记一次线上异常：Certificates does not conform to algorithm constraints

最新推荐文章于 2022-09-19 11:05:39 发布

冷淡匿名嘉

最新推荐文章于 2022-09-19 11:05:39 发布

阅读量2.8k

点赞数 2

分类专栏： BUG

本文链接：https://blog.csdn.net/weixin_42330402/article/details/80510020

版权

在老系统突然发现了一个异常，在https的请求过程中抛出的，因为该业务使用的比较少，加上一直是在老系统中，监控做的并不到位，导致这个异常在现在跑了好久才被发现。

异常信息如下：

javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: Certificates does not conform to algorithm constraints 	
at sun.security.ssl.Alerts.getSSLException(Alerts.java:192) 	
at sun.security.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1884) 	
at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:276) 	
at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:270) 	
at sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1341) 	
sun.security.ssl.ClientHandshaker.processMessage(ClientHandshaker.java:153) 	
at sun.security.ssl.Handshaker.processLoop(Handshaker.java:868) 	
at sun.security.ssl.Handshaker.process_record(Handshaker.java:804) 	
at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:1016) 	
at sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1312) 	
at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1339) 	
at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1323) 	
at sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:563) 
at sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:185) 	
at sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1300) 	
at java.net.HttpURLConnection.getResponseCode(HttpURLConnection.java:468) 	
at sun.net.www.protocol.https.HttpsURLConnectionImpl.getResponseCode(HttpsURLConnectionImpl.java:338) 	
at com.netease.payments.v20.admin.util.HttpUtil.openUrlReturnMoreMessage(HttpUtil.java:60) 	
at com.netease.payments.v20.admin.bean.SingleLookupBankOfShanghai.doCheck$sentryProxy1(SingleLookupBankOfShanghai.java:75) 	
at com.netease.payments.v20.admin.bean.SingleLookupBankOfShanghai.doCheck(SingleLookupBankOfShanghai.java) 
at com.netease.payments.v20.admin.bean.OrderProcessImp.getOrdersFromBank(OrderProcessImp.java:281) 	
at com.netease.payments.v20.admin.servlet.BatchLookupOrderServlet.doLookup(BatchLookupOrderServlet.java:169) 	
at com.netease.payments.v20.admin.servlet.BatchLookupOrderServlet.service(BatchLookupOrderServlet.java:117) 	
at javax.servlet.http.HttpServlet.service(HttpServlet.java:95) 	
at com.caucho.server