使用TLS1.2的jboss eap https客户端

（这是在Windows机器上运行jboss eap7.0）生成一个jax-ws客户端连接到外部Web服务。

它使用的https与https://smartpayform.com/api/transaction/transaction.asmx我已经导出站点证书，并插入到默认的JVM密钥库

该代码运行没有任何例外。 当我执行SOAP调用时，我得到下面的错误。 如果我尝试使用普通的旧的独立Java应用程序访问EAP之外的Web服务，它工作正常。 我究竟做错了什么？

  Caused by: java.net.SocketException: Unrecognized Windows Sockets error: 0: recv failed at java.net.SocketInputStream.socketRead0(Native Method) ~[?:1.8.0_111] at java.net.SocketInputStream.socketRead(SocketInputStream.java:116) ~[?:1.8.0_111] at java.net.SocketInputStream.read(SocketInputStream.java:170) ~[?:1.8.0_111] at java.net.SocketInputStream.read(SocketInputStream.java:141) ~[?:1.8.0_111] at sun.security.ssl.InputRecord.readFully(InputRecord.java:465) ~[?:?] at sun.security.ssl.InputRecord.read(InputRecord.java:503) ~[?:?] at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:973) ~[?:?] at sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1375) ~[?:?] at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1403) ~[?:?] at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1387) ~[?:?] at sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:559) ~[?:?] Caused by: java.net.SocketException: Unrecognized Windows Sockets error: 0: recv failed at java.net.SocketInputStream.socketRead0(Native Method) at java.net.SocketInputStream.socketRead(SocketInputStream.java:116) at java.net.SocketInputStream.read(SocketInputStream.java:170) at java.net.SocketInputStream.read(SocketInputStream.java:141) at sun.security.ssl.InputRecord.readFully(InputRecord.java:465) at sun.security.ssl.InputRecord.read(InputRecord.java:503) at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:973) at sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1375) at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1403) at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1387) at sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:559) at sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:185) at sun.net.www.protocol.http.HttpURLConnection.getOutputStream0(HttpURLConnection.java:1316) at sun.net.www.protocol.http.HttpURLConnection.getOutputStream(HttpURLConnection.java:1291) at sun.net.www.protocol.https.HttpsURLConnectionImpl.getOutputStream(HttpsURLConnectionImpl.java:250) at org.apache.cxf.transport.http.URLConnectionHTTPConduit$URLConnectionWrappedOutputStream.setupWrappedStream(URLConnectionHTTPConduit.java:236) at org.apache.cxf.transport.http.HTTPConduit$WrappedOutputStream.handleHeadersTrustCaching(HTTPConduit.java:1319) at org.apache.cxf.transport.http.HTTPConduit$WrappedOutputStream.onFirstWrite(HTTPConduit.java:1279) at org.apache.cxf.transport.http.URLConnectionHTTPConduit$URLConnectionWrappedOutputStream.onFirstWrite(URLConnectionHTTPConduit.java:267) at org.apache.cxf.io.AbstractWrappedOutputStream.write(AbstractWrappedOutputStream.java:47) at org.apache.cxf.io.AbstractThresholdOutputStream.write(AbstractThresholdOutputStream.java:69) at org.apache.cxf.transport.http.HTTPConduit$WrappedOutputStream.close(HTTPConduit.java:1332) 

更新我在jboss中打开了完整的ssldebugging日志logging。 我看到加载了端点的证书：

• 不能阻止https网站上使用鱿鱼透明ssl_bump在centos 7上
• OpenSSL Padding Oracle漏洞（CVE-2016-2107）的风险是什么
• Nginx与HTTPS上游失败，错误
• 没有“https：//”的URL在Apache中不起作用
• HTTPS内部redirect到HTTP，同时保持链接？

  Subject: CN=*.smartpayform.com, OU=Domain Control Validated Issuer: CN=AlphaSSL CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE Algorithm: RSA; Serial number: 0xc2d0a153e5915039e88cbf7 Valid from Mon Sep 05 12:33:58 EDT 2016 until Wed Sep 06 12:33:58 EDT 2017 

这里是一个更完整的套接字错误的跟踪：

  handling exception: java.net.SocketException: Unrecognized Windows Sockets error: 0: recv failed SEND TLSv1.2 ALERT: fatal, description = unexpected_message WRITE: TLSv1.2 Alert, length = 2 Exception sending alert: java.net.SocketException: Connection reset by peer: socket write error called closeSocket() called close() called closeInternal(true) 

wireshark下面的前三行显示不起作用的连接。 你会注意到它正在使用SSL。 第二组线是从soapui中运行相同的soap调用。 你会看到它的客户端Hello有“TLSv1”。 所以我猜这是问题，但不知道为什么。

我也尝试了这些JVM选项： -Djdk.tls.client.protocols=TLSv1.2 -Djava.net.preferIPv4Stack=true但没有更改。