CamelJettyWebSocketServer，致命错误:42:空证书链

] [read] MD5 and SHA1 hashes: len = 1156 0000: 0B ...
F..T * ECDH ServerKeyExchange Signature Algorithm SHA512withRSA Server key: Sun EC public key, 256 bits public x coord: 28847400382242897438936230468661390225193273270317541849731947641016598202380 public y coord: 44672647556933576846980891280419719564112470643460642037901420136126664747387 parameters: secp256r1 [NIST P-256, X9.62 prime256v1] (1.2.840.10045.3.1.7) [read] MD5 and SHA1 hashes: len = 333 0000: ... CertificateRequest Cert Types: RSA, DSS, ECDSA Supported Signature Algorithms: SHA512withECDSA, SHA512withRSA, SHA384withECDSA, SHA384withRSA, SHA256withECDSA, SHA256withRSA, SHA256withDSA, SHA224withECDSA, SHA224withRSA, SHA224withDSA, SHA1withECDSA, SHA1withRSA, SHA1withDSA Cert Authorities: [read] MD5 and SHA1 hashes: ... ServerHelloDone [read] MD5 and SHA1 hashes: len = 4 0000: 0E 00 00 00 .... Warning: no suitable certificate found - continuing without client authentication * Certificate chain

* ECDHClientKeyExchange ECDH 公共值:{ ... 完成 verify_data: { 99, 243, 110, 215, 154, 6, 238, 190, 185, 65, 205, 89 } [write] MD5 和 SHA1 哈希:len = 16 0000: 14 00 00 0C 63 F3 6E D7 9A 06 EE BE B9 41 CD 59 ....c.n......A.Y 之前填充的明文加密:len = 96 0000:...
LC 08:41:11.655[CamelJettyWebSocketServer-31-selector-ServerConnectorManager@3fcdcf/0]调试 org.eclipse.jetty.io.SelectorManager - 选择器循环被唤醒从选择，1/1 选择 08:41:11.655[CamelJettyWebSocketServer-31-selector-ServerConnectorManager@3fcdcf/0]调试 org.eclipse.jetty.io.SelectChannelEndPoint - 主要兴趣更新 1 -> 0SelectChannelEndPoint@37823e21{/127.0.0.1:37052<->9292,Open,in,out,R,-,177/30000,SslConnection}{io=1,kio=0,kro=1}08:41:11.655[CamelJettyWebSocketServer-31-selector-ServerConnectorManager@3fcdcf/0]调试 org.eclipse.jetty.io.SelectChannelEndPoint - 本地兴趣更新 1 -> 0 为SelectChannelEndPoint@37823e21{/127.0.0.1:37052<->9292,Open,in,out,R,-,177/30000,SslConnection}{io=0,kio=0,kro=1}08:41:11.655[CamelJettyWebSocketServer-31-selector-ServerConnectorManager@3fcdcf/0]调试 org.eclipse.jetty.io.SelectorManager - 排队更改org.eclipse.jetty.io.SelectChannelEndPoint$1@431394e9 08:41:11.655[CamelJettyWebSocketServer-31-selector-ServerConnectorManager@3fcdcf/0]调试 org.eclipse.jetty.io.AbstractConnection -FILL_INTERESTED-->填充SslConnection@3c4546fe{NEED_UNWRAP,eio=-1/-1,di=-1} ->HttpConnection@80ef4f3[FILL_INTERESTED,DecryptedEndPoint@4f49498{/127.0.0.1:37052<->9292,Open,in,out,R,-,178/30000,HttpConnection}->SelectChannelEndPoint@37823e21{/127.0.0.1:37052<->9292,Open,in,out,-,-,177/30000,SslConnection}{io=0,kio=0,kro=1}][p=HttpParser{s=START,0 of0},g=HttpGenerator{s=START},c=HttpChannelOverHttp@40d049f5{r=0,c=false,a=IDLE,uri=}]08:41:11.655[CamelJettyWebSocketServer-31-selector-ServerConnectorManager@3fcdcf/0]调试 org.eclipse.jetty.io.ssl.SslConnection - onFillable enterDecryptedEndPoint@4f49498{/127.0.0.1:37052<->9292,Open,in,out,R,-,178/30000,HttpConnection}->SelectChannelEndPoint@37823e21{/127.0.0.1:37052<->9292,Open,输入,输出,-,-,177/30000,SslConnection}{io=0,kio=0,kro=1}08:41:11.655[CamelJettyWebSocketServer-31-selector-ServerConnectorManager@3fcdcf/0]调试 org.eclipse.jetty.io.AbstractConnection -FILL_INTERESTED-->填充HttpConnection@80ef4f3[FILLING,DecryptedEndPoint@4f49498{/127.0.0.1:37052<->9292,Open,in,out,-,-,178/30000,HttpConnection}->SelectChannelEndPoint@37823e21{/127.0.0.1:37052<->9292,Open,in,out,-,-,177/30000,SslConnection}{io=0,kio=0,kro=1}][p=HttpParser{s=START,0 of0},g=HttpGenerator{s=START},c=HttpChannelOverHttp@40d049f5{r=0,c=false,a=IDLE,uri=}]08:41:11.655[CamelJettyWebSocketServer-31-selector-ServerConnectorManager@3fcdcf/0]调试 org.eclipse.jetty.io.ssl.SslConnection - onFillable 退出DecryptedEndPoint@4f49498{/127.0.0.1:37052<->9292,Open,in,out,-,-,178/30000,HttpConnection}->SelectChannelEndPoint@37823e21{/127.0.0.1:37052<->9292,Open,输入,输出,-,-,177/30000,SslConnection}{io=0,kio=0,kro=1}08:41:11.656[CamelJettyWebSocketServer-31-selector-ServerConnectorManager@3fcdcf/0]调试 org.eclipse.jetty.io.AbstractConnection - FILLING-->IDLESslConnection@3c4546fe{NEED_UNWRAP,eio=-1/-1,di=-1} ->HttpConnection@80ef4f3[FILLING,DecryptedEndPoint@4f49498{/127.0.0.1:37052<->9292,Open,in,out,-,-,178/30000,HttpConnection}->SelectChannelEndPoint@37823e21{/127.0.0.1:37052<->9292,Open,in,out,-,-,177/30000,SslConnection}{io=0,kio=0,kro=1}][p=HttpParser{s=START,0 of0},g=HttpGenerator{s=START},c=HttpChannelOverHttp@40d049f5{r=0,c=false,a=IDLE,uri=}]08:41:11.656[CamelJettyWebSocketServer-31-selector-ServerConnectorManager@3fcdcf/0]调试 org.eclipse.jetty.io.SelectorManager - 运行更改org.eclipse.jetty.io.SelectChannelEndPoint$1@431394e9 08:41:11.656[CamelJettyWebSocketServer-31-selector-ServerConnectorManager@3fcdcf/0]调试 org.eclipse.jetty.io.SelectorManager - 选择器循环等待选择 08:41:11.656 [CamelJettyWebSocketServer-40] 调试org.eclipse.jetty.server.HttpConnection -HttpConnection@80ef4f3[FILLING,DecryptedEndPoint@4f49498{/127.0.0.1:37052<->9292,Open,in,out,-,-,178/30000,HttpConnection}->SelectChannelEndPoint@37823e21{/127.0.0.1:37052<->9292,Open,in,out,-,-,177/30000,SslConnection}{io=0,kio=0,kro=1}][p=HttpParser{s=START,0 of0},g=HttpGenerator{s=START},c=HttpChannelOverHttp@40d049f5{r=0,c=false,a=IDLE,uri=}]onFillable HttpChannelState@772152e{s=IDLE i=true a=null} 08:41:11.656[CamelJettyWebSocketServer-40] 调试org.eclipse.jetty.io.ssl.SslConnection -SslConnection@3c4546fe{NEED_UNWRAP,eio=-1/-1,di=-1} ->HttpConnection@80ef4f3[FILLING,DecryptedEndPoint@4f49498{/127.0.0.1:37052<->9292,Open,in,out,-,-,179/30000,HttpConnection}->SelectChannelEndPoint@37823e21{/127.0.0.1:37052<;->9292,Open,in,out,-,-,178/30000,SslConnection}{io=0,kio=0,kro=1}][p=HttpParser{s=START,0 of0},g=HttpGenerator{s=START},c=HttpChannelOverHttp@40d049f5{r=0,c=false,a=IDLE,uri=}]填入 08:41:11.656 [CamelJettyWebSocketServer-40] DEBUGorg.eclipse.jetty.io.ChannelEndPoint - 填充 82SelectChannelEndPoint@37823e21{/127.0.0.1:37052<->9292,Open,in,out,-,-,178/30000,SslConnection}{io=0,kio=0,kro=1}[原始写入]:长度 = 6 0000:14 03 03 00 01 01
...... [原始写入]:长度 = 101 0000:......08:41:11.656 [CamelJettyWebSocketServer-40] 调试org.eclipse.jetty.io.ssl.SslConnection -SslConnection@3c4546fe{NEED_UNWRAP,eio=82/-1,di=-1} ->HttpConnection@80ef4f3[FILLING,DecryptedEndPoint@4f49498{/127.0.0.1:37052<->9292,Open,in,out,-,-,179/30000,HttpConnection}->SelectChannelEndPoint@37823e21{/127.0.0.1:37052<;->9292,Open,in,out,-,-,0/30000,SslConnection}{io=0,kio=0,kro=1}][p=HttpParser{s=START,0的0},g=HttpGenerator{s=START},c=HttpChannelOverHttp@40d049f5{r=0,c=false,a=IDLE,uri=}]填充 82 个加密字节 E5 28 74 84 36 9F 56 D8 11 0C 38.f..L.(t.6.V...8 0060: 38 2C AC 97 6C
[原始读取]:长度 = 58,..l 0000: ...CamelJettyWebSocketServer-40，阅读:TLSv1.2 握手，长度 = 7708:41:11.666 [CamelJettyWebSocketServer-40] 调试org.eclipse.jetty.io.ssl.SslConnection -SslConnection@3c4546fe{NEED_TASK,eio=0/-1,di=-1} ->HttpConnection@80ef4f3[FILLING,DecryptedEndPoint@4f49498{/127.0.0.1:37052<->9292,Open,in,out,-,-,189/30000,HttpConnection}->SelectChannelEndPoint@37823e21{/127.0.0.1:37052<->9292,打开,输入,输出,-,-,10/30000,SslConnection}{io=0,kio=0,kro=1}][p=HttpParser{s=START,0的0},g=HttpGenerator{s=START},c=HttpChannelOverHttp@40d049f5{r=0,c=false,a=IDLE,uri=}]展开状态 = OK HandshakeStatus = NEED_TASK bytesConsumed = 82bytesProduced = 0* 证书链*** CamelJettyWebSocketServer-40，致命错误:42:空证书链 javax.net.ssl.SSLHandshakeException:空证书链 %% 无效:[会话 1，TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384]

public void startTestServer() throws Exception {
    // start a simple websocket echo service
    server = new Server(PORT);
    Connector connector = new ServerConnector(server);
    server.addConnector(connector);

    ServletContextHandler ctx = new ServletContextHandler();
    ctx.setContextPath("/");
    ctx.addServlet(TestServletFactory.class.getName(), "/*");

    server.setHandler(ctx);

    server.start();
    assertTrue(server.isStarted());      
}

public void stopTestServer() throws Exception {
    server.stop();
    server.destroy();
}

@Override
public void setUp() throws Exception {

    ClassLoader classLoader = getClass().getClassLoader();
    URL trustStoreURL = classLoader.getResource("jsse/client-truststore.jks");
    System.setProperty("javax.net.ssl.trustStore", trustStoreURL.getFile());
    System.setProperty("javax.net.ssl.trustStorePassword", "password");
    startTestServer();
    super.setUp();
}

@Override
public void tearDown() throws Exception {
    super.tearDown();
    stopTestServer();
}

@Test
public void testTwoRoutes() throws Exception {
    MockEndpoint mock = getMockEndpoint("mock:result");
    mock.expectedBodiesReceived(TEST_MESSAGE);

    template.sendBody("direct:input", TEST_MESSAGE);

    mock.assertIsSatisfied();
}

private static SSLContextParameters defineClientSSLContextClientParameters() {

    KeyStoreParameters ksp = new KeyStoreParameters();
    ksp.setResource(Thread.currentThread().getContextClassLoader().getResource("jsse/client-keystore.jks").toString());
    ksp.setPassword(PWD);

    KeyManagersParameters kmp = new KeyManagersParameters();
    kmp.setKeyPassword(PWD);
    kmp.setKeyStore(ksp);

    KeyStoreParameters tsp = new KeyStoreParameters();
    tsp.setResource(Thread.currentThread().getContextClassLoader().getResource("jsse/client-truststore.jks").toString());

    tsp.setPassword(PWD);

    TrustManagersParameters tmp = new TrustManagersParameters();
    tmp.setKeyStore(tsp);

    SSLContextServerParameters scsp = new SSLContextServerParameters();
    scsp.setClientAuthentication(ClientAuthentication.REQUIRE.name());
    //scsp.setClientAuthentication(ClientAuthentication.NONE.name());

    SSLContextParameters sslContextParameters = new SSLContextParameters();
    sslContextParameters.setKeyManagers(kmp);
    sslContextParameters.setTrustManagers(tmp);
    sslContextParameters.setServerParameters(scsp);


    return sslContextParameters;
}

private static SSLContextParameters defineServerSSLContextParameters() {
    KeyStoreParameters ksp = new KeyStoreParameters();
    ksp.setResource(Thread.currentThread().getContextClassLoader().getResource("jsse/server-keystore.jks").toString());
    ksp.setPassword(PWD);

    KeyManagersParameters kmp = new KeyManagersParameters();
    kmp.setKeyPassword(PWD);
    kmp.setKeyStore(ksp);

    KeyStoreParameters tsp = new KeyStoreParameters();
    tsp.setResource(Thread.currentThread().getContextClassLoader().getResource("jsse/server-truststore.jks").toString());
    tsp.setPassword(PWD);

    TrustManagersParameters tmp = new TrustManagersParameters();
    tmp.setKeyStore(tsp);

    SSLContextServerParameters scsp = new SSLContextServerParameters();
    scsp.setClientAuthentication(ClientAuthentication.REQUIRE.name());
    //scsp.setClientAuthentication(ClientAuthentication.NONE.name());

    SSLContextParameters sslContextParameters = new SSLContextParameters();
    sslContextParameters.setKeyManagers(kmp);
    sslContextParameters.setTrustManagers(tmp);
    sslContextParameters.setServerParameters(scsp);


   return sslContextParameters;
}

@Override
protected RouteBuilder[] createRouteBuilders() throws Exception {
    RouteBuilder[] rbs = new RouteBuilder[2];

    // A consumer
    rbs[0] = new RouteBuilder() {
        public void configure() {

            // Needed to configure TLS on the client side
            WsComponent wsComponent = (WsComponent) context.getComponent("someclient");
            wsComponent.setSslContextParameters(defineClientSSLContextClientParameters());

            from("direct:input").routeId("foo")
                .log(">>> Message from direct to WebSocket Client : ${body}")
                .to("someclient://localhost:9292/echo")
                .log(">>> Message from WebSocket Client to server: ${body}");
            }
    };

    // A provider
    rbs[1] = new RouteBuilder() {
        public void configure() {

                // Needed to configure TLS on the server side
                WebsocketComponent websocketComponent = (WebsocketComponent) context.getComponent("someserver");
                websocketComponent.setSslContextParameters(defineServerSSLContextParameters());

                // This route is set to use TLS, referring to the parameters set above
                from("someserver:localhost:9292/echo")
                .log(">>> Message from WebSocket Server to mock: ${body}")
                .to("mock:result");
        }
    };
    return rbs;
}

openssl s_client -connect localhost:443 -CAfile cacert.pem -cert clientcert.pem -key clientkey.pem -state -tls1_2