java 生成truststore_java 根据keystore和truststore创建SSLContext

package com.lz.util;

import com.lz.client.model.MyClientConfig;

import javax.net.ssl.*;

import java.io.File;

import java.io.FileInputStream;

import java.security.KeyStore;

import java.security.cert.X509Certificate;

public class SSLContextUtil {

private static SSLContext configureSsl(String keystorePath,

String keystorePass,

String truststorePath,

String truststorePass) throws Exception {

// Create a trust manager that does not validate certificate chains

TrustManager[] trustManagers = null;

if (truststorePath == null || truststorePass == null) {

trustManagers = new TrustManager[] {new X509TrustManager() {

public java.security.cert.X509Certificate[] getAcceptedIssuers() {

return null;

}

public void checkClientTrusted(X509Certificate[] certs, String authType) {

}

public void checkServerTrusted(X509Certificate[] certs, String authType) {

}

}};

} else {

KeyStore ks = KeyStore.getInstance(KeyStore.getDefaultType());

File ts = new File(truststorePath);

System.out.println("Reading trust store at " + ts.getAbsolutePath());

FileInputStream fin = new FileInputStream(ts);

ks.load(fin, truststorePass.toCharArray());

fin.close();

TrustManagerFactory kmf = TrustManagerFactory.getInstance(

TrustManagerFactory.getDefaultAlgorithm());

kmf.init(ks);

trustManagers = kmf.getTrustManagers();

for (TrustManager trustManager : trustManagers) {

System.out.println("CONFIGURED TRUST MANAGER:" + trustManager);

}

}

KeyManager[] keyManagers = null;

if (keystorePath != null && keystorePass != null) {

KeyStore ks = KeyStore.getInstance(KeyStore.getDefaultType());

File keys = new File(keystorePath);

System.out.println("Reading key store at " + keys.getAbsolutePath());

FileInputStream fin = new FileInputStream(keys);

ks.load(fin, keystorePass.toCharArray());

fin.close();

KeyManagerFactory kmf = KeyManagerFactory.getInstance(

KeyManagerFactory.getDefaultAlgorithm());

kmf.init(ks, keystorePass.toCharArray());

keyManagers = kmf.getKeyManagers();

for (KeyManager keyManager : keyManagers) {

System.out.println("CONFIGURED KEY MANAGER:" + keyManager);

}

}

SSLContext sc = SSLContext.getInstance("TLS");

sc.init(keyManagers, trustManagers, new java.security.SecureRandom());

return sc;

}

public static SSLContext createSslContext(MyClientConfig config) throws Exception {

return configureSsl(config.getKeystorePath(), config.getKeystorePass(),

config.getTruststorePath(), config.getTruststorePass());

}

}