Spring Cloud Vault error: nested exception is javax.net.ssl.SSLHandshakeException: extension (5) should not be presented in certificate_request

Question

我正在尝试在 Spring 启动项目上使用 Spring Cloud Vault 使用 HashiCorp Vault。我将 bootstrap.yml 文件配置为使用应用程序角色和秘密 ID 来获取密码

bootstrap.yml

spring:
  application:
    name: pres
  cloud:
    vault:
      authentication: APPROLE
      app-role:
        role-id: ${role-id}
        secret-id: ${secret-id}
        role: pres-read
        app-role-path: approle
      uri: https://hostname:8200
      kv:
        enabled: true
        backend: secret
        application-name: pres
  profiles:
    include: dev

在启动期间我得到以下异常

org.springframework.vault.authentication.VaultLoginException: Cannot login using org.springframework.web.client.ResourceAccessException: I/O error on POST request for "https://hostname:8200/v1/auth/approle/login": extension (5) should not be presented in certificate_request; nested exception is javax.net.ssl.SSLHandshakeException: extension (5) should not be presented in certificate_request

我正在使用 spring-cloud-starter-vault-config 依赖项来访问保管库

 <dependency>
            <groupId>org.springframework.cloud</groupId>
            <artifactId>spring-cloud-starter-vault-config</artifactId>
            <version> 2.2.2.RELEASE</version>
 </dependency>

Answer 1

好的。看起来这是一个 Java TLS Bug，希望 java 团队会在 Java 11.0.8.

中解决这个问题

更新：问题已在最新的 Java 11 版本

中修复

Spring Cloud Vault error: nested exception is javax.net.ssl.SSLHandshakeException: extension (5) should not be presented in certificate_request

Spring Cloud Vault error: nested exception is javax.net.ssl.SSLHandshakeException: extension (5) should not be presented in certificate_request

java

spring

spring-boot

hashicorp-vault

spring-cloud-vault-config