getLocalCertificates() return null

Question

我正在尝试编写一个简单的SSL服务器套接字和客户端套接字程序。 首先，我得到一些真正的证书，然后我使用第一个代码为其生成密钥库。 然后我编写了服务器和客户端代码，因此我的服务器使用该密钥库作为服务器证书，但在连接和会话期间没有发送证书.getLocalCertificate(( 仅返回 null 我的密钥库生成代码：

import java.io.FileInputStream;
import java.io.FileOutputStream;
import java.io.ObjectInputStream;
import java.security.KeyStore;
import java.security.cert.CertPath;
import java.security.cert.Certificate;
import java.security.cert.CertificateFactory;
import java.security.cert.X509Certificate;
import java.util.ArrayList;
import java.util.List;
public class MainClass {
public static void main(String args[]) throws Exception {
CertificateFactory cf = CertificateFactory.getInstance("X.509");
List mylist = new ArrayList();
FileInputStream in = new FileInputStream("C:\Users\nima\Downloads\72315359_example.com.cert");
Certificate cr = cf.generateCertificate(in);
mylist.add(cr);
CertPath cp = cf.generateCertPath(mylist);
System.out.println(cp);
KeyStore ks = KeyStore.getInstance("JKS");
ks.load(null, null);
List cplist = cp.getCertificates();
Object[] o = cplist.toArray();
for (int i = 0; i < o.length; i++) {
X509Certificate c = (X509Certificate) o[i];
ks.setCertificateEntry("my" + i, c);
}
FileOutputStream output = new FileOutputStream("C:\Users\nima\Downloads\test.dat");
ks.store(output, "mypass".toCharArray());
output.close();
}
}

我的服务器代码：

import java.io.PrintStream;
import java.math.BigInteger;
import java.net.ServerSocket;
import java.net.Socket;
import java.security.cert.Certificate;
import java.security.cert.X509Certificate;
import javax.net.ssl.SSLServerSocketFactory;
import javax.net.ssl.SSLSession;
import javax.net.ssl.SSLSocket;
public class MainClass {
public static void main(String args[]) throws Exception {
System.setProperty("javax.net.ssl.keyStore", "C:\Users\nima\Downloads\test.dat");
System.setProperty("javax.net.ssl.keyStorePassword", "mypass");
SSLServerSocketFactory ssf = (SSLServerSocketFactory) SSLServerSocketFactory.getDefault();
ServerSocket ss = ssf.createServerSocket(5432);
while (true) {
Socket s = ss.accept();
SSLSession session = ((SSLSocket) s).getSession();
Certificate[] cchain2 = session.getLocalCertificates();
for (int i = 0; i < cchain2.length; i++) {
System.out.println(((X509Certificate) cchain2[i]).getSubjectDN());
}
System.out.println("Peer host is " + session.getPeerHost());
System.out.println("Cipher is " + session.getCipherSuite());
System.out.println("Protocol is " + session.getProtocol());
System.out.println("ID is " + new BigInteger(session.getId()));
System.out.println("Session created in " + session.getCreationTime());
System.out.println("Session accessed in " + session.getLastAccessedTime());
PrintStream out = new PrintStream(s.getOutputStream());
out.println("Hi");
out.close();
s.close();
}
}
}

我的客户端代码：

import java.io.BufferedReader;
import java.io.InputStreamReader;
import java.math.BigInteger;
import java.net.Socket;
import java.security.cert.Certificate;
import java.security.cert.X509Certificate;
import javax.net.ssl.SSLSession;
import javax.net.ssl.SSLSocket;
import javax.net.ssl.SSLSocketFactory;
public class MainClass {
public static void main(String args[]) throws Exception {
System.setProperty("javax.net.ssl.trustStore", "C:\Users\nima\Downloads\test.dat");
SSLSocketFactory ssf = (SSLSocketFactory) SSLSocketFactory.getDefault();
Socket s = ssf.createSocket("127.0.0.1", 5432);
SSLSession session = ((SSLSocket) s).getSession();
Certificate[] cchain = session.getPeerCertificates();
System.out.println("The Certificates used by peer");
for (int i = 0; i < cchain.length; i++) {
System.out.println(((X509Certificate) cchain[i]).getSubjectDN());
}
System.out.println("Peer host is " + session.getPeerHost());
System.out.println("Cipher is " + session.getCipherSuite());
System.out.println("Protocol is " + session.getProtocol());
System.out.println("ID is " + new BigInteger(session.getId()));
System.out.println("Session created in " + session.getCreationTime());
System.out.println("Session accessed in " + session.getLastAccessedTime());
BufferedReader in = new BufferedReader(new InputStreamReader(s.getInputStream()));
String x = in.readLine();
System.out.println(x);
in.close();
}
}

我的服务器代码来自这里，在服务器端和客户端，我从getLocalCertificate获得null。也有可能我的所有代码都是错误的。

Answer 1

(来自评论，略有扩展(

如果在握手完成之前调用SSLSocket.getSession()，它会尝试执行此操作，但如果握手失败，getSession()吞下异常并仅返回一个"nullSession"对象，该对象没有实际会话对象将具有的数据。要么 (1( 设置 syspropjavax.net.debug=ssl(在启动时，通常在命令行上使用-D(并查看它记录的内容以查看握手出了什么问题，或者 (2( 显式调用((SSLSocket)s).startHandshake()(尽管名称如此，但实际上将握手运行到完成，成功与否(并查看它抛出的内容。

特别是，如果您使用由所示的第一个代码创建的密钥库文件，该文件仅包含证书(trustedCertEntry(而不是私钥条目(同时包含私钥和证书/链(，这是SSL/TLS服务器使用任何通用和默认启用套件所必需的;此错误通常会表现为握手失败，"没有共同的密码[套件]"或"没有密码[套件]重叠"。

第二部分(没有私钥的SSL/TLS服务器不起作用(已经被问了很多次，但我不记得有任何欺骗也包括"getSession掩盖错误"部分。