javax.net.ssl.SSLException: java.lang.RuntimeException: Unexpected error: java.security.InvalidAlgor

在tomcat中启动报错

重要解决方法:

在catalina.sh中, 加入:

J***A_OPTS='-Xms4096m -Xmx7048m -XX:MaxNewSize=1024m -XX:MaxPermSize=512m -Dcom.sun.management.jmxremote -Dcom.sun.management.jmxremote.authenticate=false -Dcom.sun.management.jmxremote.ssl=false' -Djavax.net.ssl.keyStore=/home/monitor/server-4.6.6/hq-engine/hq-server/id.keystore

如此

Cause

The JVM cannot find the

javax.net.ssl.trustStore

required for SSL, or it does not contain the required certificates.

For standard installations, we do not recommend this JVM argument is used, and rather your certificates are added to the JVM's default keystore, which is typically located in

$J***A_HOME/jre/lib/security/cacerts

or the keystore used by your Tomcat,
as in our Running JIRA over SSL or HTTPS documentation.

Resolution

Follow our
Connecting to SSL services documentation. This will guide you through obtaining the certificate of the service you're accessing and importing it into the recommended Java keystore.


If you're using a non-standard keystore, such as the one specified
in Tomcat, please import the certificate into that keystore.
http://blog.chinaunix.net/uid-26284318-id-3069142.html
the detail :
http://architecturalatrocities.com/post/19073788679/fixing-the-trustanchors-problem-when-running
关于配置:
http://blog.chintoju.com/2013/03/jdk-jbosstomcat-ssl-issue-the-trusta.html
在bin/catalina.sh中, 加入:

-Djavax.net.ssl.trustStore=<TRUST_STORE_LOCATION>

-Djavax.net.ssl.trustStorePassword=<TRUST_STORE_PASSWORD>

____________________________________________________________
J***A_OPTS='-Xms4096m -Xmx7048m -XX:MaxNewSize=1024m -XX:MaxPermSize=512m -Dcom.sun.management.jmxremote -Dcom.sun.management.jmxremote.authenticate=false -Dcom.sun.management.jmxremote.ssl=false' -Djavax.net.ssl.keyStore=/home/monitor/server-4.6.6/hq-engine/hq-server/id.keystore

关于探讨,
http://stackoverflow.com/questions/4764611/java-security-invalidalgorithmparameterexception-the-trustanchors-parameter-mus
中提供了一种方法:

When I copied my

jre/lib/security/cacerts

file
from windows to linux, it worked fine.