java socket通信需要另外加密么_Java Socket实战之五:使用加密协议传输对象

转自：http://developer.51cto.com/art/201202/317547.htm

前面几篇博文提到了Socket中一些常用的用法，但是对于一些有安全要求的应用就需要加密传输的数据，此时就需要用到SSLSocket了。

1 packagecom.googlecode.garbagecan.test.socket.ssl;2

3 public class User implementsjava.io.Serializable {4 private static final long serialVersionUID = 1L;5 privateString name;6 privateString password;7

8 publicUser() {9

10 }11

12 publicUser(String name, String password) {13 this.name =name;14 this.password =password;15 }16

17 publicString getName() {18 returnname;19 }20

21 public voidsetName(String name) {22 this.name =name;23 }24

25 publicString getPassword() {26 returnpassword;27 }28

29 public voidsetPassword(String password) {30 this.password =password;31 }32

33 }

SSL Server类，这里需要用到ServerSocketFactory类来创建SSLServerSocket类实例，然后在通过SSLServerSocket来获取SSLSocket实例，这里考虑到面向对象中的面向接口编程的理念，所以代码中并没有出现SSLServerSocket和SSLSocket，而是用了他们的父类ServerSocket和Socket。在获取到ServerSocket和Socket实例以后，剩下的代码就和不使用加密方式一样了。

1 packagecom.googlecode.garbagecan.test.socket.ssl;2

3 importjava.io.BufferedInputStream;4 importjava.io.IOException;5 importjava.io.ObjectInputStream;6 importjava.io.ObjectOutputStream;7 importjava.net.ServerSocket;8 importjava.net.Socket;9 importjava.util.logging.Level;10 importjava.util.logging.Logger;11

12 importjavax.net.ServerSocketFactory;13 importjavax.net.ssl.SSLServerSocketFactory;14

15 public classMyServer {16

17 private final static Logger logger = Logger.getLogger(MyServer.class.getName());18

19 public static voidmain(String[] args) {20 try{21 ServerSocketFactory factory =SSLServerSocketFactory.getDefault();22 ServerSocket server = factory.createServerSocket(10000);23

24 while (true) {25 Socket socket =server.accept();26 invoke(socket);27 }28 } catch(Exception ex) {29 ex.printStackTrace();30 }31 }32

33 private static void invoke(final Socket socket) throwsIOException {34 new Thread(newRunnable() {35 public voidrun() {36 ObjectInputStream is = null;37 ObjectOutputStream os = null;38 try{39 is = new ObjectInputStream(newBufferedInputStream(socket.getInputStream()));40 os = newObjectOutputStream(socket.getOutputStream());41

42 Object obj =is.readObject();43 User user =(User)obj;44 System.out.println("user: " + user.getName() + "/" +user.getPassword());45

46 user.setName(user.getName() + "_new");47 user.setPassword(user.getPassword() + "_new");48

49 os.writeObject(user);50 os.flush();51 } catch(IOException ex) {52 logger.log(Level.SEVERE, null, ex);53 } catch(ClassNotFoundException ex) {54 logger.log(Level.SEVERE, null, ex);55 } finally{56 try{57 is.close();58 } catch(Exception ex) {}59 try{60 os.close();61 } catch(Exception ex) {}62 try{63 socket.close();64 } catch(Exception ex) {}65 }66 }67 }).start();68 }69 }

SSL Client类和SSL Server类类似，只是将其中获取Socket的方式有所变化，其余的代码也和不使用加密方式一样。

1 packagecom.googlecode.garbagecan.test.socket.ssl;2

3 importjava.io.BufferedInputStream;4 importjava.io.IOException;5 importjava.io.ObjectInputStream;6 importjava.io.ObjectOutputStream;7 importjava.net.Socket;8 importjava.util.logging.Level;9 importjava.util.logging.Logger;10

11 importjavax.net.SocketFactory;12 importjavax.net.ssl.SSLSocketFactory;13

14 public classMyClient {15

16 private final static Logger logger = Logger.getLogger(MyClient.class.getName());17

18 public static void main(String[] args) throwsException {19 for (int i = 0; i < 100; i++) {20 Socket socket = null;21 ObjectOutputStream os = null;22 ObjectInputStream is = null;23

24 try{25 SocketFactory factory =SSLSocketFactory.getDefault();26 socket = factory.createSocket("localhost", 10000);27

28 os = newObjectOutputStream(socket.getOutputStream());29 User user = new User("user_" + i, "password_" +i);30 os.writeObject(user);31 os.flush();32

33 is = new ObjectInputStream(newBufferedInputStream(socket.getInputStream()));34 Object obj =is.readObject();35 if (obj != null) {36 user =(User)obj;37 System.out.println("user: " + user.getName() + "/" +user.getPassword());38 }39 } catch(IOException ex) {40 logger.log(Level.SEVERE, null, ex);41 } finally{42 try{43 is.close();44 } catch(Exception ex) {}45 try{46 os.close();47 } catch(Exception ex) {}48 try{49 socket.close();50 } catch(Exception ex) {}51 }52 }53 }54 }

代码写完了，下面就需要产生keystore文件了，运行下面的命令

keytool -genkey -alias mysocket -keyalg RSA -keystore mysocket.jks

在提示输入项中，密码项自己给定，其它都不改直接回车，这里我使用的密码是“mysocket”。

运行Server

java -Djavax.net.ssl.keyStore=mysocket.jks -Djavax.net.ssl.keyStorePassword=mysocket com.googlecode.garbagecan.test.socket.ssl.MyServer

运行Client

java -Djavax.net.ssl.trustStore=mysocket.jks  -Djavax.net.ssl.trustStorePassword=mysocket com.googlecode.garbagecan.test.socket.ssl.MyClient

前面几篇博文提到了Socket中一些常用的用法，但是对于一些有安全要求的应用就需要加密传输的数据，此时就需要用到SSLSocket了。