Java Socket实战之五:使用加密协议传输对象

Java Socket实战之五:使用加密协议传输对象

前面几篇博文提到了Socket中一些常用的用法，但是对于一些有安全要求的应用就需要加密传输的数据，此时就需要用到SSLSocket了。

还是一样需要一个实现了java.io.Serializable接口的简单Java对象：

1. packagecom.googlecode.garbagecan.test.socket.ssl;
3. publicclassUserimplementsjava.io.Serializable{
4. privatestaticfinallongserialVersionUID=1L;
5. privateStringname;
6. privateStringpassword;
8. publicUser(){
10. }
12. publicUser(Stringname,Stringpassword){
13. this.name=name;
14. this.password=password;
15. }
17. publicStringgetName(){
18. returnname;
19. }
21. publicvoidsetName(Stringname){
22. this.name=name;
23. }
25. publicStringgetPassword(){
26. returnpassword;
27. }
29. publicvoidsetPassword(Stringpassword){
30. this.password=password;
31. }
33. }

SSL Server类，这里需要用到ServerSocketFactory类来创建SSLServerSocket类实例，然后在通过SSLServerSocket来获取SSLSocket实例，这里考虑到面向对象中的面向接口编程的理念，所以代码中并没有出现SSLServerSocket和SSLSocket，而是用了他们的父类ServerSocket和Socket。在获取到ServerSocket和Socket实例以后，剩下的代码就和不使用加密方式一样了。

1. packagecom.googlecode.garbagecan.test.socket.ssl;
3. importjava.io.BufferedInputStream;
4. importjava.io.IOException;
5. importjava.io.ObjectInputStream;
6. importjava.io.ObjectOutputStream;
7. importjava.net.ServerSocket;
8. importjava.net.Socket;
9. importjava.util.logging.Level;
10. importjava.util.logging.Logger;
12. importjavax.net.ServerSocketFactory;
13. importjavax.net.ssl.SSLServerSocketFactory;
15. publicclassMyServer{
17. privatefinalstaticLoggerlogger=Logger.getLogger(MyServer.class.getName());
19. publicstaticvoidmain(String[]args){
20. try{
21. ServerSocketFactoryfactory=SSLServerSocketFactory.getDefault();
22. ServerSocketserver=factory.createServerSocket(10000);
24. while(true){
25. Socketsocket=server.accept();
26. invoke(socket);
27. }
28. }catch(Exceptionex){
29. ex.printStackTrace();
30. }
31. }
33. privatestaticvoidinvoke(finalSocketsocket)throwsIOException{
34. newThread(newRunnable(){
35. publicvoidrun(){
36. ObjectInputStreamis=null;
37. ObjectOutputStreamos=null;
38. try{
39. is=newObjectInputStream(newBufferedInputStream(socket.getInputStream()));
40. os=newObjectOutputStream(socket.getOutputStream());
42. Objectobj=is.readObject();
43. Useruser=(User)obj;
44. System.out.println("user:"+user.getName()+"/"+user.getPassword());
46. user.setName(user.getName()+"_new");
47. user.setPassword(user.getPassword()+"_new");
49. os.writeObject(user);
50. os.flush();
51. }catch(IOExceptionex){
52. logger.log(Level.SEVERE,null,ex);
53. }catch(ClassNotFoundExceptionex){
54. logger.log(Level.SEVERE,null,ex);
55. }finally{
56. try{
57. is.close();
58. }catch(Exceptionex){}
59. try{
60. os.close();
61. }catch(Exceptionex){}
62. try{
63. socket.close();
64. }catch(Exceptionex){}
65. }
66. }
67. }).start();
68. }
69. }

SSL Client类和SSL Server类类似，只是将其中获取Socket的方式有所变化，其余的代码也和不使用加密方式一样。

1. packagecom.googlecode.garbagecan.test.socket.ssl;
3. importjava.io.BufferedInputStream;
4. importjava.io.IOException;
5. importjava.io.ObjectInputStream;
6. importjava.io.ObjectOutputStream;
7. importjava.net.Socket;
8. importjava.util.logging.Level;
9. importjava.util.logging.Logger;
11. importjavax.net.SocketFactory;
12. importjavax.net.ssl.SSLSocketFactory;
14. publicclassMyClient{
16. privatefinalstaticLoggerlogger=Logger.getLogger(MyClient.class.getName());
18. publicstaticvoidmain(String[]args)throwsException{
19. for(inti=0;i<100;i++){
20. Socketsocket=null;
21. ObjectOutputStreamos=null;
22. ObjectInputStreamis=null;
24. try{
25. SocketFactoryfactory=SSLSocketFactory.getDefault();
26. socket=factory.createSocket("localhost",10000);
28. os=newObjectOutputStream(socket.getOutputStream());
29. Useruser=newUser("user_"+i,"password_"+i);
30. os.writeObject(user);
31. os.flush();
33. is=newObjectInputStream(newBufferedInputStream(socket.getInputStream()));
34. Objectobj=is.readObject();
35. if(obj!=null){
36. user=(User)obj;
37. System.out.println("user:"+user.getName()+"/"+user.getPassword());
38. }
39. }catch(IOExceptionex){
40. logger.log(Level.SEVERE,null,ex);
41. }finally{
42. try{
43. is.close();
44. }catch(Exceptionex){}
45. try{
46. os.close();
47. }catch(Exceptionex){}
48. try{
49. socket.close();
50. }catch(Exceptionex){}
51. }
52. }
53. }
54. }

代码写完了，下面就需要产生keystore文件了，运行下面的命令

1. keytool-genkey-aliasmysocket-keyalgRSA-keystoremysocket.jks

在提示输入项中，密码项自己给定，其它都不改直接回车，这里我使用的密码是“mysocket”。

运行Server

1. java-Djavax.net.ssl.keyStore=mysocket.jks-Djavax.net.ssl.keyStorePassword=mysocketcom.googlecode.garbagecan.test.socket.ssl.MyServer

运行Client

1. java-Djavax.net.ssl.trustStore=mysocket.jks-Djavax.net.ssl.trustStorePassword=mysocketcom.googlecode.garbagecan.test.socket.ssl.MyClient

原文链接：http://blog.csdn.net/kongxx/article/details/7259837