Java Socket实战之五 使用加密协议传输对象

前面几篇博文提到了Socket中一些常用的用法，但是对于一些有安全要求的应用就需要加密传输的数据，此时就需要用到SSLSocket了。

还是一样需要一个实现了java.io.Serializable接口的简单Java对象

[java] view plain copy print ?

1. package com.googlecode.garbagecan.test.socket.ssl; 
2.  
3. public class User implements java.io.Serializable { 
4.     private static final long serialVersionUID = 1L; 
5.     private String name; 
6.     private String password; 
7.  
8.     public User() { 
9.          
10.     } 
11.      
12.     public User(String name, String password) { 
13.         this.name = name; 
14.         this.password = password; 
15.     } 
16.      
17.     public String getName() { 
18.         return name; 
19.     } 
20.  
21.     public void setName(String name) { 
22.         this.name = name; 
23.     } 
24.  
25.     public String getPassword() { 
26.         return password; 
27.     } 
28.  
29.     public void setPassword(String password) { 
30.         this.password = password; 
31.     } 
32.      
33. } 

package com.googlecode.garbagecan.test.socket.ssl;

public class User implements java.io.Serializable {
	private static final long serialVersionUID = 1L;
	private String name;
	private String password;

	public User() {
		
	}
	
	public User(String name, String password) {
		this.name = name;
		this.password = password;
	}
	
	public String getName() {
		return name;
	}

	public void setName(String name) {
		this.name = name;
	}

	public String getPassword() {
		return password;
	}

	public void setPassword(String password) {
		this.password = password;
	}
	
}

SSL Server类，这里需要用到ServerSocketFactory类来创建SSLServerSocket类实例，然后在通过SSLServerSocket来获取SSLSocket实例，这里考虑到面向对象中的面向接口编程的理念，所以代码中并没有出现SSLServerSocket和SSLSocket，而是用了他们的父类ServerSocket和Socket。在获取到ServerSocket和Socket实例以后，剩下的代码就和不使用加密方式一样了。

[java] view plain copy print ?

1. package com.googlecode.garbagecan.test.socket.ssl; 
2.  
3. import java.io.BufferedInputStream; 
4. import java.io.IOException; 
5. import java.io.ObjectInputStream; 
6. import java.io.ObjectOutputStream; 
7. import java.net.ServerSocket; 
8. import java.net.Socket; 
9. import java.util.logging.Level; 
10. import java.util.logging.Logger; 
11.  
12. import javax.net.ServerSocketFactory; 
13. import javax.net.ssl.SSLServerSocketFactory; 
14.  
15. public class MyServer { 
16.      
17.     private final static Logger logger = Logger.getLogger(MyServer.class.getName()); 
18.      
19.     public static void main(String[] args) { 
20.         try { 
21.             ServerSocketFactory factory = SSLServerSocketFactory.getDefault(); 
22.             ServerSocket server = factory.createServerSocket(10000); 
23.              
24.             while (true) { 
25.                 Socket socket = server.accept(); 
26.                 invoke(socket); 
27.             } 
28.         } catch (Exception ex) { 
29.             ex.printStackTrace(); 
30.         } 
31.     } 
32.      
33.     private static void invoke(final Socket socket) throws IOException { 
34.         new Thread(new Runnable() { 
35.             public void run() { 
36.                 ObjectInputStream is = null; 
37.                 ObjectOutputStream os = null; 
38.                 try { 
39.                     is = new ObjectInputStream(new BufferedInputStream(socket.getInputStream())); 
40.                     os = new ObjectOutputStream(socket.getOutputStream()); 
41.  
42.                     Object obj = is.readObject(); 
43.                     User user = (User)obj; 
44.                     System.out.println("user: " + user.getName() + "/" + user.getPassword()); 
45.  
46.                     user.setName(user.getName() + "_new"); 
47.                     user.setPassword(user.getPassword() + "_new"); 
48.  
49.                     os.writeObject(user); 
50.                     os.flush(); 
51.                 } catch (IOException ex) { 
52.                     logger.log(Level.SEVERE, null, ex); 
53.                 } catch(ClassNotFoundException ex) { 
54.                     logger.log(Level.SEVERE, null, ex); 
55.                 } finally { 
56.                     try { 
57.                         is.close(); 
58.                     } catch(Exception ex) {} 
59.                     try { 
60.                         os.close(); 
61.                     } catch(Exception ex) {} 
62.                     try { 
63.                         socket.close(); 
64.                     } catch(Exception ex) {} 
65.                 } 
66.             } 
67.         }).start(); 
68.     } 
69. } 

package com.googlecode.garbagecan.test.socket.ssl;

import java.io.BufferedInputStream;
import java.io.IOException;
import java.io.ObjectInputStream;
import java.io.ObjectOutputStream;
import java.net.ServerSocket;
import java.net.Socket;
import java.util.logging.Level;
import java.util.logging.Logger;

import javax.net.ServerSocketFactory;
import javax.net.ssl.SSLServerSocketFactory;

public class MyServer {
	
	private final static Logger logger = Logger.getLogger(MyServer.class.getName());
	
	public static void main(String[] args) {
		try {
			ServerSocketFactory factory = SSLServerSocketFactory.getDefault();
			ServerSocket server = factory.createServerSocket(10000);
			
			while (true) {
				Socket socket = server.accept();
				invoke(socket);
			}
		} catch (Exception ex) {
			ex.printStackTrace();
		}
	}
	
	private static void invoke(final Socket socket) throws IOException {
		new Thread(new Runnable() {
			public void run() {
				ObjectInputStream is = null;
				ObjectOutputStream os = null;
				try {
					is = new ObjectInputStream(new BufferedInputStream(socket.getInputStream()));
					os = new ObjectOutputStream(socket.getOutputStream());

					Object obj = is.readObject();
					User user = (User)obj;
					System.out.println("user: " + user.getName() + "/" + user.getPassword());

					user.setName(user.getName() + "_new");
					user.setPassword(user.getPassword() + "_new");

					os.writeObject(user);
					os.flush();
				} catch (IOException ex) {
					logger.log(Level.SEVERE, null, ex);
				} catch(ClassNotFoundException ex) {
					logger.log(Level.SEVERE, null, ex);
				} finally {
					try {
						is.close();
					} catch(Exception ex) {}
					try {
						os.close();
					} catch(Exception ex) {}
					try {
						socket.close();
					} catch(Exception ex) {}
				}
			}
		}).start();
	}
}

SSL Client类和SSL Server类类似，只是将其中获取Socket的方式有所变化，其余的代码也和不使用加密方式一样。

[java] view plain copy print ?

1. package com.googlecode.garbagecan.test.socket.ssl; 
2.  
3. import java.io.BufferedInputStream; 
4. import java.io.IOException; 
5. import java.io.ObjectInputStream; 
6. import java.io.ObjectOutputStream; 
7. import java.net.Socket; 
8. import java.util.logging.Level; 
9. import java.util.logging.Logger; 
10.  
11. import javax.net.SocketFactory; 
12. import javax.net.ssl.SSLSocketFactory; 
13.  
14. public class MyClient { 
15.      
16. private final static Logger logger = Logger.getLogger(MyClient.class.getName()); 
17.  
18.     public static void main(String[] args) throws Exception { 
19.         for (int i = 0; i < 100; i++) { 
20.             Socket socket = null; 
21.             ObjectOutputStream os = null; 
22.             ObjectInputStream is = null; 
23.              
24.             try { 
25.                 SocketFactory factory = SSLSocketFactory.getDefault(); 
26.                 socket = factory.createSocket("localhost", 10000); 
27.      
28.                 os = new ObjectOutputStream(socket.getOutputStream()); 
29.                 User user = new User("user_" + i, "password_" + i); 
30.                 os.writeObject(user); 
31.                 os.flush(); 
32.                  
33.                 is = new ObjectInputStream(new BufferedInputStream(socket.getInputStream())); 
34.                 Object obj = is.readObject(); 
35.                 if (obj != null) { 
36.                     user = (User)obj; 
37.                     System.out.println("user: " + user.getName() + "/" + user.getPassword()); 
38.                 } 
39.             } catch(IOException ex) { 
40.                 logger.log(Level.SEVERE, null, ex); 
41.             } finally { 
42.                 try { 
43.                     is.close(); 
44.                 } catch(Exception ex) {} 
45.                 try { 
46.                     os.close(); 
47.                 } catch(Exception ex) {} 
48.                 try { 
49.                     socket.close(); 
50.                 } catch(Exception ex) {} 
51.             } 
52.         } 
53.     } 
54. } 

package com.googlecode.garbagecan.test.socket.ssl;

import java.io.BufferedInputStream;
import java.io.IOException;
import java.io.ObjectInputStream;
import java.io.ObjectOutputStream;
import java.net.Socket;
import java.util.logging.Level;
import java.util.logging.Logger;

import javax.net.SocketFactory;
import javax.net.ssl.SSLSocketFactory;

public class MyClient {
	
private final static Logger logger = Logger.getLogger(MyClient.class.getName());

	public static void main(String[] args) throws Exception {
		for (int i = 0; i < 100; i++) {
			Socket socket = null;
			ObjectOutputStream os = null;
			ObjectInputStream is = null;
			
			try {
				SocketFactory factory = SSLSocketFactory.getDefault();
				socket = factory.createSocket("localhost", 10000);
	
				os = new ObjectOutputStream(socket.getOutputStream());
				User user = new User("user_" + i, "password_" + i);
				os.writeObject(user);
				os.flush();
				
				is = new ObjectInputStream(new BufferedInputStream(socket.getInputStream()));
				Object obj = is.readObject();
				if (obj != null) {
					user = (User)obj;
					System.out.println("user: " + user.getName() + "/" + user.getPassword());
				}
			} catch(IOException ex) {
				logger.log(Level.SEVERE, null, ex);
			} finally {
				try {
					is.close();
				} catch(Exception ex) {}
				try {
					os.close();
				} catch(Exception ex) {}
				try {
					socket.close();
				} catch(Exception ex) {}
			}
		}
	}
}

代码写完了，下面就需要产生keystore文件了，运行下面的命令

[plain] view plain copy print ?

1. keytool -genkey -alias mysocket -keyalg RSA -keystore mysocket.jks 

keytool -genkey -alias mysocket -keyalg RSA -keystore mysocket.jks

在提示输入项中，密码项自己给定，其它都不改直接回车，这里我使用的密码是“mysocket”。

运行Server

[plain] view plain copy print ?

1. java -Djavax.net.ssl.keyStore=mysocket.jks -Djavax.net.ssl.keyStorePassword=mysocket com.googlecode.garbagecan.test.socket.ssl.MyServer 

java -Djavax.net.ssl.keyStore=mysocket.jks -Djavax.net.ssl.keyStorePassword=mysocket com.googlecode.garbagecan.test.socket.ssl.MyServer

运行Client

[plain] view plain copy print ?

1. java -Djavax.net.ssl.trustStore=mysocket.jks  -Djavax.net.ssl.trustStorePassword=mysocket com.googlecode.garbagecan.test.socket.ssl.MyClient 

java -Djavax.net.ssl.trustStore=mysocket.jks  -Djavax.net.ssl.trustStorePassword=mysocket com.googlecode.garbagecan.test.socket.ssl.MyClient