如何在Mono HTTPListener服务器中捕获SSL异常?

问题描述:

我正在尝试将HTTPS支持添加到我的简单Mono HTTP服务器。它在大多数情况下都能正常工作,但当发生SSL异常时(例如客户端取消握手),应用程序会崩溃。很明显,类似的东西不应该完全崩溃,所以我需要以某种方式捕获该异常。如何在Mono HTTPListener服务器中捕获SSL异常?

代码:

static void Main(string[] args) 
    { 
     try 
     { 
      var listener = new HttpListener(); 
      string prefix = "https://*:8443/"; 
      listener.Prefixes.Add(prefix); 

      Console.WriteLine("Starting HTTP server at " + prefix); 

      listener.Start(); 

      while (true) 
      { 
       try 
       { 
        var context = listener.GetContext(); 
        Console.WriteLine(context.Request.Url); 
       } 
       catch (Exception e) 
       { 
        Console.ForegroundColor = ConsoleColor.Red; 
        Console.WriteLine("Exception processing request: " + e); 
        Console.ResetColor(); 
       } 
      } 
     } 
     catch (Exception e) 
     { 
      Console.ForegroundColor = ConsoleColor.Yellow; 
      Console.WriteLine("Exception caught! " + e); 
     } 
    } 

这里的日志时,我得到一个靠不住的客户端试图连接:

Starting HTTP server at https://*:8443/ 

Unhandled Exception: 
System.IO.IOException: The authentication or decryption has failed. ---> Mono.Security.Protocol.Tls.TlsException: The client stopped the handshake. 
    at Mono.Security.Protocol.Tls.SslServerStream.EndNegotiateHandshake (IAsyncResult asyncResult) <0x41e581b0 + 0x0022b> in <filename unknown>:0 
    at Mono.Security.Protocol.Tls.SslStreamBase.AsyncHandshakeCallback (IAsyncResult asyncResult) <0x41e57d20 + 0x00086> in <filename unknown>:0 
    --- End of inner exception stack trace --- 
    at Mono.Security.Protocol.Tls.SslStreamBase.EndRead (IAsyncResult asyncResult) <0x41e50110 + 0x0015f> in <filename unknown>:0 
    at Mono.Net.Security.Private.LegacySslStream.EndAuthenticateAsServer (IAsyncResult asyncResult) <0x41e50000 + 0x0003e> in <filename unknown>:0 
    at Mono.Net.Security.Private.LegacySslStream.AuthenticateAsServer (System.Security.Cryptography.X509Certificates.X509Certificate serverCertificate, Boolean clientCertificateRequired, SslProtocols enabledSslProtocols, Boolean checkCertificateRevocation) <0x41e40990 + 0x00055> in <filename unknown>:0 
    at System.Net.HttpConnection.Init() <0x41e3e0e0 + 0x0005f> in <filename unknown>:0 
    at System.Net.HttpConnection..ctor (System.Net.Sockets.Socket sock, System.Net.EndPointListener epl, Boolean secure, System.Security.Cryptography.X509Certificates.X509Certificate cert) <0x41e3b670 + 0x003e7> in <filename unknown>:0 
    at System.Net.EndPointListener.OnAccept (System.Object sender, System.EventArgs e) <0x41e3b210 + 0x002a7> in <filename unknown>:0 
    at System.Net.Sockets.SocketAsyncEventArgs.OnCompleted (System.Net.Sockets.SocketAsyncEventArgs e) <0x41e3b1d0 + 0x0002e> in <filename unknown>:0 
    at System.Net.Sockets.SocketAsyncEventArgs.Complete() <0x41e3b1b0 + 0x00013> in <filename unknown>:0 
    at System.Net.Sockets.Socket.<AcceptAsyncCallback>m__0 (IAsyncResult ares) <0x41e3aa70 + 0x0037f> in <filename unknown>:0 
    at System.Net.Sockets.SocketAsyncResult+<Complete>c__AnonStorey0.<>m__0 (System.Object _) <0x41e3a980 + 0x0001d> in <filename unknown>:0 
    at System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem() <0x7f22cac25460 + 0x0002f> in <filename unknown>:0 
    at System.Threading.ThreadPoolWorkQueue.Dispatch() <0x7f22cac239e0 + 0x001d6> in <filename unknown>:0 
    at System.Threading._ThreadPoolWaitCallback.PerformWaitCallback() <0x7f22cac252e0 + 0x00008> in <filename unknown>:0 

不太一个解决方案,但我可以通过创建一个解决问题本地反向代理与nginx,并设置单声道服务器只监听127.0.0.1

https://www.nginx.com/resources/admin-guide/reverse-proxy/