在Android上实现SSL握手（客户端需要密钥和证书），实现服务器和客户端之间Socket交互

最新推荐文章于 2024-09-02 08:58:54 发布

君望永远

最新推荐文章于 2024-09-02 08:58:54 发布

阅读量2k

点赞数

分类专栏： Java Android 文章标签： socket android ssl 服务器 manager server

本文链接：https://blog.csdn.net/binyao02123202/article/details/7659044

版权

Java 同时被 2 个专栏收录

208 篇文章 0 订阅

订阅专栏

Android

154 篇文章 0 订阅

订阅专栏

Android的私钥和信任证书的格式必须是BKS格式的，通过配置本地JDK，让keytool可以生成BKS格式的私钥和信任证书,java本身没有BouncyCastle密库

服务端：

    Java代码   
    
  
    
 public class SSLServer {    
     
     private static final int SERVER_PORT = 50030;    
     private static final String SERVER_KEY_PASSWORD = "123456";    
     private static final String SERVER_AGREEMENT = "TLS";//使用协议    
     private static final String SERVER_KEY_MANAGER = "SunX509";//密钥管理器    
     private static final String SERVER_KEY_KEYSTORE = "JKS";//密库，这里用的是Java自带密库    
     private static final String SERVER_KEYSTORE_PATH = "src/data/kserver.keystore";//密库路径    
     private SSLServerSocket serverSocket;    
     
     public static void main(String[] args) {    
         SSLServer server = new SSLServer();    
         server.init();    
         server.start();    
     }    
     
     //由于该程序不是演示Socket监听，所以简单采用单线程形式，并且仅仅接受客户端的消息，并且返回客户端指定消息    
     public void start() {    
         if (serverSocket == null) {    
             System.out.println("ERROR");    
             return;    
         }    
         while (true) {    
             try {    
                 System.out.println("Server Side......");    
                 Socket s = serverSocket.accept();    
                 InputStream input = s.getInputStream();    
                 OutputStream output = s.getOutputStream();    
     
                 BufferedInputStream bis = new BufferedInputStream(input);    
                 BufferedOutputStream bos = new BufferedOutputStream(output);    
     
                 byte[] buffer = new byte[20];    
                 bis.read(buffer);    
                 System.out.println(new String(buffer));    
     
                 bos.write("This is Server".getBytes());    
                 bos.flush();    
     
                 s.close();    
             } catch (Exception e) {    
                 System.out.println(e);    
             }    
         }    
     }    
         
     public void init() {    
         try {    
             //取得SSLContext    
             SSLContext ctx = SSLContext.getInstance(SERVER_AGREEMENT);    
             //取得SunX509私钥管理器    
             KeyManagerFactory kmf = KeyManagerFactory.getInstance(SERVER_KEY_MANAGER);    
             //取得JKS密库实例    
             KeyStore ks = KeyStore.getInstance(SERVER_KEY_KEYSTORE);    
             //加载服务端私钥    
             ks.load(new FileInputStream(SERVER_KEYSTORE_PATH), SERVER_KEY_PASSWORD.toCharArray());    
             //初始化    
             kmf.init(ks, SERVER_KEY_PASSWORD.toCharArray());    
             //初始化SSLContext    
             ctx.init(kmf.getKeyManagers(),null, null);    
             //通过SSLContext取得ServerSocketFactory，创建ServerSocket    
             serverSocket = (SSLServerSocket) ctx.getServerSocketFactory().createServerSocket(SERVER_PORT);    
         } catch (Exception e) {    
             System.out.println(e);    
         }    
     }    
 }    

客户端：

    Java代码   
    
  
 public class MySSLSocket extends Activity {    
     private static final int SERVER_PORT = 50030;//端口号    
     private static final String SERVER_IP = "www.178zhe.com";//连接IP    
     private static final String CLIENT_KET_PASSWORD = "123456";//私钥密码    
     private static final String CLIENT_TRUST_PASSWORD = "123456";//信任证书密码    
     private static final String CLIENT_AGREEMENT = "TLS";//使用协议    
     private static final String CLIENT_KEY_MANAGER = "X509";//密钥管理器    
     private static final String CLIENT_TRUST_MANAGER = "X509";//    
     private static final String CLIENT_KEY_KEYSTORE = "BKS";//密库，这里用的是BouncyCastle密库    
     private static final String CLIENT_TRUST_KEYSTORE = "BKS";//    
     private static final String ENCONDING = "utf-8";//字符集    
     private SSLSocket Client_sslSocket;    
     private Log tag;    
     private TextView tv;    
     private Button btn;    
     private Button btn2;    
     private Button btn3;    
     private EditText et;    
         
     /** Called when the activity is first created. */    
     @Override    
     public void onCreate(Bundle savedInstanceState) {    
         super.onCreate(savedInstanceState);    
         setContentView(R.layout.main);    
         tv = (TextView) findViewById(R.id.TextView01);    
         et = (EditText) findViewById(R.id.EditText01);    
         btn = (Button) findViewById(R.id.Button01);    
         btn2 = (Button) findViewById(R.id.Button02);    
         btn3 = (Button) findViewById(R.id.Button03);    
             
         btn.setOnClickListener(new Button.OnClickListener(){    
             @Override    
             public void onClick(View arg0) {    
                 if(null != Client_sslSocket){    
                     getOut(Client_sslSocket, et.getText().toString());    
                     getIn(Client_sslSocket);    
                     et.setText("");    
                 }    
             }    
         });    
         btn2.setOnClickListener(new Button.OnClickListener(){    
             @Override    
             public void onClick(View arg0) {    
                 try {    
                     Client_sslSocket.close();    
                     Client_sslSocket = null;    
                 } catch (IOException e) {    
                     e.printStackTrace();    
                 }    
             }    
         });    
         btn3.setOnClickListener(new View.OnClickListener(){    
             @Override    
             public void onClick(View arg0) {    
                 init();    
                 getIn(Client_sslSocket);    
             }    
         });    
     }    
         
     public void init() {    
         try {    
             //取得SSL的SSLContext实例    
             SSLContext sslContext = SSLContext.getInstance(CLIENT_AGREEMENT);    
             //取得KeyManagerFactory和TrustManagerFactory的X509密钥管理器实例    
             KeyManagerFactory keyManager = KeyManagerFactory.getInstance(CLIENT_KEY_MANAGER);    
             TrustManagerFactory trustManager = TrustManagerFactory.getInstance(CLIENT_TRUST_MANAGER);    
             //取得BKS密库实例    
             KeyStore kks= KeyStore.getInstance(CLIENT_KEY_KEYSTORE);    
             KeyStore tks = KeyStore.getInstance(CLIENT_TRUST_KEYSTORE);    
             //加客户端载证书和私钥,通过读取资源文件的方式读取密钥和信任证书    
             kks.load(getBaseContext()    
                     .getResources()    
                     .openRawResource(R.drawable.kclient),CLIENT_KET_PASSWORD.toCharArray());    
             tks.load(getBaseContext()    
                     .getResources()    
                     .openRawResource(R.drawable.lt_client),CLIENT_TRUST_PASSWORD.toCharArray());    
             //初始化密钥管理器    
             keyManager.init(kks,CLIENT_KET_PASSWORD.toCharArray());    
             trustManager.init(tks);    
             //初始化SSLContext    
             sslContext.init(keyManager.getKeyManagers(),trustManager.getTrustManagers(),null);    
             //生成SSLSocket    
             Client_sslSocket = (SSLSocket) sslContext.getSocketFactory().createSocket(SERVER_IP,SERVER_PORT);    
         } catch (Exception e) {    
             tag.e("MySSLSocket",e.getMessage());    
         }    
     }    
             
     public void getOut(SSLSocket socket,String message){    
         PrintWriter out;    
         try {    
             out = new PrintWriter(    
                     new BufferedWriter(    
                             new OutputStreamWriter(    
                                     socket.getOutputStream()    
                                     )    
                             ),true);    
             out.println(message);    
         } catch (IOException e) {    
             e.printStackTrace();    
         }    
     }    
         
     public void getIn(SSLSocket socket){    
         BufferedReader in = null;    
         String str = null;    
         try {    
             in = new BufferedReader(    
                     new InputStreamReader(    
                             socket.getInputStream()));    
             str = new String(in.readLine().getBytes(),ENCONDING);    
         } catch (UnsupportedEncodingException e) {    
             e.printStackTrace();    
         } catch (IOException e) {    
             e.printStackTrace();    
         }    
         new AlertDialog    
         .Builder(MySSLSocket.this)    
         .setTitle("服务器消息")    
         .setNegativeButton("确定", null)    
         .setIcon(android.R.drawable.ic_menu_agenda)    
         .setMessage(str)    
         .show();    
     }    
 }    