EAS连接配置部署异常，Caused by: javax.net.ssl.SSLHandshakeException: Received fatal alert: handshake_failure

问题描述：

变更记录

问题现象1： EAS使用的部分JDK版本会出现调用苍穹https时报传输加密层的握手错误“Caused by: javax.net.ssl.SSLHandshakeException: Received fatal alert: handshake_failure”导致EAS连接配置部署失败，所以当苍穹从http协议切换到https协议时，需要特别慎重并在测试环境验证没有问题后再切换。

Caused by: javax.net.ssl.SSLHandshakeException: Received fatal alert: handshake_failure at com.ibm.jsse2.o.a(o.java:22) at com.ibm.jsse2.o.a(o.java:34) at com.ibm.jsse2.SSLSocketImpl.b(SSLSocketImpl.java:378) at com.ibm.jsse2.SSLSocketImpl.a(SSLSocketImpl.java:479) at com.ibm.jsse2.SSLSocketImpl.h(SSLSocketImpl.java:437) at com.ibm.jsse2.SSLSocketImpl.a(SSLSocketImpl.java:142) at com.ibm.jsse2.SSLSocketImpl.startHandshake(SSLSocketImpl.java:686) at com.ibm.net.ssl.www2.protocol.https.c.afterConnect(c.java:98) at com.ibm.net.ssl.www2.protocol.https.d.connect(d.java:13) at sun.net.www.protocol.http.HttpURLConnection.getOutputStream(HttpURLConnection.java:1026) at com.ibm.net.ssl.www2.protocol.https.b.getOutputStream(b.java:25)

Caused by: javax.net.ssl.SSLException: Received fatal alert: internal_error

at sun.security.ssl.Alerts.getSSLException(Alerts.java:208)

at sun.security.ssl.Alerts.getSSLException(Alerts.java:154)

at sun.security.ssl.SSLSocketImpl.recvAlert(SSLSocketImpl.java:1979)

at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:1086)

at sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1332)

at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1359)

at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1343)

at sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:559)

at sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:185)

at sun.net.www.protocol.http.HttpURLConnection.getOutputStream(HttpURLConnection.java:1092)

at sun.net.www.protocol.https.HttpsURLConnectionImpl.getOutputStream(HttpsURLConnectionImpl.java:250)

at kd.isc.iscb.util.misc.NetUtil.sendRequestData(NetUtil.java:521)

... 23 more

问题现象2：EAS单据反写报错( EAS-苍穹) 同步，触发日志异常

java.lang.RuntimeException: server certificate change is restricted during renegotiation

at kd.isc.iscb.util.dt.D.e(D.java:272)

at kd.isc.iscb.util.misc.NetUtil.asyncHttpInvoke(NetUtil.java:176)

at kd.isc.iscb.util.connector.server.ConnectorCallback.call(ConnectorCallback.java:129)

at kd.isc.iscb.util.connector.server.ConnectorCallback.call(ConnectorCallback.java:143)

at kd.isc.iscb.util.connector.RemoteEventPusher.push(RemoteEventPusher.java:25)

at kd.isc.iscb.util.connector.EventBindingUtil.pushData(EventBindingUtil.java:326)

at kd.isc.iscb.util.connector.EventBindingUtil.pushData(EventBindingUtil.java:315)

at kd.isc.iscb.util.connector.EventBindingUtil.pushAll(EventBindingUtil.java:271)

at kd.isc.iscb.util.connector.EventBindingUtil.pushAll(EventBindingUtil.java:233)

at kd.isc.connector.eas.e.PushDataJobHandler.execute(PushDataJobHandler.java:41)

at com.kingdee.bos.service.job.core.ThreadWorker.execute(ThreadWorker.java:186)

at com.kingdee.bos.service.job.core.ThreadWorker.run(ThreadWorker.java:121)

at java.lang.Thread.run(Thread.java:745)

Caused by: javax.net.ssl.SSLHandshakeException: server certificate change is restricted during renegotiation

at sun.security.ssl.Alerts.getSSLException(Alerts.java:192)

at sun.security.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1949)

at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:302)

问题现象3：当EAS连接配置进行测试或部署报以下错误信息：

EAS反调苍穹时报错，url:https://publicispoc.test.kdcloud.com,错误内容:网络请求失败，URL是：https://publicispoc.test.kdcloud.com/api/...，原因是：Received fatal alert: internal_error

Running HTTPHandler