java操作k8s api报错：SSLHandshakeException: should not be presented in certificate_request

我会带着你远行 2023-09-27 08:38 64阅读 0赞

##  ##

### 0 解决方法 ###

在jdk启动参数加上如下参数，修改ssl 客户端协议：

-Djdk.tls.client.protocols=TLSv1.2

![image-20220511111223007][]

### 1 错误详情及解决详解 ###

本地java程序单元测试调用k8s相关https api发生报错SSLHandshakeException: should not be presented in certificate\_request, 具体内容如下：

Caused by: javax.net.ssl.SSLHandshakeException: extension (5) should not be presented in certificate_request
    	at java.base/sun.security.ssl.Alert.createSSLException(Alert.java:131)
    	at java.base/sun.security.ssl.Alert.createSSLException(Alert.java:117)
    	at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:314)
    	at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:270)
    	at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:261)
    	at java.base/sun.security.ssl.SSLExtensions.<init>(SSLExtensions.java:89)
    	at java.base/sun.security.ssl.CertificateRequest$T13CertificateRequestMessage.<init>(CertificateRequest.java:818)
    	at java.base/sun.security.ssl.CertificateRequest$T13CertificateRequestConsumer.consume(CertificateRequest.java:922)
    	at java.base/sun.security.ssl.SSLHandshake.consume(SSLHandshake.java:392)
    	at java.base/sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:451)
    	at java.base/sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:428)
    	at java.base/sun.security.ssl.TransportContext.dispatch(TransportContext.java:184)
    	at java.base/sun.security.ssl.SSLTransport.decode(SSLTransport.java:164)
    	at java.base/sun.security.ssl.SSLSocketImpl.decode(SSLSocketImpl.java:1151)
    	at java.base/sun.security.ssl.SSLSocketImpl.readHandshakeRecord(SSLSocketImpl.java:1062)
    	at java.base/sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:402)
    	at okhttp3.internal.connection.RealConnection.connectTls(RealConnection.java:336)
    	at okhttp3.internal.connection.RealConnection.establishProtocol(RealConnection.java:300)
    	at okhttp3.internal.connection.RealConnection.connect(RealConnection.java:185)
    	at okhttp3.internal.connection.ExchangeFinder.findConnection(ExchangeFinder.java:224)
    	at okhttp3.internal.connection.ExchangeFinder.findHealthyConnection(ExchangeFinder.java:108)
    	at okhttp3.internal.connection.ExchangeFinder.find(ExchangeFinder.java:88)
    	at okhttp3.internal.connection.Transmitter.newExchange(Transmitter.java:169)
    	at okhttp3.internal.connection.ConnectInterceptor.intercept(ConnectInterceptor.java:41)
    	at okhttp3.internal.http.RealInterceptorChain.proceed(RealInterceptorChain.java:142)
    	at okhttp3.internal.http.RealInterceptorChain.proceed(RealInterceptorChain.java:117)
    	at okhttp3.internal.cache.CacheInterceptor.intercept(CacheInterceptor.java:94)
    	at okhttp3.internal.http.RealInterceptorChain.proceed(RealInterceptorChain.java:142)
    	at okhttp3.internal.http.RealInterceptorChain.proceed(RealInterceptorChain.java:117)
    	at okhttp3.internal.http.BridgeInterceptor.intercept(BridgeInterceptor.java:93)
    	at okhttp3.internal.http.RealInterceptorChain.proceed(RealInterceptorChain.java:142)
    	at okhttp3.internal.http.RetryAndFollowUpInterceptor.intercept(RetryAndFollowUpInterceptor.java:88)
    	at okhttp3.internal.http.RealInterceptorChain.proceed(RealInterceptorChain.java:142)
    	at okhttp3.internal.http.RealInterceptorChain.proceed(RealInterceptorChain.java:117)
    	at okhttp3.RealCall.getResponseWithInterceptorChain(RealCall.java:229)
    	at okhttp3.RealCall.execute(RealCall.java:81)

检索关键词`should not be presented in certificate_reques~~删除线格式~~`在stackoverflow得到解决办法：

![image-20220511111503307][]

https://stackoverflow.com/questions/61872520/spring-cloud-vault-error-nested-exception-is-javax-net-ssl-sslhandshakeexceptio

两种解决思路：

1、升级java版本；

2、添加启动参数，使用TLSv1.2协议：

-Djdk.tls.client.protocols=TLSv1.2

--------------------

参考链接：https://www.pudn.com/news/627b2dfd9b6e2b6d55f06068.html

[image-20220511111223007]: https://img-blog.csdnimg.cn/img_convert/4fd5576216ba0400e6c47c77c252ebfc.png
[image-20220511111503307]: https://img-blog.csdnimg.cn/img_convert/5f24bd51df1ade8df517970979411385.png