创建带证书的安全连接HttpsURLConnection

	/**
     * 创建连接
     * @param reqUrl 请求地址
     * @param reqBody 发送内容
     * @param pwd 证书密码
     * @param path 证书存放地址
     * @paramNoSuchAlgorithmException
     */
    public HttpsURLConnection createSSLConnection(String reqUrl, String reqBody, String pwd,String path) throws Exception{
        URL url = new URL(reqUrl);
        HttpsURLConnection conn = (HttpsURLConnection) url.openConnection();
        conn.setConnectTimeout(30000); // 设置连接主机超时（单位：毫秒)
        conn.setReadTimeout(30000); // 设置从主机读取数据超时（单位：毫秒)
        conn.setDoOutput(true); // post请求参数要放在http正文内，顾设置成true，默认是false
        conn.setDoInput(true); // 设置是否从httpUrlConnection读入，默认情况下是true
        conn.setUseCaches(false); // Post 请求不能使用缓存
        // 设定传送的内容类型是可序列化的java对象(如果不设此项,在传送序列化对象时,当WEB服务默认的不是这种类型时可能抛java.io.EOFException)
        conn.setRequestProperty("Content-Type", "application/x-www-form-urlencoded");
        conn.setRequestMethod("POST");// 设定请求的方法为"POST"，默认是GET
        conn.setRequestProperty("Content-Length", reqBody.length() + "");
        //验证主机
        conn.setHostnameVerifier(new HostnameVerifier() {
            @Override
            public boolean verify(String s, SSLSession sslSession) {
                return true;
            }
        });
        try {
            SSLSocketFactory sslSocketFactory = initCert(pwd,path);
            conn.setSSLSocketFactory(sslSocketFactory);
        }catch (Exception e){
            throw new Exception("证书加载错误");
        }
        String encode = "utf-8";
        OutputStreamWriter out = new OutputStreamWriter(conn.getOutputStream(), encode);
        out.write(reqBody.toString());
        out.flush();
        out.close();
        return conn;
    }
    /**
     * 加载证书
     * @param pwd 证书密码
     * @param path 证书存放地址
     */
    private SSLSocketFactory initCert(String pwd, String path) throws Exception {
        FileInputStream instream = null;
        try {
            instream = new FileInputStream(new File(path));

            //将证书加载进证书库
            KeyStore ks = KeyStore.getInstance("PKCS12");
            ks.load(instream, pwd.toCharArray());
            //初始化秘钥管理器
            KeyManagerFactory keyManagerFactory = KeyManagerFactory.getInstance(KeyManagerFactory.getDefaultAlgorithm());
            keyManagerFactory.init(ks, pwd.toCharArray());

            //信任所有证书
            X509TrustManager tm = new X509TrustManager() {
                @Override
                public void checkClientTrusted(X509Certificate[] x509Certificates, String s) throws CertificateException { }

                @Override
                public void checkServerTrusted(X509Certificate[] x509Certificates, String s) throws CertificateException { }

                @Override
                public X509Certificate[] getAcceptedIssuers() {
                    return null;
                }
            };

            SSLContext sslContext = SSLContext.getInstance("TLS");

            // 第一个参数是授权的密钥管理器，用来授权验证。TrustManager[]第二个是被授权的证书管理器，用来验证服务器端的证书。第三个参数是一个随机数值，可以填写null
            sslContext.init(keyManagerFactory.getKeyManagers(), new TrustManager[]{tm}, null);
            return sslContext.getSocketFactory();
        }catch(Exception e){
            e.printStackTrace();
            throw new Exception(e.getMessage());
        }finally {
            if(instream != null){
                try{instream.close();}catch (IOException e1){e1.printStackTrace();}
            }
        }
    }