boot.web.servlet.support.SpringBootServletInitializer.run(SpringBootServletInitializer.java:152)
at org.springframework.boot.web.servlet.support.SpringBootServletInitializer.createRootApplicationContext(SpringBootServletInitializer.java:132)
at org.springframework.boot.web.servlet.support.SpringBootServletInitializer.onStartup(SpringBootServletInitializer.java:92)
at org.springframework.web.SpringServletContainerInitializer.onStartup(SpringServletContainerInitializer.java:172)
at org.apache.catalina.core.StandardContext.startInternal(StandardContext.java:5135)
at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:183)
at org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.java:717)
at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:690)
at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:705)
at org.apache.catalina.startup.HostConfig.deployDirectory(HostConfig.java:1133)
at org.apache.catalina.startup.HostConfig$DeployDirectory.run(HostConfig.java:1867)
at java.base/java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:515)
at java.base/java.util.concurrent.FutureTask.run(FutureTask.java:264)
at org.apache.tomcat.util.threads.InlineExecutorService.execute(InlineExecutorService.java:75)
at java.base/java.util.concurrent.AbstractExecutorService.submit(AbstractExecutorService.java:118)
at org.apache.catalina.startup.HostConfig.deployDirectories(HostConfig.java:1045)
at org.apache.catalina.startup.HostConfig.deployApps(HostConfig.java:429)
at org.apache.catalina.startup.HostConfig.start(HostConfig.java:1576)
at org.apache.catalina.startup.HostConfig.lifecycleEvent(HostConfig.java:309)
at org.apache.catalina.util.LifecycleBase.fireLifecycleEvent(LifecycleBase.java:123)
at org.apache.catalina.util.LifecycleBase.setStateInternal(LifecycleBase.java:423)
at org.apache.catalina.util.LifecycleBase.setState(LifecycleBase.java:366)
at org.apache.catalina.core.ContainerBase.startInternal(ContainerBase.java:936)
at org.apache.catalina.core.StandardHost.startInternal(StandardHost.java:841)
at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:183)
at org.apache.catalina.core.ContainerBase$StartChild.call(ContainerBase.java:1384)
at org.apache.catalina.core.ContainerBase$StartChild.call(ContainerBase.java:1374)
at java.base/java.util.concurrent.FutureTask.run(FutureTask.java:264)
at org.apache.tomcat.util.threads.InlineExecutorService.execute(InlineExecutorService.java:75)
at java.base/java.util.concurrent.AbstractExecutorService.submit(AbstractExecutorService.java:140)
at org.apache.catalina.core.ContainerBase.startInternal(ContainerBase.java:909)
at org.apache.catalina.core.StandardEngine.startInternal(StandardEngine.java:262)
at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:183)
at org.apache.catalina.core.StandardService.startInternal(StandardService.java:421)
at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:183)
at org.apache.catalina.core.StandardServer.startInternal(StandardServer.java:930)
at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:183)
at org.apache.catalina.startup.Catalina.start(Catalina.java:633)
at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.base/java.lang.reflect.Method.invoke(Method.java:566)
at org.apache.catalina.startup.Bootstrap.start(Bootstrap.java:344)
at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:475)
Caused by: java.lang.ClassNotFoundException: opencard.core.terminal.CardTerminalException
at org.apache.catalina.loader.WebappClassLoaderBase.loadClass(WebappClassLoaderBase.java:1365)
at org.apache.catalina.loader.WebappClassLoaderBase.loadClass(WebappClassLoaderBase.java:1188)
... 82 more
Offline Евгений Афанасьев  
#4 Оставлено : 26 декабря 2019 г. 14:46:22(UTC)
Евгений Афанасьев

Статус: Сотрудник

Группы: Участники
Зарегистрирован: 06.12.2008(UTC)
Сообщений: 3,921
Российская Федерация
Откуда: Крипто-Про

Сказал(а) «Спасибо»: 20 раз
Поблагодарили: 688 раз в 649 постах
Включить надо логгер SSLLogger, не JCPLogger. Сейчас в логе только малозначащая и не связанная с описанной выше проблемой ошибка обращения к OCF "java.lang.NoClassDefFoundError: opencard/core/terminal/CardTerminalException".
Offline Dmitry2019_2019  
#5 Оставлено : 26 декабря 2019 г. 14:58:26(UTC)
Dmitry2019_2019

Статус: Новичок

Группы: Участники
Зарегистрирован: 25.12.2019(UTC)
Сообщений: 9

Буду признателен, если скинете ссылочку или мини инструкцию как включить этот логер.
Offline Евгений Афанасьев  
#6 Оставлено : 26 декабря 2019 г. 15:09:55(UTC)
Евгений Афанасьев

Статус: Сотрудник

Группы: Участники
Зарегистрирован: 06.12.2008(UTC)
Сообщений: 3,921
Российская Федерация
Откуда: Крипто-Про

Сказал(а) «Спасибо»: 20 раз
Поблагодарили: 688 раз в 649 постах
Общая настройка logging.properties: https://support.cryptopr...lirovnija-kriptopro-jtls - с уровнем ALL

В томкат 9 настройка может выглядеть так:

handlers = 1catalina.org.apache.juli.AsyncFileHandler, 2localhost.org.apache.juli.AsyncFileHandler, 3manager.org.apache.juli.AsyncFileHandler, 4host-manager.org.apache.juli.AsyncFileHandler, java.util.logging.ConsoleHandler, 5catalina.org.apache.juli.AsyncFileHandler

...

java.util.logging.ConsoleHandler.level = ALL
java.util.logging.ConsoleHandler.formatter = org.apache.juli.OneLineFormatter


5catalina.org.apache.juli.AsyncFileHandler.level = ALL
5catalina.org.apache.juli.AsyncFileHandler.directory = ${catalina.base}/logs
5catalina.org.apache.juli.AsyncFileHandler.prefix = cryptopro.


...

ru.CryptoPro.JCP.tools.JCPLogger.level=INFO
ru.CryptoPro.JCP.tools.JCPLogger.handlers=5catalina.org.apache.juli.AsyncFileHandler


ru.CryptoPro.ssl.SSLLogger.level=ALL
ru.CryptoPro.ssl.SSLLogger.handlers=5catalina.org.apache.juli.AsyncFileHandler

Отредактировано пользователем 26 декабря 2019 г. 15:11:19(UTC)  | Причина: Не указана

Offline Dmitry2019_2019  
#7 Оставлено : 26 декабря 2019 г. 20:26:08(UTC)
Dmitry2019_2019

Статус: Новичок

Группы: Участники
Зарегистрирован: 25.12.2019(UTC)
Сообщений: 9

Я сначала подумал что дело в экспортных ограничения на ключи, но у меня стоит java 11 и по идее ограничение на нее не распространяется
Лог:
26-Dec-2019 18:55:00.959 FINE [http-nio-8080-exec-9] ru.CryptoPro.ssl.SSLContextImpl$DefaultSSLContext.l DefaultSSLContext getDefaultKeyManager().
26-Dec-2019 18:55:00.962 INFO [http-nio-8080-exec-9] ru.CryptoPro.ssl.SSLContextImpl$DefaultSSLContext.l keyStore is :
26-Dec-2019 18:55:00.963 INFO [http-nio-8080-exec-9] ru.CryptoPro.ssl.SSLContextImpl$DefaultSSLContext.l keyStore type is : HDImageStore
26-Dec-2019 18:55:00.963 INFO [http-nio-8080-exec-9] ru.CryptoPro.ssl.SSLContextImpl$DefaultSSLContext.l keyStore provider is :
26-Dec-2019 18:55:00.963 INFO [http-nio-8080-exec-9] ru.CryptoPro.ssl.SSLContextImpl$DefaultSSLContext.l init keystore
26-Dec-2019 18:55:01.499 INFO [http-nio-8080-exec-9] ru.CryptoPro.ssl.SSLContextImpl$DefaultSSLContext.l init keymanager of type GostX509
26-Dec-2019 18:55:01.528 INFO [http-nio-8080-exec-9] ru.CryptoPro.ssl.cl_38.<init> %% adding as private keys %%
26-Dec-2019 18:55:01.529 FINE [http-nio-8080-exec-9] ru.CryptoPro.ssl.cl_38.<init> Loading key_store (Java CSP)...
26-Dec-2019 18:55:01.715 FINE [http-nio-8080-exec-9] ru.CryptoPro.ssl.cl_38.<init> Private key key_store loaded.
26-Dec-2019 18:55:01.723 FINE [http-nio-8080-exec-9] ru.CryptoPro.ssl.cl_38.<init> ***
found key for : key_store
chain [0] = [
[
Version: V3
Subject: CN=Alias, O=CryptoPro, C=RU
Signature Algorithm: 1.2.643.7.1.1.3.2, OID = 1.2.643.7.1.1.3.2

Key: 1.2.643.7.1.1.1.1
Validity: [From: Mon Dec 23 19:43:00 MSK 2019,
To: Wed Dec 23 19:43:00 MSK 2020]
Issuer: CN=Alias, O=CryptoPro, C=RU
SerialNumber: [ cce82502]

Certificate Extensions: 3
[1]: ObjectId: 2.5.29.19 Criticality=true
BasicConstraints:[
CA:true
PathLen:5
]

[2]: ObjectId: 2.5.29.37 Criticality=false
ExtendedKeyUsages [
clientAuth
]

[3]: ObjectId: 2.5.29.15 Criticality=true
KeyUsage [
DigitalSignature
Non_repudiation
Key_Encipherment
Key_Agreement
]

]
Algorithm: [1.2.643.7.1.1.3.2]
Signature:
0000: C9 7B 45 22 12 12 C6 B3 53 5C 12 5A BC 7C A0 D0 ..E"....S\.Z....
0010: 25 E8 86 D1 2D A2 C3 F8 D9 2D BA 00 F0 B4 83 63 %...-....-.....c
0020: E8 71 C1 5F 0D 9D 80 1D 1C C8 F0 6B 74 34 91 C1 .q._.......kt4..
0030: AA 76 06 BD 50 30 D0 B0 3D 50 76 57 C7 66 F8 39 .v..P0..=PvW.f.9

]
***

26-Dec-2019 18:55:01.725 INFO [http-nio-8080-exec-9] ru.CryptoPro.ssl.TrustManagerFactoryImpl.a trustStore is : D:\uc_cert
26-Dec-2019 18:55:01.725 INFO [http-nio-8080-exec-9] ru.CryptoPro.ssl.TrustManagerFactoryImpl.a trustStore type is : HDImageStore
26-Dec-2019 18:55:01.725 INFO [http-nio-8080-exec-9] ru.CryptoPro.ssl.TrustManagerFactoryImpl.a trustStore provider is :
26-Dec-2019 18:55:01.725 INFO [http-nio-8080-exec-9] ru.CryptoPro.ssl.TrustManagerFactoryImpl.a init truststore
26-Dec-2019 18:55:01.766 FINE [http-nio-8080-exec-9] ru.CryptoPro.ssl.cl_118.a
%% adding as trusted certificates %%

26-Dec-2019 18:55:01.766 FINE [http-nio-8080-exec-9] ru.CryptoPro.ssl.cl_118.a adding as trusted cert:
Subject: CN=Alias, O=CryptoPro, C=RU
Issuer: CN=Alias, O=CryptoPro, C=RU
Algorithm: GOST3410_2012_256
Serial number: 0xcce82502
Valid from Mon Dec 23 19:43:00 MSK 2019
until Wed Dec 23 19:43:00 MSK 2020

26-Dec-2019 18:55:01.767 FINE [http-nio-8080-exec-9] ru.CryptoPro.ssl.cl_118.a adding as trusted cert:
Subject: CN=CRYPTO-PRO Test Center 2, O=CRYPTO-PRO LLC, L=Moscow, C=RU, EMAILADDRESS=support@cryptopro.ru
Issuer: CN=CRYPTO-PRO Test Center 2, O=CRYPTO-PRO LLC, L=Moscow, C=RU, EMAILADDRESS=support@cryptopro.ru
Algorithm: GOST3410EL
Serial number: 0x37418882f539a5924ad44e3de002ea3c
Valid from Mon May 27 10:24:26 MSK 2019
until Sun May 26 10:34:05 MSK 2024

26-Dec-2019 18:55:01.767 INFO [http-nio-8080-exec-9] ru.CryptoPro.ssl.SSLContextImpl.engineInit SSLContextImpl init.
26-Dec-2019 18:55:01.769 INFO [http-nio-8080-exec-9] ru.CryptoPro.ssl.SSLContextImpl.engineInit trigger seeding of SecureRandom
26-Dec-2019 18:55:01.769 INFO [http-nio-8080-exec-9] ru.CryptoPro.ssl.SSLContextImpl.engineInit done seeding SecureRandom
26-Dec-2019 18:55:01.770 INFO [http-nio-8080-exec-9] ru.CryptoPro.ssl.SSLContextImpl.engineInit SSLContextImpl initialized.
26-Dec-2019 18:55:01.770 INFO [http-nio-8080-exec-9] ru.CryptoPro.ssl.SSLContextImpl$DefaultSSLContext.<init> DefaultSSLContext initialized.
26-Dec-2019 18:55:01.839 FINE [http-nio-8080-exec-9] ru.CryptoPro.ssl.SSLSessionImpl.<init> %% Initialized: [Session-1, SSL_NULL_WITH_NULL_NULL]
26-Dec-2019 18:55:01.860 FINE [http-nio-8080-exec-9] ru.CryptoPro.ssl.cl_57.a Allow unsafe renegotiation: false
Allow legacy hello messages: true
Is initial handshake: true
Is secure renegotiation: false
26-Dec-2019 18:55:01.861 FINE [http-nio-8080-exec-9] ru.CryptoPro.ssl.SSLSocketImpl.setSoTimeout http-nio-8080-exec-9, setSoTimeout(0) called
26-Dec-2019 18:55:01.864 FINE [http-nio-8080-exec-9] ru.CryptoPro.ssl.cl_15.a %% No cached client session
26-Dec-2019 18:55:01.900 FINE [http-nio-8080-exec-9] ru.CryptoPro.ssl.cl_42.f *** ClientHello, TLSv1
RandomCookie: GMT: 1577309909 bytes = { 108, 44, 88, 180, 5, 171, 54, 0, 143, 56, 174, 66, 135, 56, 97, 241, 73, 116, 10, 71, 45, 157, 51, 59, 94, 226, 207, 13 }
Session ID: {}
Cipher Suites: [TLS_CIPHER_2012, TLS_CIPHER_2001]
Compression Methods: { 0 }
Extension ext_hash_and_mac_alg_select, ext_hash_and_mac_alg_select: [48, 32, 48, 30, 48, 8, 6, 6, 42, -123, 3, 2, 2, 9, 48, 8, 6, 6, 42, -123, 3, 2, 2, 22, 48, 8, 6, 6, 42, -123, 3, 2, 2, 23]
Extension renegotiation_info, renegotiated_connection: <empty>
***

26-Dec-2019 18:55:01.902 ALL [http-nio-8080-exec-9] ru.CryptoPro.ssl.cl_72.a [write] MD5 and SHA1 hashes: len = 92
0000: 01 00 00 58 03 01 5E 04 D7 D5 6C 2C 58 B4 05 AB ...X..^...l,X...
0010: 36 00 8F 38 AE 42 87 38 61 F1 49 74 0A 47 2D 9D 6..8.B.8a.It.G-.
0020: 33 3B 5E E2 CF 0D 00 00 04 FF 85 00 81 01 00 00 3;^.............
0030: 2B FD E8 00 22 30 20 30 1E 30 08 06 06 2A 85 03 +..."0 0.0...*..
0040: 02 02 09 30 08 06 06 2A 85 03 02 02 16 30 08 06 ...0...*.....0..
0050: 06 2A 85 03 02 02 17 FF 01 00 01 00 .*..........

26-Dec-2019 18:55:01.904 ALL [http-nio-8080-exec-9] ru.CryptoPro.ssl.cl_72.a [Raw write]: length = 97
0000: 16 03 01 00 5C 01 00 00 58 03 01 5E 04 D7 D5 6C ....\...X..^...l
0010: 2C 58 B4 05 AB 36 00 8F 38 AE 42 87 38 61 F1 49 ,X...6..8.B.8a.I
0020: 74 0A 47 2D 9D 33 3B 5E E2 CF 0D 00 00 04 FF 85 t.G-.3;^........
0030: 00 81 01 00 00 2B FD E8 00 22 30 20 30 1E 30 08 .....+..."0 0.0.
0040: 06 06 2A 85 03 02 02 09 30 08 06 06 2A 85 03 02 ..*.....0...*...
0050: 02 16 30 08 06 06 2A 85 03 02 02 17 FF 01 00 01 ..0...*.........
0060: 00 .

26-Dec-2019 18:55:01.910 ALL [http-nio-8080-exec-9] ru.CryptoPro.ssl.cl_62.a [Raw read]: length = 5
0000: 16 03 01 00 51 ....Q

26-Dec-2019 18:55:01.910 ALL [http-nio-8080-exec-9] ru.CryptoPro.ssl.cl_62.a [Raw read]: length = 81
0000: 02 00 00 4D 03 01 1A A0 58 87 29 C9 7C AA 5F 19 ...M....X.)..._.
0010: 48 72 CB 2E 92 D8 B2 D9 13 30 19 88 DE 0E 80 02 Hr.......0......
0020: 27 56 E7 21 5A 23 20 74 21 55 AE 3E 44 AF 5A E1 'V.!Z# t!U.>D.Z.
0030: 19 6F 6E A9 8E EA 59 DD 92 F2 8F 77 EF 57 0E 7E .on...Y....w.W..
0040: 02 01 A6 54 B2 06 C1 FF 85 00 00 05 FF 01 00 01 ...T............
0050: 00 .

26-Dec-2019 18:55:01.911 FINER [http-nio-8080-exec-9] ru.CryptoPro.ssl.cl_62.b http-nio-8080-exec-9, READ: TLSv1 Handshake, length = 81
26-Dec-2019 18:55:01.911 FINE [http-nio-8080-exec-9] ru.CryptoPro.ssl.cl_53.<init> ServerHello sessionId: {116, 33, 85, 174, 62, 68, 175, 90, 225, 25, 111, 110, 169, 142, 234, 89, 221, 146, 242, 143, 119, 239, 87, 14, 126, 2, 1, 166, 84, 178, 6, 193}
26-Dec-2019 18:55:01.912 FINE [http-nio-8080-exec-9] ru.CryptoPro.ssl.cl_42.f *** ServerHello, TLSv1
RandomCookie: GMT: 429938567 bytes = { 41, 201, 124, 170, 95, 25, 72, 114, 203, 46, 146, 216, 178, 217, 19, 48, 25, 136, 222, 14, 128, 2, 39, 86, 231, 33, 90, 35 }
Session ID: {116, 33, 85, 174, 62, 68, 175, 90, 225, 25, 111, 110, 169, 142, 234, 89, 221, 146, 242, 143, 119, 239, 87, 14, 126, 2, 1, 166, 84, 178, 6, 193}
Cipher Suite: TLS_CIPHER_2012
Compression Method: 0
Extension renegotiation_info, renegotiated_connection: <empty>
***

26-Dec-2019 18:55:01.916 FINE [http-nio-8080-exec-9] ru.CryptoPro.ssl.SSLSessionImpl.<init> %% Initialized: [Session-1, TLS_CIPHER_2012]
26-Dec-2019 18:55:01.916 FINE [http-nio-8080-exec-9] ru.CryptoPro.ssl.cl_15.a ** TLS_CIPHER_2012
26-Dec-2019 18:55:01.917 ALL [http-nio-8080-exec-9] ru.CryptoPro.ssl.cl_62.a [read] MD5 and SHA1 hashes: len = 81
0000: 02 00 00 4D 03 01 1A A0 58 87 29 C9 7C AA 5F 19 ...M....X.)..._.
0010: 48 72 CB 2E 92 D8 B2 D9 13 30 19 88 DE 0E 80 02 Hr.......0......
0020: 27 56 E7 21 5A 23 20 74 21 55 AE 3E 44 AF 5A E1 'V.!Z# t!U.>D.Z.
0030: 19 6F 6E A9 8E EA 59 DD 92 F2 8F 77 EF 57 0E 7E .on...Y....w.W..
0040: 02 01 A6 54 B2 06 C1 FF 85 00 00 05 FF 01 00 01 ...T............
0050: 00 .

26-Dec-2019 18:55:01.918 ALL [http-nio-8080-exec-9] ru.CryptoPro.ssl.cl_62.a [Raw read]: length = 5
0000: 16 03 01 03 68 ....h

26-Dec-2019 18:55:01.919 ALL [http-nio-8080-exec-9] ru.CryptoPro.ssl.cl_62.a [Raw read]: length = 872
0000: 0B 00 03 64 00 03 61 00 03 5E 30 82 03 5A 30 82 ...d..a..^0..Z0.
0010: 03 09 A0 03 02 01 02 02 13 12 00 3E 64 57 3B 0D ...........>dW;.
0020: 85 7D E7 49 92 CC 00 01 00 3E 64 57 30 08 06 06 ...I.....>dW0...
0030: 2A 85 03 02 02 03 30 7F 31 23 30 21 06 09 2A 86 *.....0.1#0!..*.
0040: 48 86 F7 0D 01 09 01 16 14 73 75 70 70 6F 72 74 H........support
0050: 40 63 72 79 70 74 6F 70 72 6F 2E 72 75 31 0B 30 @cryptopro.ru1.0
0060: 09 06 03 55 04 06 13 02 52 55 31 0F 30 0D 06 03 ...U....RU1.0...
0070: 55 04 07 13 06 4D 6F 73 63 6F 77 31 17 30 15 06 U....Moscow1.0..
0080: 03 55 04 0A 13 0E 43 52 59 50 54 4F 2D 50 52 4F .U....CRYPTO-PRO
0090: 20 4C 4C 43 31 21 30 1F 06 03 55 04 03 13 18 43 LLC1!0...U....C
00A0: 52 59 50 54 4F 2D 50 52 4F 20 54 65 73 74 20 43 RYPTO-PRO Test C
00B0: 65 6E 74 65 72 20 32 30 1E 17 0D 31 39 31 32 31 enter 20...19121
00C0: 36 31 35 35 31 33 39 5A 17 0D 32 30 30 33 31 36 6155139Z..200316
00D0: 31 36 30 31 33 39 5A 30 1E 31 1C 30 1A 06 03 55 160139Z0.1.0...U
00E0: 04 03 0C 13 61 70 69 2E 73 62 2E 6D 64 6C 70 2E ....api.sb.mdlp.
00F0: 63 72 70 74 2E 72 75 30 81 AA 30 21 06 08 2A 85 crpt.ru0..0!..*.
0100: 03 07 01 01 01 02 30 15 06 09 2A 85 03 07 01 02 ......0...*.....
0110: 01 02 01 06 08 2A 85 03 07 01 01 02 03 03 81 84 .....*..........
0120: 00 04 81 80 23 0B E1 68 76 74 08 A5 9B B8 4B D5 ....#..hvt....K.
0130: 0B C1 21 B4 55 C0 DD 09 22 60 0D CF C2 71 42 42 ..!.U..."`...qBB
0140: 6C CF EF 05 8F 7E 6A 31 C5 25 43 B9 31 4B 08 1C l.....j1.%C.1K..
0150: 3E DD CE AD 66 02 99 B4 55 F5 C3 CB 62 D4 6E 9B >...f...U...b.n.
0160: A9 37 F2 56 0A 49 26 0B 28 13 29 1E 5F 51 FF 0D .7.V.I&.(.)._Q..
0170: 86 0F 4E EB 20 D6 A0 24 C4 64 03 E5 29 B9 B7 E4 ..N. ..$.d..)...
0180: BA 71 DF 46 40 B1 4F 54 DE B5 41 7C 4E CE EF 62 .q.F@.OT..A.N..b
0190: 72 88 83 D6 23 71 E0 FB A3 C7 55 32 3F 08 45 CF r...#q....U2?.E.
01A0: 50 15 5D 07 A3 82 01 73 30 82 01 6F 30 13 06 03 P.]....s0..o0...
01B0: 55 1D 25 04 0C 30 0A 06 08 2B 06 01 05 05 07 03 U.%..0...+......
01C0: 01 30 0B 06 03 55 1D 0F 04 04 03 02 04 30 30 1D .0...U.......00.
01D0: 06 03 55 1D 0E 04 16 04 14 96 3B BE 57 BC 25 58 ..U.......;.W.%X
01E0: D9 9D 6A A2 E1 9C 83 EA 7F 79 24 E3 5E 30 1F 06 ..j......y$.^0..
01F0: 03 55 1D 23 04 18 30 16 80 14 4E 83 3E 14 69 EF .U.#..0...N.>.i.
0200: EC 5D 7A 95 2B 5F 11 FE 37 32 16 49 55 2B 30 5C .]z.+_..72.IU+0\
0210: 06 03 55 1D 1F 04 55 30 53 30 51 A0 4F A0 4D 86 ..U...U0S0Q.O.M.
0220: 4B 68 74 74 70 3A 2F 2F 74 65 73 74 63 61 2E 63 Khttp://testca.c
0230: 72 79 70 74 6F 70 72 6F 2E 72 75 2F 43 65 72 74 ryptopro.ru/Cert
0240: 45 6E 72 6F 6C 6C 2F 43 52 59 50 54 4F 2D 50 52 Enroll/CRYPTO-PR
0250: 4F 25 32 30 54 65 73 74 25 32 30 43 65 6E 74 65 O%20Test%20Cente
0260: 72 25 32 30 32 28 31 29 2E 63 72 6C 30 81 AC 06 r%202(1).crl0...
0270: 08 2B 06 01 05 05 07 01 01 04 81 9F 30 81 9C 30 .+..........0..0
0280: 64 06 08 2B 06 01 05 05 07 30 02 86 58 68 74 74 d..+.....0..Xhtt
0290: 70 3A 2F 2F 74 65 73 74 63 61 2E 63 72 79 70 74 p://testca.crypt
02A0: 6F 70 72 6F 2E 72 75 2F 43 65 72 74 45 6E 72 6F opro.ru/CertEnro
02B0: 6C 6C 2F 74 65 73 74 2D 63 61 2D 32 30 31 34 5F ll/test-ca-2014_
02C0: 43 52 59 50 54 4F 2D 50 52 4F 25 32 30 54 65 73 CRYPTO-PRO%20Tes
02D0: 74 25 32 30 43 65 6E 74 65 72 25 32 30 32 28 31 t%20Center%202(1
02E0: 29 2E 63 72 74 30 34 06 08 2B 06 01 05 05 07 30 ).crt04..+.....0
02F0: 01 86 28 68 74 74 70 3A 2F 2F 74 65 73 74 63 61 ..(http://testca
0300: 2E 63 72 79 70 74 6F 70 72 6F 2E 72 75 2F 6F 63 .cryptopro.ru/oc
0310: 73 70 2F 6F 63 73 70 2E 73 72 66 30 08 06 06 2A sp/ocsp.srf0...*
0320: 85 03 02 02 03 03 41 00 D5 9E 6E E7 5D 1A A7 29 ......A...n.]..)
0330: 0B 65 E8 1D 93 37 79 F4 FD 07 5F DC 4C BB 7B C9 .e...7y..._.L...
0340: 79 81 1C 0B C4 64 19 71 0D 86 96 2D 81 BA 54 3B y....d.q...-..T;
0350: 9B F4 FA 92 23 3F FB 85 5F 14 E3 93 07 FF AF F5 ....#?.._.......
0360: 23 94 1C CC 69 92 52 8F #...i.R.

26-Dec-2019 18:55:01.919 FINER [http-nio-8080-exec-9] ru.CryptoPro.ssl.cl_62.b http-nio-8080-exec-9, READ: TLSv1 Handshake, length = 872
26-Dec-2019 18:55:02.036 FINE [http-nio-8080-exec-9] ru.CryptoPro.ssl.cl_42.f *** Certificate message
chain [0] = [
[
Version: V3
Subject: CN=api.sb.mdlp.crpt.ru
Signature Algorithm: 1.2.643.2.2.3, OID = 1.2.643.2.2.3

Key: 1.2.643.7.1.1.1.2
Validity: [From: Mon Dec 16 18:51:39 MSK 2019,
To: Mon Mar 16 19:01:39 MSK 2020]
Issuer: CN=CRYPTO-PRO Test Center 2, O=CRYPTO-PRO LLC, L=Moscow, C=RU, EMAILADDRESS=support@cryptopro.ru
SerialNumber: [ 12003e64 573b0d85 7de74992 cc000100 3e6457]

Certificate Extensions: 6
[1]: ObjectId: 1.3.6.1.5.5.7.1.1 Criticality=false
AuthorityInfoAccess [
[
accessMethod: caIssuers
accessLocation: URIName: http://testca.cryptopro....Test%20Center%202(1).crt
,
accessMethod: ocsp
accessLocation: URIName: http://testca.cryptopro.ru/ocsp/ocsp.srf
]
]

[2]: ObjectId: 2.5.29.35 Criticality=false
AuthorityKeyIdentifier [
KeyIdentifier [
0000: 4E 83 3E 14 69 EF EC 5D 7A 95 2B 5F 11 FE 37 32 N.>.i..]z.+_..72
0010: 16 49 55 2B .IU+
]
]

[3]: ObjectId: 2.5.29.31 Criticality=false
CRLDistributionPoints [
[DistributionPoint:
[URIName: http://testca.cryptopro....Test%20Center%202(1).crl]
]]

[4]: ObjectId: 2.5.29.37 Criticality=false
ExtendedKeyUsages [
serverAuth
]

[5]: ObjectId: 2.5.29.15 Criticality=false
KeyUsage [
Key_Encipherment
Data_Encipherment
]

[6]: ObjectId: 2.5.29.14 Criticality=false
SubjectKeyIdentifier [
KeyIdentifier [
0000: 96 3B BE 57 BC 25 58 D9 9D 6A A2 E1 9C 83 EA 7F .;.W.%X..j......
0010: 79 24 E3 5E y$.^
]
]

]
Algorithm: [1.2.643.2.2.3]
Signature:
0000: D5 9E 6E E7 5D 1A A7 29 0B 65 E8 1D 93 37 79 F4 ..n.]..).e...7y.
0010: FD 07 5F DC 4C BB 7B C9 79 81 1C 0B C4 64 19 71 .._.L...y....d.q
0020: 0D 86 96 2D 81 BA 54 3B 9B F4 FA 92 23 3F FB 85 ...-..T;....#?..
0030: 5F 14 E3 93 07 FF AF F5 23 94 1C CC 69 92 52 8F _.......#...i.R.

]
***

26-Dec-2019 18:55:02.138 FINE [http-nio-8080-exec-9] ru.CryptoPro.ssl.pc_4.cl_2.a *** Revocation parameters
com.sun.net.ssl.checkRevocation: false
com.sun.security.enableCRLDP: true
com.ibm.security.enableCRLDP: true
26-Dec-2019 18:55:02.138 FINE [http-nio-8080-exec-9] ru.CryptoPro.ssl.pc_4.cl_2.a Online certificate verification enabled.
26-Dec-2019 18:55:02.153 FINE [http-nio-8080-exec-9] ru.CryptoPro.ssl.pc_4.cl_2.a Offline certificate verification disabled. CRL timer disabled.
26-Dec-2019 18:55:02.259 FINE [http-nio-8080-exec-9] ru.CryptoPro.ssl.cl_118.a Found trusted certificate: [
[
Version: V3
Subject: CN=CRYPTO-PRO Test Center 2, O=CRYPTO-PRO LLC, L=Moscow, C=RU, EMAILADDRESS=support@cryptopro.ru
Signature Algorithm: 1.2.643.2.2.3, OID = 1.2.643.2.2.3

Key: 1.2.643.2.2.19
Validity: [From: Mon May 27 10:24:26 MSK 2019,
To: Sun May 26 10:34:05 MSK 2024]
Issuer: CN=CRYPTO-PRO Test Center 2, O=CRYPTO-PRO LLC, L=Moscow, C=RU, EMAILADDRESS=support@cryptopro.ru
SerialNumber: [ 37418882 f539a592 4ad44e3d e002ea3c]

Certificate Extensions: 5
[1]: ObjectId: 1.3.6.1.4.1.311.21.1 Criticality=false
Extension unknown: DER encoded OCTET string =
0000: 04 05 02 03 01 00 01 .......


[2]: ObjectId: 1.3.6.1.4.1.311.21.2 Criticality=false
Extension unknown: DER encoded OCTET string =
0000: 04 16 04 14 04 62 55 29 0B 0E B1 CD D1 79 7D 9A .....bU).....y..
0010: B8 C8 1F 69 9E 36 87 F3 ...i.6..


[3]: ObjectId: 2.5.29.19 Criticality=true
BasicConstraints:[
CA:true
PathLen:2147483647
]

[4]: ObjectId: 2.5.29.15 Criticality=false
KeyUsage [
DigitalSignature
Key_CertSign
Crl_Sign
]

[5]: ObjectId: 2.5.29.14 Criticality=false
SubjectKeyIdentifier [
KeyIdentifier [
0000: 4E 83 3E 14 69 EF EC 5D 7A 95 2B 5F 11 FE 37 32 N.>.i..]z.+_..72
0010: 16 49 55 2B .IU+
]
]

]
Algorithm: [1.2.643.2.2.3]
Signature:
0000: C4 C5 B2 D5 B1 3B 7F A1 28 2A 83 EE 73 73 F2 6A .....;..(*..ss.j
0010: D0 F6 68 8E 1D 5F 11 75 5A 7B 75 11 4F 03 9F 16 ..h.._.uZ.u.O...
0020: E5 EE 3E 25 58 21 52 9C 3E ED FC 4E 06 43 F1 F5 ..>%X!R.>..N.C..
0030: 41 5E 29 19 67 02 24 BB 23 DD E4 AE 58 4A 5A 48 A^).g.$.#...XJZH

]
26-Dec-2019 18:55:02.260 ALL [http-nio-8080-exec-9] ru.CryptoPro.ssl.cl_62.a [read] MD5 and SHA1 hashes: len = 872
0000: 0B 00 03 64 00 03 61 00 03 5E 30 82 03 5A 30 82 ...d..a..^0..Z0.
0010: 03 09 A0 03 02 01 02 02 13 12 00 3E 64 57 3B 0D ...........>dW;.
0020: 85 7D E7 49 92 CC 00 01 00 3E 64 57 30 08 06 06 ...I.....>dW0...
0030: 2A 85 03 02 02 03 30 7F 31 23 30 21 06 09 2A 86 *.....0.1#0!..*.
0040: 48 86 F7 0D 01 09 01 16 14 73 75 70 70 6F 72 74 H........support
0050: 40 63 72 79 70 74 6F 70 72 6F 2E 72 75 31 0B 30 @cryptopro.ru1.0
0060: 09 06 03 55 04 06 13 02 52 55 31 0F 30 0D 06 03 ...U....RU1.0...
0070: 55 04 07 13 06 4D 6F 73 63 6F 77 31 17 30 15 06 U....Moscow1.0..
0080: 03 55 04 0A 13 0E 43 52 59 50 54 4F 2D 50 52 4F .U....CRYPTO-PRO
0090: 20 4C 4C 43 31 21 30 1F 06 03 55 04 03 13 18 43 LLC1!0...U....C
00A0: 52 59 50 54 4F 2D 50 52 4F 20 54 65 73 74 20 43 RYPTO-PRO Test C
00B0: 65 6E 74 65 72 20 32 30 1E 17 0D 31 39 31 32 31 enter 20...19121
00C0: 36 31 35 35 31 33 39 5A 17 0D 32 30 30 33 31 36 6155139Z..200316
00D0: 31 36 30 31 33 39 5A 30 1E 31 1C 30 1A 06 03 55 160139Z0.1.0...U
00E0: 04 03 0C 13 61 70 69 2E 73 62 2E 6D 64 6C 70 2E ....api.sb.mdlp.
00F0: 63 72 70 74 2E 72 75 30 81 AA 30 21 06 08 2A 85 crpt.ru0..0!..*.
0100: 03 07 01 01 01 02 30 15 06 09 2A 85 03 07 01 02 ......0...*.....
0110: 01 02 01 06 08 2A 85 03 07 01 01 02 03 03 81 84 .....*..........
0120: 00 04 81 80 23 0B E1 68 76 74 08 A5 9B B8 4B D5 ....#..hvt....K.
0130: 0B C1 21 B4 55 C0 DD 09 22 60 0D CF C2 71 42 42 ..!.U..."`...qBB
0140: 6C CF EF 05 8F 7E 6A 31 C5 25 43 B9 31 4B 08 1C l.....j1.%C.1K..
0150: 3E DD CE AD 66 02 99 B4 55 F5 C3 CB 62 D4 6E 9B >...f...U...b.n.
0160: A9 37 F2 56 0A 49 26 0B 28 13 29 1E 5F 51 FF 0D .7.V.I&.(.)._Q..
0170: 86 0F 4E EB 20 D6 A0 24 C4 64 03 E5 29 B9 B7 E4 ..N. ..$.d..)...
0180: BA 71 DF 46 40 B1 4F 54 DE B5 41 7C 4E CE EF 62 .q.F@.OT..A.N..b
0190: 72 88 83 D6 23 71 E0 FB A3 C7 55 32 3F 08 45 CF r...#q....U2?.E.
01A0: 50 15 5D 07 A3 82 01 73 30 82 01 6F 30 13 06 03 P.]....s0..o0...
01B0: 55 1D 25 04 0C 30 0A 06 08 2B 06 01 05 05 07 03 U.%..0...+......
01C0: 01 30 0B 06 03 55 1D 0F 04 04 03 02 04 30 30 1D .0...U.......00.
01D0: 06 03 55 1D 0E 04 16 04 14 96 3B BE 57 BC 25 58 ..U.......;.W.%X
01E0: D9 9D 6A A2 E1 9C 83 EA 7F 79 24 E3 5E 30 1F 06 ..j......y$.^0..
01F0: 03 55 1D 23 04 18 30 16 80 14 4E 83 3E 14 69 EF .U.#..0...N.>.i.
0200: EC 5D 7A 95 2B 5F 11 FE 37 32 16 49 55 2B 30 5C .]z.+_..72.IU+0\
0210: 06 03 55 1D 1F 04 55 30 53 30 51 A0 4F A0 4D 86 ..U...U0S0Q.O.M.
0220: 4B 68 74 74 70 3A 2F 2F 74 65 73 74 63 61 2E 63 Khttp://testca.c
0230: 72 79 70 74 6F 70 72 6F 2E 72 75 2F 43 65 72 74 ryptopro.ru/Cert
0240: 45 6E 72 6F 6C 6C 2F 43 52 59 50 54 4F 2D 50 52 Enroll/CRYPTO-PR
0250: 4F 25 32 30 54 65 73 74 25 32 30 43 65 6E 74 65 O%20Test%20Cente
0260: 72 25 32 30 32 28 31 29 2E 63 72 6C 30 81 AC 06 r%202(1).crl0...
0270: 08 2B 06 01 05 05 07 01 01 04 81 9F 30 81 9C 30 .+..........0..0
0280: 64 06 08 2B 06 01 05 05 07 30 02 86 58 68 74 74 d..+.....0..Xhtt
0290: 70 3A 2F 2F 74 65 73 74 63 61 2E 63 72 79 70 74 p://testca.crypt
02A0: 6F 70 72 6F 2E 72 75 2F 43 65 72 74 45 6E 72 6F opro.ru/CertEnro
02B0: 6C 6C 2F 74 65 73 74 2D 63 61 2D 32 30 31 34 5F ll/test-ca-2014_
02C0: 43 52 59 50 54 4F 2D 50 52 4F 25 32 30 54 65 73 CRYPTO-PRO%20Tes
02D0: 74 25 32 30 43 65 6E 74 65 72 25 32 30 32 28 31 t%20Center%202(1
02E0: 29 2E 63 72 74 30 34 06 08 2B 06 01 05 05 07 30 ).crt04..+.....0
02F0: 01 86 28 68 74 74 70 3A 2F 2F 74 65 73 74 63 61 ..(http://testca
0300: 2E 63 72 79 70 74 6F 70 72 6F 2E 72 75 2F 6F 63 .cryptopro.ru/oc
0310: 73 70 2F 6F 63 73 70 2E 73 72 66 30 08 06 06 2A sp/ocsp.srf0...*
0320: 85 03 02 02 03 03 41 00 D5 9E 6E E7 5D 1A A7 29 ......A...n.]..)
0330: 0B 65 E8 1D 93 37 79 F4 FD 07 5F DC 4C BB 7B C9 .e...7y..._.L...
0340: 79 81 1C 0B C4 64 19 71 0D 86 96 2D 81 BA 54 3B y....d.q...-..T;
0350: 9B F4 FA 92 23 3F FB 85 5F 14 E3 93 07 FF AF F5 ....#?.._.......
0360: 23 94 1C CC 69 92 52 8F #...i.R.

26-Dec-2019 18:55:02.261 ALL [http-nio-8080-exec-9] ru.CryptoPro.ssl.cl_62.a [Raw read]: length = 5
0000: 16 03 01 00 04 .....

26-Dec-2019 18:55:02.261 ALL [http-nio-8080-exec-9] ru.CryptoPro.ssl.cl_62.a [Raw read]: length = 4
0000: 0E 00 00 00 ....

26-Dec-2019 18:55:02.261 FINER [http-nio-8080-exec-9] ru.CryptoPro.ssl.cl_62.b http-nio-8080-exec-9, READ: TLSv1 Handshake, length = 4
26-Dec-2019 18:55:02.262 FINE [http-nio-8080-exec-9] ru.CryptoPro.ssl.cl_42.f *** ServerHelloDone
26-Dec-2019 18:55:02.262 ALL [http-nio-8080-exec-9] ru.CryptoPro.ssl.cl_62.a [read] MD5 and SHA1 hashes: len = 4
0000: 0E 00 00 00 ....

26-Dec-2019 18:55:02.262 FINE [http-nio-8080-exec-9] ru.CryptoPro.ssl.cl_15.a Generate ephemeral key pair.
26-Dec-2019 18:55:02.262 FINER [http-nio-8080-exec-9] ru.CryptoPro.ssl.cl_64.c Ephemeral algorithm: GOST3410DHEPH_2012_512 with public key parameters: GOST3410_2012_512
26-Dec-2019 18:55:02.264 FINER [http-nio-8080-exec-9] ru.CryptoPro.ssl.cl_64.c Ephemeral key generator: GOST3410DHEPH_2012_512, provider: JCSP
26-Dec-2019 18:55:02.281 WARNING [http-nio-8080-exec-9] ru.CryptoPro.ssl.SSLSocketImpl.a http-nio-8080-exec-9, handling exception: java.io.IOException: Invalid key parameters
26-Dec-2019 18:55:02.281 FINE [http-nio-8080-exec-9] ru.CryptoPro.ssl.SSLSessionImpl.invalidate %% Invalidated: [Session-1, TLS_CIPHER_2012]
26-Dec-2019 18:55:02.282 FINE [http-nio-8080-exec-9] ru.CryptoPro.ssl.SSLSocketImpl.a http-nio-8080-exec-9, SEND TLSv1 ALERT: fatal, description = unexpected_message
26-Dec-2019 18:55:02.282 ALL [http-nio-8080-exec-9] ru.CryptoPro.ssl.cl_72.a [Raw write]: length = 7
0000: 15 03 01 00 02 02 0A .......

26-Dec-2019 18:55:02.283 FINE [http-nio-8080-exec-9] ru.CryptoPro.ssl.SSLSocketImpl.h http-nio-8080-exec-9 called closeSocket()
26-Dec-2019 18:55:02.283 FINE [http-nio-8080-exec-9] ru.CryptoPro.ssl.SSLSocketImpl.close http-nio-8080-exec-9 called close()
26-Dec-2019 18:55:02.283 FINE [http-nio-8080-exec-9] ru.CryptoPro.ssl.SSLSocketImpl.d http-nio-8080-exec-9, called closeInternal(true)
26-Dec-2019 19:24:27.995 FINE [Finalizer] ru.CryptoPro.ssl.SSLSocketImpl.close Finalizer called close()
26-Dec-2019 19:24:27.996 FINE [Finalizer] ru.CryptoPro.ssl.SSLSocketImpl.d Finalizer, called closeInternal(true)
Offline Евгений Афанасьев  
#8 Оставлено : 27 декабря 2019 г. 9:23:34(UTC)
Евгений Афанасьев

Статус: Сотрудник

Группы: Участники
Зарегистрирован: 06.12.2008(UTC)
Сообщений: 3,921
Российская Федерация
Откуда: Крипто-Про

Сказал(а) «Спасибо»: 20 раз
Поблагодарили: 688 раз в 649 постах
Цитата:

26-Dec-2019 18:55:02.264 FINER [http-nio-8080-exec-9] ru.CryptoPro.ssl.cl_64.c Ephemeral key generator: GOST3410DHEPH_2012_512, provider: JCSP
26-Dec-2019 18:55:02.281 WARNING [http-nio-8080-exec-9] ru.CryptoPro.ssl.SSLSocketImpl.a http-nio-8080-exec-9, handling exception: java.io.IOException: Invalid key parameters

Я бы еще предложил аналогичным образом включить логгер JCSP: ru.CryptoPro.JCSP.JCSPLogger
У вас bouncycastle не добавляется программно, не установлен в java.security?
Offline Dmitry2019_2019  
#9 Оставлено : 27 декабря 2019 г. 14:48:47(UTC)
Dmitry2019_2019

Статус: Новичок

Группы: Участники
Зарегистрирован: 25.12.2019(UTC)
Сообщений: 9

Если есть возможность поясните пожалуйста(или скиньте ссылку), как добавить bouncycastle программно в java.Security

Лог целиком не помещается с включенным JCSPLogger, скидываю ссылку на яндекс диск
https://yadi.sk/d/_wfoS7CtsvQfXQ

Отредактировано пользователем 27 декабря 2019 г. 14:49:25(UTC)  | Причина: Не указана

Offline Евгений Афанасьев  
#10 Оставлено : 27 декабря 2019 г. 16:20:22(UTC)
Евгений Афанасьев

Статус: Сотрудник

Группы: Участники
Зарегистрирован: 06.12.2008(UTC)
Сообщений: 3,921
Российская Федерация
Откуда: Крипто-Про

Сказал(а) «Спасибо»: 20 раз
Поблагодарили: 688 раз в 649 постах
BC не нужно добавлять, наоборот, если он есть (нужен по каким-то причинам), то он должен быть в списке провайдеров после JCP/JCSP, т.к. BC тоже содержит реализацию открытого ключа ГОСТ.
Судя по ошибке, по какой-то причине параметры открытого ключа сертификата сервера не соответствуют ожидаемым, чаще это происходит как раз из-за того, что есть еще какой-то провайдер, который умеет декодировать ГОСТ ключи.
Попробовать проверить можно так: взять сертификат с алгоритмом открытого ключа ГОСТ, декодировать его с помощью
Certificate cert = CertificateFactory.getInstance("X.509").generateCertificate(new FileInputStream("any_gost_cert.cer"));
и в отладке посмотреть, какому классу принадлежит открытый ключ cert.getPublicKey() - что-то вроде ru.CryptoPro.JCSP.GostPublicKey или нет.

Отредактировано пользователем 27 декабря 2019 г. 18:15:46(UTC)  | Причина: Не указана

RSS Лента  Atom Лента
Пользователи, просматривающие эту тему
Guest
2 Страницы12>
Быстрый переход  
Вы не можете создавать новые темы в этом форуме.
Вы не можете отвечать в этом форуме.
Вы не можете удалять Ваши сообщения в этом форуме.
Вы не можете редактировать Ваши сообщения в этом форуме.
Вы не можете создавать опросы в этом форуме.
Вы не можете голосовать в этом форуме.