双向证书java_java https证书（双向证书）

如果是单向证书只需要：sc.init(null, tmf.getTrustManagers(), null);即可

public void initSSLConfigForTwoWay() throws Exception {

// 1 导入自己的证书

KeyStore selfCert = KeyStore.getInstance("pkcs12");

selfCert.load(this.getClass().getResourceAsStream(Constant.SELFCERTPATH),Constant.SELFCERTPWD.toCharArray());

//selfCert.load(new FileInputStream(ResourceUtils.getURL("classpath:").getPath() + Constant.SELFCERTPATH),

// Constant.SELFCERTPWD.toCharArray());

KeyManagerFactory kmf = KeyManagerFactory.getInstance("sunx509");

kmf.init(selfCert, Constant.SELFCERTPWD.toCharArray());

// 2 导入服务器的证书,

KeyStore caCert = KeyStore.getInstance("jks");

caCert.load(this.getClass().getResourceAsStream(Constant.TRUSTCAPATH),Constant.TRUSTCAPWD.toCharArray());

//caCert.load(new FileInputStream(ResourceUtils.getURL("classpath:").getPath() + Constant.TRUSTCAPATH), Constant.TRUSTCAPWD.toCharArray());

TrustManagerFactory tmf = TrustManagerFactory.getInstance("sunx509");

tmf.init(caCert);

SSLContext sc = SSLContext.getInstance("TLS");

sc.init(kmf.getKeyManagers(), tmf.getTrustManagers(), null);

// 3 域名设置为不验证

SSLConnectionSocketFactory sslsf = new SSLConnectionSocketFactory(

sc, new DefaultHostnameVerifier());

httpClient = HttpClients.custom().setSSLSocketFactory(sslsf)

.build();

}