使java_websocket_cilent支持wss协议

1. 题外话：可以用nginx或者apache使用 https到http的代理，实现把wss服务代理到ws

server {
listen 443;
server_name test.xxxx.com;

access_log logs/test.xxxx.log main;

ssl on;
ssl_certificate /etc/test.xxxx.com.cer;  # 这里是服务端的证书路径
ssl_certificate_key /etc/test.xxxx.com.key; # 这里是秘钥路径
ssl_session_timeout 5m;
ssl_session_cache shared:SSL:10m;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2 SSLv2 SSLv3;
ssl_ciphers ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP;
ssl_prefer_server_ciphers on;
ssl_verify_client off;

location / {
proxy_redirect off;
proxy_pass http://127.0.0.1:7474; //主机上的ws服务端口
proxy_set_header Host $host;
proxy_set_header X-Real_IP $remote_addr;
proxy_set_header X-Forwarded-For $remote_addr:$remote_port;
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection “upgrade”;
}

}

2. 比较简单易用的一个websocket java客户端 https://github.com/TooTallNate/Java-WebSocket 不支持wss（最初不支持，19年看已经可以支持了），所以参考网上的方法，稍加修改封装了一个支持wss的客户端，代码如下：

package com.cdr.wsc;

import java.net.URI;
import java.security.cert.CertificateException;
import java.security.cert.X509Certificate;

import javax.net.ssl.HostnameVerifier;
import javax.net.ssl.SSLContext;
import javax.net.ssl.SSLSession;
import javax.net.ssl.TrustManager;
import javax.net.ssl.X509TrustManager;

import org.java_websocket.client.DefaultSSLWebSocketClientFactory;
import org.java_websocket.client.WebSocketClient;
import org.java_websocket.drafts.Draft;
 
abstract class SimpleWss extends WebSocketClient {

	public SimpleWss(URI serverURI) {
		super(serverURI);
		if(serverURI.toString().contains("wss://"))
			trustAllHosts(this);
	}
	
	public SimpleWss(URI serverURI,Draft draft) {
		super(serverURI,draft);
		if(serverURI.toString().contains("wss://"))
			trustAllHosts(this);
	}
 
	final static HostnameVerifier DO_NOT_VERIFY = new HostnameVerifier() {
        public boolean verify(String hostname, SSLSession session) {
            return true;
        }
    };
 
 
    static void trustAllHosts(SimpleWss appClient) {
    	System.out.println("wss");
        TrustManager[] trustAllCerts = new TrustManager[]{new X509TrustManager() {
            public java.security.cert.X509Certificate[] getAcceptedIssuers() {
                return new java.security.cert.X509Certificate[]{};
            }

			@Override
			public void checkClientTrusted(X509Certificate[] arg0, String arg1) throws CertificateException {
				// TODO Auto-generated method stub
				
			}

			@Override
			public void checkServerTrusted(X509Certificate[] arg0, String arg1) throws CertificateException {
				// TODO Auto-generated method stub
				
			}
        }};
 
        try {
            SSLContext sc = SSLContext.getInstance("TLS");
            sc.init(null, trustAllCerts, new java.security.SecureRandom());
            appClient.setWebSocketFactory(new DefaultSSLWebSocketClientFactory(sc));
        } catch (Exception e) {
            e.printStackTrace();
        }
    }
}

这里封装得到的SimpleWss和WebSocketClient的用法基本一致，如：

import java.net.URI;
import java.net.URISyntaxException;

import org.java_websocket.handshake.ServerHandshake;

public class EscTest {
	public static String initmsg = "{'cmd':'login','data':{'username':'xinji','password':'PASSWORD'}}"
			.replaceAll("'", "\"").replaceAll("PASSWORD", "1402");
	public static void main(String[] args) throws URISyntaxException {
		new SimpleWss(new URI("wss://tjpu.edu.org/websocket")) {

			@Override
			public void onClose(int arg0, String arg1, boolean arg2) {
				System.out.println("onClose");
			}

			@Override
			public void onError(Exception arg0) {
				System.out.println("onError");
				
			}

			@Override
			public void onMessage(String arg0) {
				System.out.println("onMessage");
				this.send(arg0);
			}

			@Override
			public void onOpen(ServerHandshake arg0) {
				System.out.println("onOpen");
				this.send(initmsg);
			}}.connect();
	}
}