Https加密的实现

最新推荐文章于 2024-08-21 09:00:00 发布

kioo

最新推荐文章于 2024-08-21 09:00:00 发布

阅读量1.3k

点赞数

分类专栏： Java后端

本文链接：https://blog.csdn.net/kioo_i_see/article/details/78126032

版权

Java后端专栏收录该内容

7 篇文章 0 订阅

订阅专栏

工作需要，要将原来的http连接改成https连接。

改成https连接首先需要服务器支持，服务器支持https连接客户端才能连接成功。

具体https原理可以参考下面这几个连接

1. java官网对https加密连接的解释

http://docs.oracle.com/javase/7/docs/technotes/guides/security/jsse/JSSERefGuide.html#SecureConnSample

2. 官网指向的例子地址

http://docs.oracle.com/javase/7/docs/technotes/guides/security/jsse/samples/index.html

3. apache的地址

http://hc.apache.org/httpcomponents-client-4.5.x/tutorial/html/connmgmt.html#d5e449

4. apache例子地址

http://hc.apache.org/httpcomponents-client-ga/httpclient/examples/org/apache/http/examples/client/ClientCustomSSL.java

5. 博客中说的不错的地址

http://blog.csdn.net/kobejayandy/article/details/52433660

http://blog.csdn.net/dtlscsl/article/details/50118225

http://blog.csdn.net/llwszjj/article/details/36868177

http://blog.csdn.net/chw1989/article/details/7584995

http://410063005.iteye.com/blog/1751243

http://blog.csdn.net/rongyongfeikai2/article/details/41659353/

6.加密相关术语的官方解释

http://docs.oracle.com/javase/7/docs/technotes/guides/security/StandardNames.html#SSLContext

上面这些都是我在了解java开发https连接服务器觉得有用的链接，前4个都是英文的，这个最权威了，不过，对英文不好的人就难度有些大，

第5个都是相关博客总结的，可以帮助大家理解。

我在学习的过程写的代码：

其实是我抄的：

代码来源是 http://fishhappy365.iteye.com/blog/963876

首先是服务器端的：

import java.io.BufferedReader;
import java.io.FileInputStream;
import java.io.InputStreamReader;
import java.io.PrintWriter;
import java.net.Socket;
import java.security.KeyStore;

import javax.net.ssl.KeyManagerFactory;
import javax.net.ssl.SSLContext;
import javax.net.ssl.SSLServerSocket;
import javax.net.ssl.SSLServerSocketFactory;
import javax.net.ssl.SSLSocket;

/*
 * 打开命令行输入   keytool -genkey -keystore SSLKey -keyalg rsa -alias SSL
 * 第一个参数是要生成的证书的名字，第二个参数是证书的别名。rsa指明了我们使用的加密方法。
 * 系统会要求输入证书发放者的信息，逐项输入即可。
 */
public class Main006_SSLServer {

	static int port = 8456; // 系统将要监听的端口号
	static SSLServerSocket server;

	/*
	 * 构造函数
	 */
	public Main006_SSLServer() {}

	/*
	 * @param port 监听的端口号
	 * 
	 * @return 返回一个SSLServerSocket对象
	 */
	private static SSLServerSocket getServerSocket(int thePort) {
		SSLServerSocket s = null;
		try {
			 String key = "C:/rsatemp/SSLKey"; // 证书的位置

			char keyStorePass[] = "123456".toCharArray(); // 证书密码（生成证书时输入的）

			char keyPassword[] = "123456".toCharArray(); // 证书别称所使用的主要密码 （生成证书时输入的）

			KeyStore ks = KeyStore.getInstance("JKS"); // 创建JKS密钥库

			ks.load(new FileInputStream(key), keyStorePass);

			// 创建管理JKS密钥库的X.509密钥管理器
			KeyManagerFactory kmf = KeyManagerFactory.getInstance("SunX509");

			kmf.init(ks, keyPassword);

			// 构造SSL环境，指定SSL版本为3.0，也可以使用TLSv1，但是SSLv3更加常用。
			SSLContext sslContext = SSLContext.getInstance("TLSv1");

			/*
			 * 初始化SSL环境。第二个参数是告诉JSSE使用的可信任证书的来源，
			 * 设置为null是从javax.net.ssl.trustStore中获得证书。
			 * 第三个参数是JSSE生成的随机数，这个参数将影响系统的安全性， 设置为null是个好选择，可以保证JSSE的安全性。
			 */
			sslContext.init(kmf.getKeyManagers(), null, null);

			// 根据上面配置的SSL上下文来产生SSLServerSocketFactory,与通常的产生方法不同
			SSLServerSocketFactory factory = sslContext.getServerSocketFactory();

			s = (SSLServerSocket) factory.createServerSocket(thePort);

		} catch (Exception e) {
			System.out.println(e);
		}
		return (s);
	}

	public static void main(String args[]) {
		try {
			server = getServerSocket(port);
			System.out.println("在" + port + "端口等待连接...");

			while (true) {
				SSLSocket socket = (SSLSocket) server.accept();

				// 将得到的socket交给CreateThread对象处理,主线程继续监听
				new CreateThread(socket);
			}
		} catch (Exception e) {
			System.out.println("main方法错误80:" + e);
		}
	}

}

/*
 * 内部类,获得主线程的socket连接,生成子线程来处理
 */

class CreateThread extends Thread {
	static BufferedReader in;
	static PrintWriter out;
	static Socket s;

	/*
	 * 构造函数,获得socket连接,初始化in和out对象
	 */
	public CreateThread(Socket socket) {
		try {
			s = socket;

			out = new PrintWriter(s.getOutputStream(), true);

			in = new BufferedReader(new InputStreamReader(s.getInputStream(), "gb2312"));

			this.start(); // 开新线程执行run方法

		} catch (Exception e) {
			System.out.println(e);
		}
	}

	/*
	 * 线程方法,处理socket传递过来的数据
	 */
	public void run() {
		try {
			String msg = in.readLine();
			System.out.println(msg);
			s.close();
		} catch (Exception e) {
			System.out.println(e);
		}
	}
}

客户端的代码：

//把证书拷贝到java.home下/lib/security目录下，名字SSLKey改为jssecacerts，然后可以直接执行客户端：
//http://hi.baidu.com/sunjoe/blog/item/629daa3ef802edff828b13e6.html
import java.io.PrintWriter;  
import java.net.Socket;  
import javax.net.ssl.SSLSocketFactory; 
public class Main006_SSLClient {
	static int port = 8456;  
	  
    public static void main(String args[]) {  
        try {  
            SSLSocketFactory factory = (SSLSocketFactory) SSLSocketFactory  
                    .getDefault();  
  
            Socket s = factory.createSocket("127.0.0.1", port);  
  
            PrintWriter out = new PrintWriter(s.getOutputStream(), true);  
            out.println("Hello ren zha");  
            out.close();  
            s.close();  
        } catch (Exception e) {  
            System.out.println(e);  
        }  
    }
	
}

下面是我使用apache的httpClient模拟客户端请求的代码

package com.chinasofti.vtmsln.httpclient.bean;

import java.security.cert.CertificateException;
import java.security.cert.X509Certificate;

import javax.net.ssl.SSLContext;
import javax.net.ssl.TrustManager;
import javax.net.ssl.X509TrustManager;

import org.apache.http.HttpEntity;
import org.apache.http.client.methods.HttpPost;
import org.apache.http.conn.ssl.NoopHostnameVerifier;
import org.apache.http.conn.ssl.SSLConnectionSocketFactory;
import org.apache.http.entity.ContentType;
import org.apache.http.entity.mime.MultipartEntityBuilder;
import org.apache.http.entity.mime.content.StringBody;
import org.apache.http.impl.client.CloseableHttpClient;
import org.apache.http.impl.client.HttpClients;

public class httpsClientTest {

	public static void main(String[] args) throws Exception {
		X509TrustManager x509TrustManager = new X509TrustManager(){
			@Override
			public void checkClientTrusted(X509Certificate[] arg0, String arg1) throws CertificateException {
			}
			@Override
			public void checkServerTrusted(X509Certificate[] arg0, String arg1) throws CertificateException {
			}
			@Override
			public X509Certificate[] getAcceptedIssuers() {
				return new X509Certificate[] {};
			}
		};
		
		SSLContext sslContext = SSLContext.getInstance("SSL");
		sslContext.init(null, new TrustManager[]{x509TrustManager}, null);
		
		 SSLConnectionSocketFactory ssf = new SSLConnectionSocketFactory(sslContext,
	                new String[] { "TLSv1" },
	                null,
	                NoopHostnameVerifier.INSTANCE);
		 /*CloseableHttpClient httpClient =  HttpClients.custom()
		            .setSSLHostnameVerifier(SSLConnectionSocketFactory.ALLOW_ALL_HOSTNAME_VERIFIER)
		            .setSSLSocketFactory(ssf).build();*/
		 CloseableHttpClient httpClient = new HttpClientFactoryBean().getObject();
		 HttpPost httppost = new HttpPost("https://www.cctv.com");
		 StringBody userPwd = new StringBody("password", ContentType.TEXT_PLAIN);
		 StringBody userId = new StringBody("monitor01", ContentType.TEXT_PLAIN);
		 StringBody userType = new StringBody("user", ContentType.TEXT_PLAIN);
		 HttpEntity reqEntity = MultipartEntityBuilder.create()
                 .addPart("userPwd", userPwd).addPart("userId", userId).addPart("userType", userType)
                 .build();
		 httppost.setEntity(reqEntity);
		 
		 httpClient.execute(httppost);
		    
		  
	}

}

当然，报错也会有

关于这个报错