java SSL安全socket的通讯实例-java学习笔记(4)

学习了SSL的基本原理后..动手用java来实现了一个安全连接的实例..

 

1.使用keytool创建密钥对..并在服务端和客户端完成分配..具体方法可参看:java-使用keytool来创建管理密钥及证书等-java学习笔记(3)

 

2.建立客户端和服务端的socket实例:

 

客户端代码如下:

 

public class SSLClient { public static void startSSLClient() throws IOException { int port = 15408;//要连接的服务器端口 String serverAdd = "127.0.0.1";//要连接的服务器地址 try { System.setProperty("javax.net.ssl.trustStore","clientkey.jks");//设置可信任的密钥仓库 System.setProperty("javax.net.ssl.trustStorePassword","sslkey1"); //设置可信任的密钥仓库的密码 SSLSocketFactory sslsf = (SSLSocketFactory)SSLSocketFactory.getDefault();//利用工厂来创建SSLSocket安全套接字 Socket csocket = sslsf.createSocket(serverAdd,port);//创建并连接服务器 System.out.println("Client OK~"); System.out.println("==============="); System.out.println(""); //以下代码同socket通讯实例中的代码 BufferedReader socketIn = new BufferedReader( new InputStreamReader(csocket.getInputStream()));//接受到的信息 PrintStream socketOut = new PrintStream(csocket.getOutputStream());//要发送的信息 BufferedReader userIn = new BufferedReader( new InputStreamReader(System.in));//用户输入信息 String s; while ( true ) { System.out.print("Client Message: "); s = userIn.readLine(); socketOut.println(s); if ( s.trim().equals("BYE") ) break; else { System.out.println("Please wait Server Message.."); System.out.println(""); } s = socketIn.readLine(); System.out.println("Server Message: " + s); if ( s.trim().equals("BYE") ) break; } socketIn.close(); socketOut.close(); userIn.close(); csocket.close(); } catch (Exception e) { System.out.println("Error: " + e); } } public static void main(String[] args) { try { startSSLClient(); } catch (Exception e) { System.out.println("Error: " + e); } } } 

 

服务端代码如下:(这里像换种方式写..结果写烦了..呵呵)

 

public class SSLServer { public static void startSSLServer() throws IOException { int port = 15408;//监听端口 String keyFile = "serverkey.jks";//密钥库文件 String keyFilePass = "sslkey1";//密钥库的密码 String keyPass = "sslkey1";//密钥别名的密码 SSLServerSocket sslsocket = null;//安全连接套接字 KeyStore ks;//密钥库 KeyManagerFactory kmf;//密钥管理工厂 SSLContext sslc = null;//安全连接方式 //初始化安全连接的密钥 try { ks = KeyStore.getInstance("JKS"); ks.load(new FileInputStream(keyFile), keyFilePass.toCharArray()); kmf = KeyManagerFactory.getInstance("SunX509"); kmf.init(ks,keyPass.toCharArray()); sslc = SSLContext.getInstance("SSLv3"); sslc.init(kmf.getKeyManagers(), null, null); } catch (KeyManagementException ex) { Logger.getLogger(SSLServer.class.getName()).log(Level.SEVERE, null, ex); } catch (UnrecoverableKeyException ex) { Logger.getLogger(SSLServer.class.getName()).log(Level.SEVERE, null, ex); } catch (KeyStoreException ex) { Logger.getLogger(SSLServer.class.getName()).log(Level.SEVERE, null, ex); } catch (NoSuchAlgorithmException ex) { Logger.getLogger(SSLServer.class.getName()).log(Level.SEVERE, null, ex); } catch (CertificateException ex) { Logger.getLogger(SSLServer.class.getName()).log(Level.SEVERE, null, ex); } //用安全连接的工厂来创建安全连接套接字 SSLServerSocketFactory sslssf = sslc.getServerSocketFactory(); sslsocket = (SSLServerSocket) sslssf.createServerSocket(port);//创建并进入监听 System.out.println("Listening..."); SSLSocket ssocket = (SSLSocket)sslsocket.accept();//接受客户端的连接 System.out.println("Server Connection OK~"); System.out.println("========================"); System.out.println(""); //以下代码同socket通讯实例中的代码 BufferedReader socketIn = new BufferedReader(new InputStreamReader(ssocket.getInputStream())); BufferedReader userIn = new BufferedReader(new InputStreamReader(System.in)); PrintStream socketOut = new PrintStream(ssocket.getOutputStream()); String s; while (true) { System.out.println("Please wait client 's message.."); System.out.println(""); s = socketIn.readLine(); System.out.println("Client Message: " + s); if ( s.trim().equals("BYE") ) break; System.out.print("Server Message: "); s = userIn.readLine(); socketOut.println(s); if ( s.trim().equals("BYE") ) break; } socketIn.close(); socketOut.close(); userIn.close(); sslsocket.close(); } public static void main(String [] args) { try { startSSLServer(); } catch (Exception e) { System.out.println("Error: " + e); } } } 

 

以上..基本实现了SSL连接..用wireshark抓包比较..证明此方法确实经过加密..比较安全..