java1.6 tls1.1_jdk1.6 支持 tls1.2协议并忽略身份验证

最新推荐文章于 2024-07-27 10:00:00 发布

僵尸吃了诺牛

最新推荐文章于 2024-07-27 10:00:00 发布

阅读量1.1k

点赞数

文章标签： java1.6 tls1.1

本文链接：https://blog.csdn.net/weixin_28909745/article/details/114135270

版权

该博客介绍了如何在Java 1.6环境中配置TLS 1.1及以上版本，并实现对证书验证的忽略。通过创建自定义的`TLSSocketConnectionFactory`，利用BouncyCastleProvider增强SSL连接，同时在连接过程中设置信任所有证书，从而达到忽略身份验证的目的。

摘要由CSDN通过智能技术生成

import java.io.*;importjava.net.UnknownHostException;import java.security.*;import java.security.cert.*;import java.util.*;import javax.net.ssl.*;importjavax.security.cert.X509Certificate;import org.bouncycastle.crypto.tls.*;importorg.bouncycastle.jce.provider.BouncyCastleProvider;public class TLSSocketConnectionFactory extendsSSLSocketFactory {static{if (Security.getProvider(BouncyCastleProvider.PROVIDER_NAME) == null) {

Security.addProvider(newBouncyCastleProvider());

}

@Overridepublic Socket createSocket(Socket socket, final String host, intport,boolean arg3) throwsIOException {if (socket == null) {

socket= newSocket();

}if (!socket.isConnected()) {

socket.connect(newInetSocketAddress(host, port));

}final TlsClientProtocol tlsClientProtocol = new TlsClientProtocol(socket.getInputStream(), socket.getOutputStream(), newSecureRandom());return_createSSLSocket(host, tlsClientProtocol);

}

@Overridepublic String[] getDefaultCipherSuites() { return null; }

@Overridepublic String[] getSupportedCipherSuites() { return null; }

@Overridepublic Socket createSocket(String host, int port) throws IOException, UnknownHostException { throw newUnsupportedOperationException(); }

@Overridepublic Socket createSocket(InetAddress host, int port) throws IOException { throw newUnsupportedOperationException(); }

@Overridepublic Socket createSocket(String host, int port, InetAddress localHost, int localPort) throws IOException, UnknownHostException { return null; }

@Overridepublic Socket createSocket(InetAddress address, int port, InetAddress localAddress, int localPort) throws IOException { throw newUnsupportedOperationException(); }private SSLSocket _createSSLSocket(final String host, finalTlsClientProtocol tlsClientProtocol) {return newSSL