You need to enable JavaScript to run this app.
优惠活动
大模型
产品
解决方案
定价
更多

GMSSL握手阶段出现javax.crypto.BadPaddingException问题求助

GMSSL握手阶段出现Padding长度无效错误求助

握手时出现如下错误日志:

Server write IV:
0000: 85 80 28 A4 CA 34 3A 5B   A5 C5 7E 71 5A A9 02 1F  ..(..4:[...qZ...
HTTP-Dispatcher, READ: GMSSLv1.1 Change Cipher Spec, length = 1
HTTP-Dispatcher, READ: GMSSLv1.1 Handshake, length = 80
HTTP-Dispatcher, fatal error: 80: problem unwrapping net record
java.lang.ArrayIndexOutOfBoundsException: javax.crypto.BadPaddingException: Padding length invalid: 239
%% Invalidated:  [Session-1, ECC_SM4_CBC_SM3]
HTTP-Dispatcher, SEND GMSSLv1.1 ALERT:  fatal, description = internal_error
HTTP-Dispatcher, WRITE: GMSSLv1.1 Alert, length = 2
HTTP-Dispatcher, called closeInbound()
HTTP-Dispatcher, fatal: engine already closed.  Rethrowing javax.net.ssl.SSLException: Inbound closed before receiving peer's close_notify: possible truncation attack?
HTTP-Dispatcher, called closeOutbound()
HTTP-Dispatcher, closeOutboundInternal()
javax.crypto.BadPaddingException: Padding length invalid: 239

我怀疑问题出在KeyStore构建环节,但一直没定位到具体原因,相关代码如下:

KeyStore keyStore = KeyStore.getInstance(KeyStore.getDefaultType(), BouncyCastleProvider.PROVIDER_NAME);
keyStore.load(null, null);
keyStore.setKeyEntry("signPrivateKey", signPrivateKey, "".toCharArray(),
                        new Certificate[]{signX509Certificate});
keyStore.setKeyEntry("encPrivateKey", encPrivateKey, "".toCharArray(),
                        new Certificate[]{encX509Certificate});

有没有人遇到过类似问题?

内容的提问来源于stack exchange,提问作者噗嗤噗嗤

相关产品推荐
方舟 Agent Plan

超全模态模型 × Harness 升级,最新支持 Deepseek-V4.1-Flash、GLM-5.3 系列、Doubao-Seedream-5.0-pro、Kimi-K3 (部分), 限时 9.9 元起

最近更新时间:2026.07.09 00:12:53