java ssl keystore_java – 使用SSL / TLS和Keystore配置Jetty

我已经创建了密钥和证书,由根CA使用OpenSSL签名.我正在尝试将server.key文件用作密钥库并在代码中执行它:

private fun setupHttps(server : Server, port: Int) {

val https = HttpConfiguration()

https.addCustomizer(SecureRequestCustomizer())

val sslFactory = SslContextFactory()

sslFactory.keyStorePath = Paths.get(System.getProperty("user.dir"), "..", "server.key").toString()

sslFactory.setKeyStorePassword("password")

val sslConnector = ServerConnector(

server,

SslConnectionFactory(sslFactory, "http/1.1"),

HttpConnectionFactory(https)

)

sslConnector.port = port

server.connectors = arrayOf(sslConnector)

}

但我有这个例外:

Exception in thread "main" java.lang.IllegalStateException: no valid keystore

at org.eclipse.jetty.util.security.CertificateUtils.getKeyStore(CertificateUtils.java:48)

at org.eclipse.jetty.util.ssl.SslContextFactory.loadKeyStore(SslContextFactory.java:998)

at org.eclipse.jetty.util.ssl.SslContextFactory.load(SslContextFactory.java:252)

at org.eclipse.jetty.util.ssl.SslContextFactory.doStart(SslContextFactory.java:219)

at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:68)

at org.eclipse.jetty.util.component.ContainerLifeCycle.start(ContainerLifeCycle.java:131)

at org.eclipse.jetty.util.component.ContainerLifeCycle.doStart(ContainerLifeCycle.java:113)

at org.eclipse.jetty.server.SslConnectionFactory.doStart(SslConnectionFactory.java:72)

at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:68)

at org.eclipse.jetty.util.component.ContainerLifeCycle.start(ContainerLifeCycle.java:131)

at org.eclipse.jetty.util.component.ContainerLifeCycle.doStart(ContainerLifeCycle.java:113)

at org.eclipse.jetty.server.AbstractConnector.doStart(AbstractConnector.java:270)

at org.eclipse.jetty.server.AbstractNetworkConnector.doStart(AbstractNetworkConnector.java:81)

at org.eclipse.jetty.server.ServerConnector.doStart(ServerConnector.java:236)

at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:68)

at org.eclipse.jetty.server.Server.doStart(Server.java:431)

at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:68)

at ru.servicesmarket.server.LaunchKt.main(launch.kt:44)

最佳答案 我相信这是您的密钥库的路径/位置的问题.

找不到密钥库时抛出此异常,这有点令人困惑.

  • 0
    点赞
  • 0
    收藏
    觉得还不错? 一键收藏
  • 0
    评论
使用Java WebSocket和SSL WebSocket与HTTPS连接,你需要做以下几步: 1. 生成SSL证书 你需要为你的服务器生成一个SSL证书来启用SSL。你可以使用Java的keytool工具来生成自签名的SSL证书: ``` keytool -genkey -alias mydomain -keyalg RSA -keystore keystore.jks -validity 3650 ``` 2. 配置SSL连接 你需要在你的服务器端点配置SSL连接。这是一个示例代码,你可以根据你的需要进行修改: ``` SSLContext sslContext = SSLContext.getInstance("TLS"); KeyManagerFactory keyManagerFactory = KeyManagerFactory.getInstance(KeyManagerFactory.getDefaultAlgorithm()); KeyStore keyStore = KeyStore.getInstance(KeyStore.getDefaultType()); keyStore.load(new FileInputStream(new File("keystore.jks")), "password".toCharArray()); keyManagerFactory.init(keyStore, "password".toCharArray()); sslContext.init(keyManagerFactory.getKeyManagers(), null, null); HttpServer server = HttpServer.create(new InetSocketAddress(443), 0); server.setHttpsConfigurator(new HttpsConfigurator(sslContext) { public void configure(HttpsParameters params) { SSLContext context = getSSLContext(); SSLEngine engine = context.createSSLEngine(); params.setNeedClientAuth(false); params.setCipherSuites(engine.getEnabledCipherSuites()); params.setProtocols(engine.getEnabledProtocols()); params.setSSLParameters(context.getDefaultSSLParameters()); } }); ``` 3. 创建SSL WebSocket服务器 你可以使用Jetty或Tyrus等Java WebSocket库来创建SSL WebSocket服务器。这里以Tyrus为例: ``` SSLContext sslContext = SSLContext.getInstance("TLS"); KeyManagerFactory keyManagerFactory = KeyManagerFactory.getInstance(KeyManagerFactory.getDefaultAlgorithm()); KeyStore keyStore = KeyStore.getInstance(KeyStore.getDefaultType()); keyStore.load(new FileInputStream(new File("keystore.jks")), "password".toCharArray()); keyManagerFactory.init(keyStore, "password".toCharArray()); sslContext.init(keyManagerFactory.getKeyManagers(), null, null); Server server = new Server("localhost", 443, "/", null, ChatEndpoint.class, new HashMap<String, Object>(), sslContext); server.start(); ``` 这些步骤应该可以帮助你配置Java WebSocket和SSL WebSocket与HTTPS连接。
评论
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值