org.apache.axis2.AxisFault: java.security.NoSuchAlgorithmException: Error constructing implementation (algorithm: Default, provider: SunJSSE, class: sun.security.ssl.SSLContextImpl$DefaultSSLContext)
at org.apache.axis2.AxisFault.makeFault(AxisFault.java:430)
at org.apache.axis2.transport.http.HTTPSender.sendViaPost(HTTPSender.java:197)
at org.apache.axis2.transport.http.HTTPSender.send(HTTPSender.java:75)
at org.apache.axis2.transport.http.CommonsHTTPTransportSender.writeMessageWithCommons(CommonsHTTPTransportSender.java:404)
at org.apache.axis2.transport.http.CommonsHTTPTransportSender.invoke(CommonsHTTPTransportSender.java:231)
at org.apache.axis2.engine.AxisEngine.send(AxisEngine.java:443)
at org.apache.axis2.description.OutInAxisOperationClient.send(OutInAxisOperation.java:406)
at org.apache.axis2.description.OutInAxisOperationClient.executeImpl(OutInAxisOperation.java:229)
at org.apache.axis2.client.OperationClient.execute(OperationClient.java:165)
at com.fincatto.nfe310.webservices.statusservico.consulta.NfeStatusServico2Stub.nfeStatusServicoNF2(NfeStatusServico2Stub.java:106)
at com.fincatto.nfe310.webservices.WSStatusConsulta.efetuaConsultaStatus(WSStatusConsulta.java:65)
at com.fincatto.nfe310.webservices.WSStatusConsulta.consultaStatus(WSStatusConsulta.java:34)
at com.fincatto.nfe310.webservices.WSFacade.consultaStatus(WSFacade.java:57)
at com.fincatto.util.TestWS.TesteConsulta(TestWS.java:21)
at com.fincatto.util.TestWS.main(TestWS.java:15)
Caused by: java.net.SocketException: java.security.NoSuchAlgorithmException: Error constructing implementation (algorithm: Default, provider: SunJSSE, class: sun.security.ssl.SSLContextImpl$DefaultSSLContext)
at javax.net.ssl.DefaultSSLSocketFactory.throwException(SSLSocketFactory.java:24
at javax.net.ssl.DefaultSSLSocketFactory.createSocket(SSLSocketFactory.java:255)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:497)
at org.apache.commons.httpclient.protocol.ReflectionSocketFactory.createSocket(ReflectionSocketFactory.java:116)
at org.apache.commons.httpclient.protocol.SSLProtocolSocketFactory.createSocket(SSLProtocolSocketFactory.java:130)
at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:707)
at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1361)
at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(HttpMethodDirector.java:387)
at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(HttpMethodDirector.java:171)
at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397)
at org.apache.axis2.transport.http.AbstractHTTPSender.executeMethod(AbstractHTTPSender.java:621)
at org.apache.axis2.transport.http.HTTPSender.sendViaPost(HTTPSender.java:193)
... 13 more
Caused by: java.security.NoSuchAlgorithmException: Error constructing implementation (algorithm: Default, provider: SunJSSE, class: sun.security.ssl.SSLContextImpl$DefaultSSLContext)
at java.security.Provider$Service.newInstance(Provider.java:1617)
at sun.security.jca.GetInstance.getInstance(GetInstance.java:236)
at sun.security.jca.GetInstance.getInstance(GetInstance.java:164)
at javax.net.ssl.SSLContext.getInstance(SSLContext.java:156)
at javax.net.ssl.SSLContext.getDefault(SSLContext.java:96)
at javax.net.ssl.SSLSocketFactory.getDefault(SSLSocketFactory.java:122)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:497)
at org.apache.commons.httpclient.protocol.ReflectionSocketFactory.createSocket(ReflectionSocketFactory.java:112)
... 21 more
Caused by: java.io.IOException: failed to decrypt safe contents entry: javax.crypto.BadPaddingException: Given final block not properly padded
at sun.security.pkcs12.PKCS12KeyStore.engineLoad(PKCS12KeyStore.java:196
at java.security.KeyStore.load(KeyStore.java:1445)
at sun.security.ssl.SSLContextImpl$DefaultSSLContext.getDefaultKeyManager(SSLContextImpl.java:852)
at sun.security.ssl.SSLContextImpl$DefaultSSLContext.<init>(SSLContextImpl.java:732)
at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:62)
at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45)
at java.lang.reflect.Constructor.newInstance(Constructor.java:422)
at java.security.Provider$Service.newInstance(Provider.java:1595)
... 31 more
Caused by: javax.crypto.BadPaddingException: Given final block not properly padded
at com.sun.crypto.provider.CipherCore.doFinal(CipherCore.java:966)
at com.sun.crypto.provider.CipherCore.doFinal(CipherCore.java:824)
at com.sun.crypto.provider.PKCS12PBECipherCore.implDoFinal(PKCS12PBECipherCore.java:399)
at com.sun.crypto.provider.PKCS12PBECipherCore$PBEWithSHA1AndRC2_40.engineDoFinal(PKCS12PBECipherCore.java:506)
at javax.crypto.Cipher.doFinal(Cipher.java:2165)
at sun.security.pkcs12.PKCS12KeyStore.engineLoad(PKCS12KeyStore.java:1959)
... 39 more

monteiro1 wrote:Creio eu que seja porque eu adicionei essas classe dentro do projeto rodando no GlassFish (sendo que o projeto java se funciona normalmente), eu solucionei da seguinte forma.


Gerei um Arquivo Cacerts com a seguinte classe:

/* * To change this template, choose Tools | Templates * and open the template in the editor. */ package vr; import java.io.*; import java.security.KeyStore; import java.security.MessageDigest; import java.security.cert.CertificateException; import java.security.cert.X509Certificate; import javax.net.ssl.*; /** * * @author Rodrigo */ public class NfeBuildAllCacerts { private static final String JSSECACERTS = "NFeCacerts"; private static final int TIMEOUT_WS = 30; public static void main(String[] args) { try { char[] passphrase = "changeit".toCharArray(); File file = new File(JSSECACERTS); if (file.isFile() == false) { char SEP = File.separatorChar; File dir = new File(System.getProperty("java.home") + SEP + "lib" + SEP + "security"); file = new File(dir, JSSECACERTS); if (file.isFile() == false) { file = new File(dir, "cacerts"); } } info("| Loading KeyStore " + file + "..."); InputStream in = new FileInputStream(file); KeyStore ks = KeyStore.getInstance(KeyStore.getDefaultType()); ks.load(in, passphrase); in.close(); /** * AM - 2.00: homnfe.sefaz.am.gov.br BA - 2.00: hnfe.sefaz.ba.gov.br * CE - 2.00: nfeh.sefaz.ce.gov.br GO - 2.00: * homolog.sefaz.go.gov.br MG - 2.00: hnfe.fazenda.mg.gov.br MS - * 2.00: homologacao.nfe.ms.gov.br MT - 2.00: * homologacao.sefaz.mt.gov.br PE - 2.00: nfehomolog.sefaz.pe.gov.br * PR - 2.00: homologacao.nfe2.fazenda.pr.gov.br RS - 2.00: * homologacao.nfe.sefaz.rs.gov.br SP - 2.00: * homologacao.nfe.fazenda.sp.gov.br SCAN - 2.00: * hom.nfe.fazenda.gov.br SVAN - 2.00: * hom.sefazvirtual.fazenda.gov.br SVRS - 2.00: * homologacao.nfe.sefazvirtual.rs.gov.br */ get("homnfe.sefaz.am.gov.br", 443, ks); get("hnfe.sefaz.ba.gov.br", 443, ks); get("nfeh.sefaz.ce.gov.br", 443, ks); get("homolog.sefaz.go.gov.br", 443, ks); get("hnfe.fazenda.mg.gov.br", 443, ks); get("homologacao.nfe.ms.gov.br", 443, ks); get("homologacao.sefaz.mt.gov.br", 443, ks); get("nfehomolog.sefaz.pe.gov.br", 443, ks); get("homologacao.nfe2.fazenda.pr.gov.br", 443, ks); get("homologacao.nfe.sefaz.rs.gov.br", 443, ks); get("homologacao.nfe.fazenda.sp.gov.br", 443, ks); get("hom.nfe.fazenda.gov.br", 443, ks); get("hom.sefazvirtual.fazenda.gov.br", 443, ks); get("homologacao.nfe.sefazvirtual.rs.gov.br", 443, ks); File cafile = new File(JSSECACERTS); OutputStream out = new FileOutputStream(cafile); ks.store(out, passphrase); out.close(); } catch (Exception e) { e.printStackTrace(); } } public static void get(String host, int port, KeyStore ks) throws Exception { SSLContext context = SSLContext.getInstance("TLS"); TrustManagerFactory tmf = TrustManagerFactory.getInstance( TrustManagerFactory.getDefaultAlgorithm()); tmf.init(ks); X509TrustManager defaultTrustManager = (X509TrustManager) tmf.getTrustManagers()[0]; SavingTrustManager tm = new SavingTrustManager(defaultTrustManager); context.init(null, new TrustManager[]{tm}, null); SSLSocketFactory factory = context.getSocketFactory(); info("| Opening connection to " + host + ":" + port + "..."); SSLSocket socket = (SSLSocket) factory.createSocket(host, port); socket.setSoTimeout(TIMEOUT_WS * 1000); try { info("| Starting SSL handshake..."); socket.startHandshake(); socket.close(); info("| No errors, certificate is already trusted"); } catch (SSLHandshakeException e) { /** * PKIX path building failed: * sun.security.provider.certpath.SunCertPathBuilderException: * unable to find valid certification path to requested target Não * tratado, pois sempre ocorre essa exceção quando o cacerts nao * esta gerado. */ } catch (SSLException e) { error("| " + e.toString()); } X509Certificate[] chain = tm.chain; if (chain == null) { info("| Could not obtain server certificate chain"); } info("| Server sent " + chain.length + " certificate(s):"); MessageDigest sha1 = MessageDigest.getInstance("SHA1"); MessageDigest md5 = MessageDigest.getInstance("MD5"); for (int i = 0; i < chain.length; i++) { X509Certificate cert = chain[i]; sha1.update(cert.getEncoded()); md5.update(cert.getEncoded()); String alias = host + "-" + (i); ks.setCertificateEntry(alias, cert); info("| Added certificate to keystore '" + JSSECACERTS + "' using alias '" + alias + "'"); } } private static class SavingTrustManager implements X509TrustManager { private final X509TrustManager tm; private X509Certificate[] chain; SavingTrustManager(X509TrustManager tm) { this.tm = tm; } public X509Certificate[] getAcceptedIssuers() { throw new UnsupportedOperationException(); } public void checkClientTrusted(X509Certificate[] chain, String authType) throws CertificateException { throw new UnsupportedOperationException(); } public void checkServerTrusted(X509Certificate[] chain, String authType) throws CertificateException { this.chain = chain; tm.checkServerTrusted(chain, authType); } } private static void info(String log) { System.out.println("INFO: " + log); } private static void error(String log) { System.out.println("ERROR: " + log); } }


Então essa classe cria a cadeia de certificados conforme as urls.


Esta outra classe cria o arquivo jks estatico para rodar no glassfish dentro do container.

package vr; /** * * @author Rodrigo */ import java.io.FileInputStream; import java.io.IOException; import java.net.InetAddress; import java.net.InetSocketAddress; import java.net.Socket; import java.net.SocketAddress; import java.net.UnknownHostException; import java.security.KeyManagementException; import java.security.KeyStore; import java.security.KeyStoreException; import java.security.NoSuchAlgorithmException; import java.security.Principal; import java.security.PrivateKey; import java.security.cert.CertificateException; import java.security.cert.X509Certificate; import javax.net.SocketFactory; import javax.net.ssl.KeyManager; import javax.net.ssl.SSLContext; import javax.net.ssl.TrustManager; import javax.net.ssl.TrustManagerFactory; import javax.net.ssl.X509KeyManager; import org.apache.commons.httpclient.ConnectTimeoutException; import org.apache.commons.httpclient.params.HttpConnectionParams; import org.apache.commons.httpclient.protocol.ProtocolSocketFactory; public class SocketFactoryDinamico implements ProtocolSocketFactory { private SSLContext ssl = null; private X509Certificate certificate; private PrivateKey privateKey; private String fileCacerts; public SocketFactoryDinamico(X509Certificate certificate, PrivateKey privateKey) { this.certificate = certificate; this.privateKey = privateKey; } private SSLContext createSSLContext() { try { KeyManager[] keyManagers = createKeyManagers(); TrustManager[] trustManagers = createTrustManagers(); SSLContext sslContext = SSLContext.getInstance("TLS"); sslContext.init(keyManagers, trustManagers, null); return sslContext; } catch (KeyManagementException e) { error(e.toString()); } catch (KeyStoreException e) { error(e.toString()); } catch (NoSuchAlgorithmException e) { error(e.toString()); } catch (CertificateException e) { error(e.toString()); } catch (IOException e) { error(e.toString()); } catch (Exception e) { error(e.toString()); } return null; } private SSLContext getSSLContext() { if (ssl == null) { ssl = createSSLContext(); } return ssl; } public Socket createSocket(String host, int port, InetAddress localAddress, int localPort, HttpConnectionParams params) throws IOException, UnknownHostException, ConnectTimeoutException { if (params == null) { throw new IllegalArgumentException("Parameters may not be null"); } int timeout = params.getConnectionTimeout(); SocketFactory socketfactory = getSSLContext().getSocketFactory(); if (timeout == 0) { return socketfactory.createSocket(host, port, localAddress, localPort); } Socket socket = socketfactory.createSocket(); SocketAddress localaddr = new InetSocketAddress(localAddress, localPort); SocketAddress remoteaddr = new InetSocketAddress(host, port); socket.bind(localaddr); try { socket.connect(remoteaddr, timeout); } catch (Exception e) { error(e.toString()); throw new ConnectTimeoutException("Possível timeout de conexão", e); } return socket; } public Socket createSocket(String host, int port, InetAddress clientHost, int clientPort) throws IOException, UnknownHostException { return getSSLContext().getSocketFactory().createSocket(host, port, clientHost, clientPort); } public Socket createSocket(String host, int port) throws IOException, UnknownHostException { return getSSLContext().getSocketFactory().createSocket(host, port); } public Socket createSocket(Socket socket, String host, int port, boolean autoClose) throws IOException, UnknownHostException { return getSSLContext().getSocketFactory().createSocket(socket, host, port, autoClose); } public KeyManager[] createKeyManagers() { HSKeyManager keyManager = new HSKeyManager(certificate, privateKey); return new KeyManager[]{keyManager}; } public TrustManager[] createTrustManagers() throws KeyStoreException, NoSuchAlgorithmException, CertificateException, IOException { KeyStore trustStore = KeyStore.getInstance("JKS"); trustStore.load(new FileInputStream(fileCacerts), "changeit".toCharArray()); TrustManagerFactory trustManagerFactory = TrustManagerFactory .getInstance(TrustManagerFactory.getDefaultAlgorithm()); trustManagerFactory.init(trustStore); return trustManagerFactory.getTrustManagers(); } class HSKeyManager implements X509KeyManager { private X509Certificate certificate; private PrivateKey privateKey; public HSKeyManager(X509Certificate certificate, PrivateKey privateKey) { this.certificate = certificate; this.privateKey = privateKey; } public String chooseClientAlias(String[] arg0, Principal[] arg1, Socket arg2) { return certificate.getIssuerDN().getName(); } public String chooseServerAlias(String arg0, Principal[] arg1, Socket arg2) { return null; } public X509Certificate[] getCertificateChain(String arg0) { return new X509Certificate[]{certificate}; } public String[] getClientAliases(String arg0, Principal[] arg1) { return new String[]{certificate.getIssuerDN().getName()}; } public PrivateKey getPrivateKey(String arg0) { return privateKey; } public String[] getServerAliases(String arg0, Principal[] arg1) { return null; } } public void setFileCacerts(String fileCacerts) { this.fileCacerts = fileCacerts; } /** * Log Error. * * @param log */ private static void error(String log) { System.out.println("ERROR: " + log); } }




e a seguir fiz uma pequena alteração na WsFacede.

public WSFacade(final NFeConfig config) throws IOException, KeyStoreException, NoSuchAlgorithmException, CertificateException, Exception { // System.setProperty("jdk.tls.client.protocols", "SSLv3,TLSv1"); // System.setProperty("java.protocol.handler.pkgs", "com.sun.net.ssl.internal.www.protocol"); // System.setProperty("javax.net.ssl.trustStoreType", "JKS"); // System.setProperty("javax.net.ssl.trustStore", config.getCadeiaCertificados().getAbsolutePath()); // System.setProperty("javax.net.ssl.keyStoreType", "PKCS12"); // System.setProperty("javax.net.ssl.keyStore", config.getCertificado().getAbsolutePath()); // System.setProperty("javax.net.ssl.keyStorePassword", config.getCertificadoSenha()); InputStream entrada = new FileInputStream(config.getCertificado()); KeyStore ks = KeyStore.getInstance(config.KeyStore); try { ks.load(entrada, config.getCertificadoSenha().toCharArray()); } catch (IOException e) { throw new Exception("Senha do Certificado Digital esta incorreta ou Certificado inválido."); } String alias = ""; Enumeration<String> aliasesEnum = ks.aliases(); while (aliasesEnum.hasMoreElements()) { alias = (String) aliasesEnum.nextElement(); if (ks.isKeyEntry(alias)) { break; } } X509Certificate certificate = (X509Certificate) ks.getCertificate(alias); PrivateKey privateKey = (PrivateKey) ks.getKey(alias, config.getCertificadoSenha().toCharArray()); SocketFactoryDinamico socketFactoryDinamico = new SocketFactoryDinamico(certificate, privateKey); socketFactoryDinamico.setFileCacerts(config.getCacerts()); Protocol protocol = new Protocol("https", socketFactoryDinamico, 443); Protocol.registerProtocol("https", protocol); this.wsLoteEnvio = new WSLoteEnvio(config); this.wsLoteConsulta = new WSLoteConsulta(config); this.wsStatusConsulta = new WSStatusConsulta(config); this.wsNotaConsulta = new WSNotaConsulta(config); this.wsCartaCorrecao = new WSCartaCorrecao(config); this.wsCancelamento = new WSCancelamento(config); this.wsConsultaCadastro = new WSConsultaCadastro(config); this.wsInutilizacao = new WSInutilizacao(config); }

e por ultimo eu passo


e minha instancia de configuração ficou assim :


private WSFacade getConfig() throws IOException { NFeConfig config = new NFeConfig() { @Override public NFAmbiente getAmbiente() { return NFAmbiente.HOMOLOGACAO; } @Override public File getCertificado() throws IOException { return new File("C:/SabiosNF-e/Config/CERTIFICADO/certificado.pfx"); } @Override public String getCacerts() throws IOException { return "C:/NFeCacerts"; } @Override public String getCertificadoSenha() { return "senha"; } @Override public NFUnidadeFederativa getCUF() { return NFUnidadeFederativa.PR; } @Override public NFTipoEmissao getTipoEmissao() { return NFTipoEmissao.EMISSAO_NORMAL; } }; try { return new WSFacade(config); } catch (Exception ex) { ex.printStackTrace(); System.out.println("Erro : " + ex); } return null; }


adicionei esta parte seria o caminho do arquivo gerado pela NfeBuildAllCacerts.java
@Override
public String getCacerts() throws IOException {
return "C:/NFeCacerts";
}


se eu estiver errado em algum ponto me corriga.



Mas agora tenho outro problema
(O seu gera desta forma ?)

<consStatServ xmlns="http://www.portalfiscal.inf.br/nfe" versao="3.10"><tpAmb>2</tpAmb><cUF>41</cUF><xServ>STATUS</xServ></consStatServ>


ele me retorna falha no schema xml estive comparando com o outro ws que tinha desenvolvido
o namespace esta ao contrario

este aqui esta funcionado :

<consStatServ versao="3.10" xmlns="http://www.portalfiscal.inf.br/nfe"><tpAmb>2</tpAmb><cUF>41</cUF><xServ>STATUS</xServ></consStatServ>



por qual motivo poderia ser essa troca minha sefaz e do parana 41

diegocfreire wrote:Estou com problemas em "KeyStore ks = KeyStore.getInstance(config.KeyStore);"
Esse config.KeyStore na classe WSFacade não é encontrado....

Alguem pode me ajudar?
...