当我尝试从 Spring Boot 应用程序访问 OAuth HTTPS 端点时,出现以下错误,但 HTTP 端点工作得很好
Error:
2018-07-24 10:25:06.292 [DEBUG] [8464] [https-jsse-nio-8084-exec-8] o.apache.coyote.http11.Http11Processor:解析HTTP请求标头时出错
java.io.EOFException: null 在 org.apache.tomcat.util.net.NioEndpoint$NioSocketWrapper.fillReadBuffer(NioEndpoint.java:1250)
在
org.apache.tomcat.util.net.NioEndpoint$NioSocketWrapper.read(NioEndpoint.java:1190)
在
org.apache.coyote.http11.Http11InputBuffer.fill(Http11InputBuffer.java:717)
在
org.apache.coyote.http11.Http11InputBuffer.parseRequestLine(Http11InputBuffer.java:366)
在
org.apache.coyote.http11.Http11Processor.service(Http11Processor.java:687)
在
org.apache.coyote.AbstractProcessorLight.process(AbstractProcessorLight.java:66)
在
org.apache.coyote.AbstractProtocol$ConnectionHandler.process(AbstractProtocol.java:790)
在
org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.doRun(NioEndpoint.java:1459)
在
org.apache.tomcat.util.net.SocketProcessorBase.run(SocketProcessorBase.java:49)
在
java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
在
java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
在
org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61)
在 java.lang.Thread.run(Thread.java:748)
端点
https://localhost:8084/my-auth/oauth/authorize
https://localhost:8084/my-auth/oauth/token
ssl 的应用程序 YML 配置:
port: 8084
non-http-port: 8083
context-path: /my-auth
ssl:
key-alias: <my cert alais>
key-password: <my pasword>
key-store: <my jks path>
key-store-type: JKS
enabled: true
安全java配置
@Bean
public EmbeddedServletContainerFactory servletContainer() {
TomcatEmbeddedServletContainerFactory tomcat = new TomcatEmbeddedServletContainerFactory() {
@Override
protected void postProcessContext(Context context) {
SecurityConstraint securityConstraint = new SecurityConstraint();
securityConstraint.setUserConstraint("CONFIDENTIAL");
SecurityCollection collection = new SecurityCollection();
collection.addPattern(contextPath+"/api/v1/*");
securityConstraint.addCollection(collection);
context.addConstraint(securityConstraint);
}
};
tomcat.addAdditionalTomcatConnectors(redirectConnector());
return tomcat;
}
private Connector redirectConnector() {
Connector connector = new Connector("org.apache.coyote.http11.Http11NioProtocol");
connector.setScheme("http");
connector.setPort(unSecuredPort);
connector.setSecure(false);
connector.setRedirectPort(securedPort);
return connector;
}
POM file
<?xml version="1.0" encoding="UTF-8"?>
<project
xmlns="http://maven.apache.org/POM/4.0.0"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
<parent>
<artifactId>my-app-name</artifactId>
<groupId>my.group.id</groupId>
<version>my-version</version>
<relativePath>../pom.xml</relativePath>
</parent>
<modelVersion>4.0.0</modelVersion>
<packaging>jar</packaging>
<artifactId>my-app-name</artifactId>
<dependencies>
<dependency>
<groupId>org.springframework.boot</groupId>
<artifactId>spring-boot-starter-security</artifactId>
</dependency>
<dependency>
<groupId>org.springframework.security</groupId>
<artifactId>spring-security-ldap</artifactId>
</dependency>
<dependency>
<groupId>org.springframework.boot</groupId>
<artifactId>spring-boot-starter-web</artifactId>
</dependency>
<dependency>
<groupId>org.springframework.security.oauth</groupId>
<artifactId>spring-security-oauth2</artifactId>
<version>2.0.15.RELEASE</version>
</dependency>
<dependency>
<groupId>org.thymeleaf</groupId>
<artifactId>thymeleaf-spring4</artifactId>
</dependency>
<dependency>
<groupId>com.h2database</groupId>
<artifactId>h2</artifactId>
</dependency>
<dependency>
<groupId>io.springfox</groupId>
<artifactId>springfox-swagger2</artifactId>
</dependency>
<dependency>
<groupId>io.springfox</groupId>
<artifactId>springfox-swagger-ui</artifactId>
</dependency>
</dependencies>
<build>
<plugins>
<plugin>
<groupId>org.springframework.boot</groupId>
<artifactId>spring-boot-maven-plugin</artifactId>
</plugin>
</plugins>
</build>
</project>
这不是错误,而是调试消息。
我也遇到了这个,我相信正确的答案在这里:
如果日志级别不是DEBUG,EOF就会被默默吞掉。不幸的是,该消息显示“Unexpected EOF”,因为在这种情况下这是正常的。
我在上找到的tomcat 抓取站点 http://tomcat.10.x6.nabble.com/Question-on-Http11AprProcessor-Error-parsing-HTTP-request-header-error-messages-td5031194.html
此处的调试消息:
catch (IOException e) {
if (log.isDebugEnabled()) {
log.debug(sm.getString("http11processor.header.parse"), e);
}
setErrorState(ErrorState.CLOSE_CONNECTION_NOW, e);
break;
}
in Tomcat 8.5 中的 Http11Processor https://github.com/apache/tomcat/blob/8.5.x/java/org/apache/coyote/http11/Http11Processor.java
并为此 Tomcat 修复添加了导致它的 EOFException:非阻塞也应该在 EOF 上抛出 EOFException https://github.com/apache/tomcat/commit/91b78590169c0a6fa3dfc5a7d0818a5c1c630f44
我从这个“问题”的另一个讨论中发现了这个spring-cloud github 讨论 https://github.com/spring-cloud/spring-cloud-dataflow/issues/1306
我认为这是完全正常的OEFException
由我们的同事添加阿帕奇/tomcat@91b7859 https://github.com/apache/tomcat/commit/91b78590169c0a6fa3dfc5a7d0818a5c1c630f44。当 ssl 连接到非 ssl 连接器时,INFO 级别上的日志记录错误有点激进。
本文内容由网友自发贡献,版权归原作者所有,本站不承担相应法律责任。如您发现有涉嫌抄袭侵权的内容,请联系:hwhale#tublm.com(使用前将#替换为@)