JSSE編程基本代碼

標籤：jsse

 public static void main(String[] args) throws Exception {               //空實現，接受任意服務端的認證。如果用可信公開金鑰庫去構造，採用類同下面的KeyManagerFactory        //的TrustManagerFactory;       TrustManager tm = new X509TrustManager() {        @Override        public void checkClientTrusted(X509Certificate[] chain, String authType) throws CertificateException {          //todo                      }        @Override        public void checkServerTrusted(X509Certificate[] chain, String authType) throws CertificateException {           //todo          }        @Override        public X509Certificate[] getAcceptedIssuers() {            return null;        }       };              SSLContext sslContext = SSLContext.getInstance("SSL");              //自身的認證需要有密鑰庫，不能像TrustManager那樣去構造       KeyStore ks = KeyStore.getInstance("JKS");       ks.load(new FileInputStream("keystore.jks"),"password".toCharArray());              KeyManagerFactory kmf = KeyManagerFactory.getInstance("SunX509");       kmf.init(ks, "password".toCharArray());              KeyManager km = new MyKeyManager((X509KeyManager)kmf.getKeyManagers()[0]);                     sslContext.init(new KeyManager[]{km}, new TrustManager[]{tm}, new SecureRandom());              SSLSocket ss =  (SSLSocket)sslContext.getSocketFactory().createSocket("localhost",8080);               //監聽handshake完成事件。       ss.addHandshakeCompletedListener(new HandshakeCompletedListener() {         @Override        public void handshakeCompleted(HandshakeCompletedEvent event) {            System.out.println(event);        }       });           }

public class MyKeyManager implements X509KeyManager {    private X509KeyManager delegate;        public MyKeyManager(X509KeyManager delegate){        this.delegate = delegate;    }    @Override    public String[] getClientAliases(String keyType, Principal[] issuers) {        return delegate.getClientAliases(keyType, issuers);    }    @Override    public String chooseClientAlias(String[] keyType, Principal[] issuers, Socket socket) {        return delegate.chooseClientAlias(keyType, issuers, socket);    }    @Override    public String[] getServerAliases(String keyType, Principal[] issuers) {        return delegate.getServerAliases(keyType, issuers);    }    @Override    public String chooseServerAlias(String keyType, Principal[] issuers, Socket socket) {        return delegate.chooseServerAlias(keyType, issuers, socket);    }    @Override    public X509Certificate[] getCertificateChain(String alias) {        return delegate.getCertificateChain(alias);    }    @Override    public PrivateKey getPrivateKey(String alias) {        return delegate.getPrivateKey(alias);    }}

本文出自 “天下無賊” 部落格，請務必保留此出處http://guojuanjun.blog.51cto.com/277646/1955239

JSSE編程基本代碼