“原因:DHPublicKey不符合算法约束"是什么?吝啬的?

本文介绍了“原因:DHPublicKey不符合算法约束"是什么?吝啬的?的处理方法，对大家解决问题具有一定的参考价值，需要的朋友们下面随着小编来一起学习吧！ 问题描述

我想连接到另一台机器时看到此错误:

I saw this error when I wanted to connect to another machine:

严重:无法创建连接XXXXX:XXXXX建立套接字到主机和端口的错误:XXXXX:XXXXX.原因:DHPublicKey不符合算法约束

SEVERE: Could not create connection XXXXX: XXXXX Error establishing socket to host and port: XXXXX:XXXXX. Reason: DHPublicKey does not comply to algorithm constraints

这是什么原因?

推荐答案

原因是服务器仅支持弱密码.虽然更新服务器当然是干净/不错的解决方案，但快速的解决方案是删除提到的约束，如此处:

The reason was that the server only supported weak ciphers. While updating the server is certainly the clean/good solution, the quick one is to remove the constraints as mentioned here:

在/usr/lib/jvm/default-java/jre/lib/security/java.security 内-或-根据您的操作系统-/etc/crypto-policies/back-结尾/java.config ，你有一行

Within /usr/lib/jvm/default-java/jre/lib/security/java.security or - depending on your OS - /etc/crypto-policies/back-ends/java.config you have a line

jdk.tls.disabledAlgorithms=SSLv3, RC4, MD5withRSA, DH keySize < 1024, \

请注意 DH keySize<1024 .因此，不允许使用任何较小的密钥.

Notice the DH keySize < 1024. So no keys which are smaller are allowed.

用

jdk.tls.disabledAlgorithms=SSLv3, RC4, MD5withRSA, DH keySize < 768, \

或完全删除 DH keySize<1024 部分可以解决此问题.

or completely removing the DH keySize < 1024 part could solve the problem.

您可以通过以下方式进行

You can do this via

$ sed -i "s/ DH keySize < 1024,//" /usr/lib/jvm/default-java/jre/lib/security/java.security