HTTPS请求Could not generate DH keypair异常处理

Question

Caused by: java.security.InvalidAlgorithmParameterException: Prime size must be multiple of 64, and can only range from 512 to 1024 (inclusive) at com.sun.crypto.provider.DHKeyPairGenerator.initialize(DashoA13*..) at java.security.KeyPairGenerator$Delegate.initialize(KeyPairGenerator.java:627) at com.sun.net.ssl.internal.ssl.DHCrypt.<init>(DHCrypt.java:107)

Answer 1

URL url = new URL(uri);HttpURLConnection conn = (HttpURLConnection) url.openConnection();conn.setRequestMethod("GET");InputStream  in = conn.getInputStream();==》此处抛异常，此异常由于JDK版本引起的异常，需要JDK补丁包，获取切换到更高版本（1.7+）javax.net.ssl.SSLException: java.lang.RuntimeException: Could not generate DH keypair at com.sun.net.ssl.internal.ssl.Alerts.getSSLException(Alerts.java:190) at com.sun.net.ssl.internal.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1747) at com.sun.net.ssl.internal.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1708) at com.sun.net.ssl.internal.ssl.SSLSocketImpl.handleException(SSLSocketImpl.java:1691) at com.sun.net.ssl.internal.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1222) at com.sun.net.ssl.internal.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1199) at sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:434) at sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:166) at sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1195) at sun.net.www.protocol.https.HttpsURLConnectionImpl.getInputStream(HttpsURLConnectionImpl.java:234) at com.qw.weixin.service.impl.SOAWeixinServiceImpl.generateQrCodeWithLogo(SOAWeixinServiceImpl.java:415) at com.qw.weixin.service.impl.SOAWeixinServiceImpl.getDyQrCode(SOAWeixinServiceImpl.java:819) at com.qw.weixin.SOAWeixinServiceTest.testGetDyQrCode(SOAWeixinServiceTest.java:24) at com.qw.weixin.SOAWeixinServiceTest.main(SOAWeixinServiceTest.java:30)Caused by: java.lang.RuntimeException: Could not generate DH keypair at com.sun.net.ssl.internal.ssl.DHCrypt.<init>(DHCrypt.java:114) at com.sun.net.ssl.internal.ssl.ClientHandshaker.serverKeyExchange(ClientHandshaker.java:559) at com.sun.net.ssl.internal.ssl.ClientHandshaker.processMessage(ClientHandshaker.java:186) at com.sun.net.ssl.internal.ssl.Handshaker.processLoop(Handshaker.java:593) at com.sun.net.ssl.internal.ssl.Handshaker.process_record(Handshaker.java:529) at com.sun.net.ssl.internal.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:943) at com.sun.net.ssl.internal.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1188) at com.sun.net.ssl.internal.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1215) ... 9 moreCaused by: java.security.InvalidAlgorithmParameterException: Prime size must be multiple of 64, and can only range from 512 to 1024 (inclusive) at com.sun.crypto.provider.DHKeyPairGenerator.initialize(DashoA13*..) at java.security.KeyPairGenerator$Delegate.initialize(KeyPairGenerator.java:627) at com.sun.net.ssl.internal.ssl.DHCrypt.<init>(DHCrypt.java:107) ... 16 more异常处理如下：在项目引入bcprov-jdk16-1.46.jar （见附件 或者去 http://www.oracle.com/technetwork/java/javase/downloads/jce-6-download-429243.html 下载JCE ）修改jre配置（C:\Java\jdk1.6.0_45\jre\lib\security\java.security）        security.provider.1=sun.security.provider.Sun        #security.provider.2=sun.security.rsa.SunRsaSign        security.provider.2=org.bouncycastle.jce.provider.BouncyCastleProvider        security.provider.3=com.sun.net.ssl.internal.ssl.Provider        security.provider.4=com.sun.crypto.provider.SunJCE        security.provider.5=sun.security.jgss.SunProvider        security.provider.6=com.sun.security.sasl.Provider        security.provider.7=org.jcp.xml.dsig.internal.dom.XMLDSigRI        security.provider.8=sun.security.smartcardio.SunPCSC        security.provider.9=sun.security.mscapi.SunMSCAPI