java 服务器 https_简单的Java HTTPS服务器

我最终使用的是：

try

{

// setup the socket address

InetSocketAddress address = new InetSocketAddress ( InetAddress.getLocalHost (), config.getHttpsPort () );

// initialise the HTTPS server

HttpsServer httpsServer = HttpsServer.create ( address, 0 );

SSLContext sslContext = SSLContext.getInstance ( "TLS" );

// initialise the keystore

char[] password = "simulator".toCharArray ();

KeyStore ks = KeyStore.getInstance ( "JKS" );

FileInputStream fis = new FileInputStream ( "lig.keystore" );

ks.load ( fis, password );

// setup the key manager factory

KeyManagerFactory kmf = KeyManagerFactory.getInstance ( "SunX509" );

kmf.init ( ks, password );

// setup the trust manager factory

TrustManagerFactory tmf = TrustManagerFactory.getInstance ( "SunX509" );

tmf.init ( ks );

// setup the HTTPS context and parameters

sslContext.init ( kmf.getKeyManagers (), tmf.getTrustManagers (), null );

httpsServer.setHttpsConfigurator ( new HttpsConfigurator( sslContext )

{

public void configure ( HttpsParameters params )

{

try

{

// initialise the SSL context

SSLContext c = SSLContext.getDefault ();

SSLEngine engine = c.createSSLEngine ();

params.setNeedClientAuth ( false );

params.setCipherSuites ( engine.getEnabledCipherSuites () );

params.setProtocols ( engine.getEnabledProtocols () );

// get the default parameters

SSLParameters defaultSSLParameters = c.getDefaultSSLParameters ();

params.setSSLParameters ( defaultSSLParameters );

}

catch ( Exception ex )

{

ILogger log = new LoggerFactory ().getLogger ();

log.exception ( ex );

log.error ( "Failed to create HTTPS port" );

}

}

} );

LigServer server = new LigServer ( httpsServer );

joinableThreadList.add ( server.getJoinableThread () );

}

catch ( Exception exception )

{

log.exception ( exception );

log.error ( "Failed to create HTTPS server on port " + config.getHttpsPort () + " of localhost" );

}

生成密钥库：

$ keytool -genkey -alias alias -keypass simulator \

-keystore lig.keystore -storepass simulator

潜在的storepass和keypass可能不同，在这种情况下ks.load和kmf.init必须分别使用storepass和keypass。