https单双向验证环境的搭建参见：http://www.cnblogs.com/YDDMAX/p/5368404.html

一、单向握手

示例程序：

package com.ydd.study.hello.httpclient;

import java.io.File;

import java.io.IOException;

import java.security.KeyManagementException;

import java.security.KeyStoreException;

import java.security.NoSuchAlgorithmException;

import java.security.cert.CertificateException;

import javax.net.ssl.SSLContext;

import org.apache.http.HttpHost;

import org.apache.http.client.ClientProtocolException;

import org.apache.http.client.HttpClient;

import org.apache.http.client.config.RequestConfig;

import org.apache.http.client.methods.CloseableHttpResponse;

import org.apache.http.client.methods.HttpGet;

import org.apache.http.client.protocol.HttpClientContext;

import org.apache.http.config.Registry;

import org.apache.http.config.RegistryBuilder;

import org.apache.http.conn.routing.HttpRoute;

import org.apache.http.conn.socket.ConnectionSocketFactory;

import org.apache.http.conn.socket.PlainConnectionSocketFactory;

import org.apache.http.conn.ssl.SSLConnectionSocketFactory;

import org.apache.http.conn.ssl.TrustSelfSignedStrategy;

import org.apache.http.impl.client.CloseableHttpClient;

import org.apache.http.impl.client.HttpClients;

import org.apache.http.impl.conn.PoolingHttpClientConnectionManager;

import org.apache.http.ssl.SSLContexts;

import org.apache.http.util.EntityUtils;

public class OneTLSPool {

    public static CloseableHttpClient httpclient;

    // 获得池化得HttpClient

    static {

        // 设置truststore

        SSLContext sslcontext = null;

        try {

            sslcontext = SSLContexts

                    .custom()

                    .loadTrustMaterial(

                            new File("D://https//ca//cl.jks"),

                            "123456".toCharArray(),

                            new TrustSelfSignedStrategy()).build();

        } catch (Exception e) {

            // TODO Auto-generated catch block

            e.printStackTrace();

        }

        // 客户端支持TLSV1，TLSV2,TLSV3这三个版本

        SSLConnectionSocketFactory sslsf = new SSLConnectionSocketFactory(

                sslcontext, new String[] { "TLSv1", "TLSv2", "TLSv3" }, null,

                SSLConnectionSocketFactory.getDefaultHostnameVerifier());// 客户端验证服务器身份的策略

        // Create a registry of custom connection socket factories for supported

        // protocol schemes.

        Registry<ConnectionSocketFactory> socketFactoryRegistry = RegistryBuilder

                .<ConnectionSocketFactory> create()

                .register("http", PlainConnectionSocketFactory.INSTANCE)

                .register("https", new SSLConnectionSocketFactory(sslcontext))

                .build();

        PoolingHttpClientConnectionManager connManager = new PoolingHttpClientConnectionManager(

                socketFactoryRegistry);

        // Configure total max or per route limits for persistent connections

        // that can be kept in the pool or leased by the connection manager.

        connManager.setMaxTotal(100);

        connManager.setDefaultMaxPerRoute(10);

        // 个性化设置某个url的连接

        connManager.setMaxPerRoute(new HttpRoute(new HttpHost("www.y.com",

                80)), 20);

        httpclient = HttpClients.custom().setConnectionManager(connManager)

                .build();

    }

  /**

     * 单向验证且服务端的证书可信

     * @throws IOException

     * @throws ClientProtocolException

     */

    public static void oneWayAuthorizationAccepted() throws ClientProtocolException, IOException {

        // Execution context can be customized locally.

        HttpClientContext context = HttpClientContext.create();

        HttpGet httpget = new HttpGet("https://www.yunzhu.com:8443");

        // 设置请求的配置

        RequestConfig requestConfig = RequestConfig.custom()

                .setSocketTimeout(5000).setConnectTimeout(5000)

                .setConnectionRequestTimeout(5000).build();

        httpget.setConfig(requestConfig);

        System.out.println("executing request " + httpget.getURI());

        CloseableHttpResponse response = httpclient.execute(httpget, context);

        try {

            System.out.println("----------------------------------------");

            System.out.println(response.getStatusLine());

            System.out.println(EntityUtils.toString(response.getEntity()));

            System.out.println("----------------------------------------");

            // Once the request has been executed the local context can

            // be used to examine updated state and various objects affected

            // by the request execution.

            // Last executed request

            context.getRequest();

            // Execution route

            context.getHttpRoute();

            // Target auth state

            context.getTargetAuthState();

            // Proxy auth state

            context.getTargetAuthState();

            // Cookie origin

            context.getCookieOrigin();

            // Cookie spec used

            context.getCookieSpec();

            // User security token

            context.getUserToken();

        } catch (Exception e) {

            e.printStackTrace();

        }

    }

    public static void main(String[] a) throws KeyManagementException,

            NoSuchAlgorithmException, KeyStoreException, CertificateException,

            IOException {

        oneWayAuthorizationAccepted();

    }

}

1、用eclipse运行的时候报NoSuchAlgorithmException的错。将eclipse的JRE删除再重新导入本地的JRE就解决了。应该是缺失一些JDK的jar导致。

executing request https://www.yunzhu.com:8443

Exception in thread "main" javax.net.ssl.SSLKeyException: RSA premaster secret error

    at sun.security.ssl.RSAClientKeyExchange.<init>(Unknown Source)

    at sun.security.ssl.ClientHandshaker.serverHelloDone(Unknown Source)

    at sun.security.ssl.ClientHandshaker.processMessage(Unknown Source)

    at sun.security.ssl.Handshaker.processLoop(Unknown Source)

    at sun.security.ssl.Handshaker.process_record(Unknown Source)

    at sun.security.ssl.SSLSocketImpl.readRecord(Unknown Source)

    at sun.security.ssl.SSLSocketImpl.performInitialHandshake(Unknown Source)

    at sun.security.ssl.SSLSocketImpl.startHandshake(Unknown Source)

    at sun.security.ssl.SSLSocketImpl.startHandshake(Unknown Source)

    at org.apache.http.conn.ssl.SSLConnectionSocketFactory.createLayeredSocket(SSLConnectionSocketFactory.java:394)

    at org.apache.http.conn.ssl.SSLConnectionSocketFactory.connectSocket(SSLConnectionSocketFactory.java:353)

    at org.apache.http.impl.conn.DefaultHttpClientConnectionOperator.connect(DefaultHttpClientConnectionOperator.java:141)

    at org.apache.http.impl.conn.PoolingHttpClientConnectionManager.connect(PoolingHttpClientConnectionManager.java:353)

    at org.apache.http.impl.execchain.MainClientExec.establishRoute(MainClientExec.java:380)

    at org.apache.http.impl.execchain.MainClientExec.execute(MainClientExec.java:236)

    at org.apache.http.impl.execchain.ProtocolExec.execute(ProtocolExec.java:184)

    at org.apache.http.impl.execchain.RetryExec.execute(RetryExec.java:88)

    at org.apache.http.impl.execchain.RedirectExec.execute(RedirectExec.java:110)

    at org.apache.http.impl.client.InternalHttpClient.doExecute(InternalHttpClient.java:184)

    at org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:82)

    at com.ydd.study.hello.httpclient.OneTLSPool.oneWayAuthorizationAccepted(OneTLSPool.java:138)

    at com.ydd.study.hello.httpclient.OneTLSPool.main(OneTLSPool.java:172)

Caused by: java.security.NoSuchAlgorithmException: SunTlsRsaPremasterSecret KeyGenerator not available

    at javax.crypto.KeyGenerator.<init>(KeyGenerator.java:158)

    at javax.crypto.KeyGenerator.getInstance(KeyGenerator.java:207)

    at sun.security.ssl.JsseJce.getKeyGenerator(Unknown Source)

    ... 22 more

上面的程序使用JDK7将导致自己签名的证书验证失败，报的错误和下面的请求百度报的错相同。使用JDK6成功。这是JDK7的一个bug引起的：http://bugs.java.com/bugdatabase/view_bug.do?bug_id=7018897

针对于JDK7的这个bug需要使用下面的代码：

package com.ydd.study.hello.httpclient;

import java.io.File;

import java.io.FileInputStream;

import java.io.IOException;

import java.io.InputStream;

import java.security.KeyManagementException;

import java.security.KeyStore;

import java.security.KeyStoreException;

import java.security.NoSuchAlgorithmException;

import java.security.cert.CertificateException;

import java.security.cert.X509Certificate;

import javax.net.ssl.SSLContext;

import javax.net.ssl.TrustManager;

import javax.net.ssl.X509TrustManager;

import org.apache.http.HttpHost;

import org.apache.http.client.ClientProtocolException;

import org.apache.http.client.config.RequestConfig;

import org.apache.http.client.methods.CloseableHttpResponse;

import org.apache.http.client.methods.HttpGet;

import org.apache.http.client.protocol.HttpClientContext;

import org.apache.http.config.Registry;

import org.apache.http.config.RegistryBuilder;

import org.apache.http.conn.routing.HttpRoute;

import org.apache.http.conn.socket.ConnectionSocketFactory;

import org.apache.http.conn.socket.PlainConnectionSocketFactory;

import org.apache.http.conn.ssl.SSLConnectionSocketFactory;

import org.apache.http.conn.ssl.TrustSelfSignedStrategy;

import org.apache.http.impl.client.CloseableHttpClient;

import org.apache.http.impl.client.HttpClients;

import org.apache.http.impl.conn.PoolingHttpClientConnectionManager;

import org.apache.http.ssl.SSLContexts;

import org.apache.http.util.EntityUtils;

public class OneTLSPool {

    public static CloseableHttpClient httpclient;

    public static final String KEY_STORE_TRUST_PATH = "D://https//ca//cl.jks"; // truststore的路径

    public static final String KEY_STORE_TYPE_JKS = "jks"; // truststore的类型

    private static final String KEY_STORE_TRUST_PASSWORD = "123456"; // truststore的密码

    // 获得池化得HttpClient

    static {

        SSLContext sslcontext = null;

        try {

            // 设置truststore

            KeyStore trustStore = KeyStore.getInstance(KEY_STORE_TYPE_JKS);

            InputStream tsIn = new FileInputStream(new File(KEY_STORE_TRUST_PATH));

            try {

                trustStore.load(tsIn, KEY_STORE_TRUST_PASSWORD.toCharArray());

            } finally {

                try {

                    tsIn.close();

                } catch (Exception ignore) {

                }

            }

            sslcontext = SSLContexts.custom().loadTrustMaterial(trustStore, new TrustSelfSignedStrategy()).build();

            //解决jdk7的ssl的自签名会有问题的bug，如果不是jdk7，则下面的代码可以没有

            //bug地址：http://bugs.java.com/bugdatabase/view_bug.do?bug_id=7018897

            X509TrustManager xtm = new X509TrustManager(){   //创建TrustManager

                public void checkClientTrusted(X509Certificate[] chain, String authType) throws CertificateException {}

                public void checkServerTrusted(X509Certificate[] chain, String authType) throws CertificateException {}

                public X509Certificate[] getAcceptedIssuers() {

                    return null;   //return new java.security.cert.X509Certificate[0];

                }

            };

            sslcontext.init(null, new TrustManager[]{xtm}, null);

            //解决bug结束

        } catch (Exception e) {

            e.printStackTrace();

        }

        // 客户端支持TLSV1，TLSV2,TLSV3这三个版本

        SSLConnectionSocketFactory sslsf = new SSLConnectionSocketFactory(sslcontext,

                new String[] { "TLSv1", "TLSv2", "TLSv3" }, null,

                SSLConnectionSocketFactory.getDefaultHostnameVerifier());// 客户端验证服务器身份的策略

        // Create a registry of custom connection socket factories for supported

        // protocol schemes.

        Registry<ConnectionSocketFactory> socketFactoryRegistry = RegistryBuilder.<ConnectionSocketFactory> create()

                .register("http", PlainConnectionSocketFactory.INSTANCE)

                .register("https", new SSLConnectionSocketFactory(sslcontext)).build();

        PoolingHttpClientConnectionManager connManager = new PoolingHttpClientConnectionManager(socketFactoryRegistry);

        // Configure total max or per route limits for persistent connections

        // that can be kept in the pool or leased by the connection manager.

        connManager.setMaxTotal(100);

        connManager.setDefaultMaxPerRoute(10);

        // 个性化设置某个url的连接

        connManager.setMaxPerRoute(new HttpRoute(new HttpHost("www.y.com", 80)), 20);

        httpclient = HttpClients.custom().setConnectionManager(connManager).build();

    }

    /**

     * 单向验证且服务端的证书可信

     *

     * @throws IOException

     * @throws ClientProtocolException

     */

    public static void oneWayAuthorizationAccepted() throws ClientProtocolException, IOException {

        // Execution context can be customized locally.

        HttpClientContext context = HttpClientContext.create();

        HttpGet httpget = new HttpGet("https://www.yunzhu.com:8443");

        // 设置请求的配置

        RequestConfig requestConfig = RequestConfig.custom().setSocketTimeout(5000).setConnectTimeout(5000)

                .setConnectionRequestTimeout(5000).build();

        httpget.setConfig(requestConfig);

        System.out.println("executing request " + httpget.getURI());

        CloseableHttpResponse response = httpclient.execute(httpget, context);

        try {

            System.out.println("----------------------------------------");

            System.out.println(response.getStatusLine());

            System.out.println(EntityUtils.toString(response.getEntity()));

            System.out.println("----------------------------------------");

            // Once the request has been executed the local context can

            // be used to examine updated state and various objects affected

            // by the request execution.

            // Last executed request

            context.getRequest();

            // Execution route

            context.getHttpRoute();

            // Target auth state

            context.getTargetAuthState();

            // Proxy auth state

            context.getTargetAuthState();

            // Cookie origin

            context.getCookieOrigin();

            // Cookie spec used

            context.getCookieSpec();

            // User security token

            context.getUserToken();

        } catch (Exception e) {

            e.printStackTrace();

        }

    }

    public static void main(String[] a) throws KeyManagementException, NoSuchAlgorithmException, KeyStoreException,

            CertificateException, IOException {

        oneWayAuthorizationAccepted();

    }

}

下面是请求百度时因为client端没有信任百度的CA证书，所以单向不能验证成功

executing request https://www.baidu.com

Exception in thread "main" javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

    at sun.security.ssl.Alerts.getSSLException(Alerts.java:192)

    at sun.security.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1884)

    at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:276)

    at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:270)

    at sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1439)

    at sun.security.ssl.ClientHandshaker.processMessage(ClientHandshaker.java:209)

    at sun.security.ssl.Handshaker.processLoop(Handshaker.java:878)

    at sun.security.ssl.Handshaker.process_record(Handshaker.java:814)

    at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:1016)

    at sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1312)

    at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1339)

    at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1323)

    at org.apache.http.conn.ssl.SSLConnectionSocketFactory.createLayeredSocket(SSLConnectionSocketFactory.java:394)

    at org.apache.http.conn.ssl.SSLConnectionSocketFactory.connectSocket(SSLConnectionSocketFactory.java:353)

    at org.apache.http.impl.conn.DefaultHttpClientConnectionOperator.connect(DefaultHttpClientConnectionOperator.java:141)

    at org.apache.http.impl.conn.PoolingHttpClientConnectionManager.connect(PoolingHttpClientConnectionManager.java:353)

    at org.apache.http.impl.execchain.MainClientExec.establishRoute(MainClientExec.java:380)

    at org.apache.http.impl.execchain.MainClientExec.execute(MainClientExec.java:236)

    at org.apache.http.impl.execchain.ProtocolExec.execute(ProtocolExec.java:184)

    at org.apache.http.impl.execchain.RetryExec.execute(RetryExec.java:88)

    at org.apache.http.impl.execchain.RedirectExec.execute(RedirectExec.java:110)

    at org.apache.http.impl.client.InternalHttpClient.doExecute(InternalHttpClient.java:184)

    at org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:82)

    at com.ydd.study.hello.httpclient.OneTLSPool.oneWayAuthorizationDenied(OneTLSPool.java:91)

    at com.ydd.study.hello.httpclient.OneTLSPool.main(OneTLSPool.java:173)

Caused by: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

    at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:385)

    at sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:292)

    at sun.security.validator.Validator.validate(Validator.java:260)

    at sun.security.ssl.X509TrustManagerImpl.validate(X509TrustManagerImpl.java:326)

    at sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:231)

    at sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:107)

    at org.apache.http.ssl.SSLContextBuilder$TrustManagerDelegate.checkServerTrusted(SSLContextBuilder.java:298)

    at sun.security.ssl.AbstractTrustManagerWrapper.checkServerTrusted(SSLContextImpl.java:813)

    at sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1421)

    ... 20 more

Caused by: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

    at sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathBuilder.java:196)

    at java.security.cert.CertPathBuilder.build(CertPathBuilder.java:268)

    at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:380)

    ... 28 more

client信任了www.yunzhu.com:8443的CA证书，单项验证成功

executing request https://www.yunzhu.com:8443

----------------------------------------

HTTP/1.1 200 OK

<!DOCTYPE html>

<html lang="en">

   (tomcat主页的html内容)

</html>

----------------------------------------

二、双向握手

示例代码：

package com.ydd.study.hello.httpclient;

import java.io.File;

import java.io.FileInputStream;

import java.io.IOException;

import java.io.InputStream;

import java.security.KeyManagementException;

import java.security.KeyStore;

import java.security.KeyStoreException;

import java.security.NoSuchAlgorithmException;

import java.security.cert.CertificateException;

import javax.net.ssl.SSLContext;

import org.apache.http.HttpHost;

import org.apache.http.client.ClientProtocolException;

import org.apache.http.client.config.RequestConfig;

import org.apache.http.client.methods.CloseableHttpResponse;

import org.apache.http.client.methods.HttpGet;

import org.apache.http.client.protocol.HttpClientContext;

import org.apache.http.config.Registry;

import org.apache.http.config.RegistryBuilder;

import org.apache.http.conn.routing.HttpRoute;

import org.apache.http.conn.socket.ConnectionSocketFactory;

import org.apache.http.conn.socket.PlainConnectionSocketFactory;

import org.apache.http.conn.ssl.SSLConnectionSocketFactory;

import org.apache.http.conn.ssl.TrustSelfSignedStrategy;

import org.apache.http.impl.client.CloseableHttpClient;

import org.apache.http.impl.client.HttpClients;

import org.apache.http.impl.conn.PoolingHttpClientConnectionManager;

import org.apache.http.ssl.SSLContexts;

import org.apache.http.util.EntityUtils;

public class DoubleWayTlsPool {

    public static CloseableHttpClient httpclient;

    public static final String KEY_STORE_TRUST_PATH = "D://https//ca//cl.jks"; // truststore的路径

    public static final String KEY_STORE_TYPE_JKS = "jks"; // truststore的类型

    private static final String KEY_STORE_TRUST_PASSWORD = "123456"; // truststore的密码

    public static final String KEY_STORE_CLIENT_PATH="D://https//client//client.p12";

    public static final String KEY_STORE_TYPE_P12="PKCS12";

    private static final String KEY_STORE_PASSWORD="123456";

    // 获得池化得HttpClient

    static {

        SSLContext sslcontext = null;

        try {

            // 设置truststore

            KeyStore trustStore = KeyStore.getInstance(KEY_STORE_TYPE_JKS);

            KeyStore keyStore  = KeyStore.getInstance(KEY_STORE_TYPE_P12);

            InputStream ksIn = new FileInputStream(KEY_STORE_CLIENT_PATH);

            InputStream tsIn = new FileInputStream(new File(KEY_STORE_TRUST_PATH));

            try {

                 keyStore.load(ksIn, KEY_STORE_PASSWORD.toCharArray());

                trustStore.load(tsIn, KEY_STORE_TRUST_PASSWORD.toCharArray());

            } finally {

                try {

                    ksIn.close();

                    tsIn.close();

                } catch (Exception e) {

                    e.printStackTrace();

                }

            }

            sslcontext = SSLContexts.custom().loadTrustMaterial(trustStore, new TrustSelfSignedStrategy()).loadKeyMaterial(keyStore, KEY_STORE_PASSWORD.toCharArray()).build();

            //下面的代码可以动态的设置握手验证证书的策略，可以不用手工导入证书，而只要程序控制即可

            //bug地址：http://bugs.java.com/bugdatabase/view_bug.do?bug_id=7018897

        /*    X509TrustManager xtm = new X509TrustManager(){   //创建TrustManager

                public void checkClientTrusted(X509Certificate[] chain, String authType) throws CertificateException {}

                public void checkServerTrusted(X509Certificate[] chain, String authType) throws CertificateException {}

                public X509Certificate[] getAcceptedIssuers() {

                    return null;   //return new java.security.cert.X509Certificate[0];

                }

            };

            sslcontext.init(null, new TrustManager[]{xtm}, null);*/

            //解决bug结束

        } catch (Exception e) {

            e.printStackTrace();

        }

        // 客户端支持TLSV1，TLSV2,TLSV3这三个版本

        SSLConnectionSocketFactory sslsf = new SSLConnectionSocketFactory(sslcontext,

                new String[] { "TLSv1", "TLSv2", "TLSv3" }, null,

                SSLConnectionSocketFactory.getDefaultHostnameVerifier());// 客户端验证服务器身份的策略

        // Create a registry of custom connection socket factories for supported

        // protocol schemes.

        Registry<ConnectionSocketFactory> socketFactoryRegistry = RegistryBuilder.<ConnectionSocketFactory> create()

                .register("http", PlainConnectionSocketFactory.INSTANCE)

                .register("https", new SSLConnectionSocketFactory(sslcontext)).build();

        PoolingHttpClientConnectionManager connManager = new PoolingHttpClientConnectionManager(socketFactoryRegistry);

        // Configure total max or per route limits for persistent connections

        // that can be kept in the pool or leased by the connection manager.

        connManager.setMaxTotal(100);

        connManager.setDefaultMaxPerRoute(10);

        // 个性化设置某个url的连接

        connManager.setMaxPerRoute(new HttpRoute(new HttpHost("www.y.com", 80)), 20);

        httpclient = HttpClients.custom().setConnectionManager(connManager).build();

    }

    /**

     * 单向验证且服务端的证书可信

     *

     * @throws IOException

     * @throws ClientProtocolException

     */

    public static void doubleWayAuthorizationAccepted() throws ClientProtocolException, IOException {

        // Execution context can be customized locally.

        HttpClientContext context = HttpClientContext.create();

        HttpGet httpget = new HttpGet("https://www.yunzhu.com:8443");

        // 设置请求的配置

        RequestConfig requestConfig = RequestConfig.custom().setSocketTimeout(5000).setConnectTimeout(5000)

                .setConnectionRequestTimeout(5000).build();

        httpget.setConfig(requestConfig);

        System.out.println("executing request " + httpget.getURI());

        CloseableHttpResponse response = httpclient.execute(httpget, context);

        try {

            System.out.println("----------------------------------------");

            System.out.println(response.getStatusLine());

            System.out.println(EntityUtils.toString(response.getEntity()));

            System.out.println("----------------------------------------");

            // Once the request has been executed the local context can

            // be used to examine updated state and various objects affected

            // by the request execution.

            // Last executed request

            context.getRequest();

            // Execution route

            context.getHttpRoute();

            // Target auth state

            context.getTargetAuthState();

            // Proxy auth state

            context.getTargetAuthState();

            // Cookie origin

            context.getCookieOrigin();

            // Cookie spec used

            context.getCookieSpec();

            // User security token

            context.getUserToken();

        } catch (Exception e) {

            e.printStackTrace();

        }

    }

    public static void main(String[] a) throws KeyManagementException, NoSuchAlgorithmException, KeyStoreException,

            CertificateException, IOException {

        doubleWayAuthorizationAccepted();

    }

}

该程序在JDK6运行成功。

使用X509TrustManager可以动态的改变握手时验证证书的行为。可以利用这点来动态的导入证书，而不是需要手动的导入证书。 具体的用法参见下面的博客：

http://www.cnblogs.com/devinzhang/archive/2012/02/28/2371631.html

使用HttpClient连接池进行https单双向验证的更多相关文章

  1. HttpClient连接池的一些思考

    前言 使用apache的httpclient进行http的交互处理已经很长时间了,而httpclient实例则使用了http连接池,想必大家也没有关心过连接池的管理.事实上,通过分析httpclien ...

  2. HttpClient实战三：Spring整合HttpClient连接池

    简介 在微服务架构或者REST API项目中,使用Spring管理Bean是很常见的,在项目中HttpClient使用的一种最常见方式就是:使用Spring容器XML配置方式代替Java编码方式进行H ...

  3. springboot使用RestTemplate+httpclient连接池发送http消息

    简介 RestTemplate是spring支持的一个请求http rest服务的模板对象,性质上有点像jdbcTemplate RestTemplate底层还是使用的httpclient(org.a ...

  4. Http持久连接与HttpClient连接池

    一.背景 HTTP协议是无状态的协议,即每一次请求都是互相独立的.因此它的最初实现是,每一个http请求都会打开一个tcp socket连接,当交互完毕后会关闭这个连接. HTTP协议是全双工的协议, ...

  5. Http 持久连接与 HttpClient 连接池

    一.背景 HTTP协议是无状态的协议,即每一次请求都是互相独立的.因此它的最初实现是,每一个http请求都会打开一个tcp socket连接,当交互完毕后会关闭这个连接. HTTP协议是全双工的协议, ...

  6. HttpClient连接池

    HttpClient连接池,发现对于高并发的请求,效率提升很大.虽然知道是因为建立了长连接,导致请求效率提升,但是对于内部的原理还是不太清楚.后来在网上看到了HTTP协议的发展史,里面提到了一个属性C ...

  7. httpclient连接池在ES Restful API请求中的应用

    package com.wm.utils; import org.apache.http.impl.client.CloseableHttpClient; import org.apache.http ...

  8. HttpClient连接池的连接保持、超时和失效机制

    HTTP是一种无连接的事务协议,底层使用的还是TCP,连接池复用的就是TCP连接,目的就是在一个TCP连接上进行多次的HTTP请求从而提高性能.每次HTTP请求结束的时候,HttpClient会判断连 ...

  9. HttpClient连接池抛出大量ConnectionPoolTimeoutException: Timeout waiting for connection异常排查

    转自: http://blog.csdn.net/shootyou/article/details/6615051 今天解决了一个HttpClient的异常,汗啊,一个HttpClient使用稍有不慎 ...

随机推荐

  1. @Controller和@RestController的区别

    1. Controller, RestController的共同点 都是用来表示spring某个类的是否可以接收HTTP请求 2.  Controller, RestController的不同点 @C ...

  2. request getParameter getAttribute

    在浏览器地址输入,表示传入一个参数test,值为123 http://localhost:8888/Test/index.jsp?test=123 在index.jsp中尝试使用EL表达式取出,代码如 ...

  3. Python中使用递归输出嵌套列表并转化为大写

  4. 简单快捷好用的vim配置和终端配置推荐

    vim 配置实用spf13-vim,安装方便简单快捷,极力推荐. 另外oh-my-zsh 终端配置很好,与之搭配使用效果更佳. 安装都很简单,一个脚本搞定, 都是在gitHub上开源的,自行搜索,这里 ...

  5. Power BI for Office 365（三）Power Pivot

    在Power Pivot中可以从各种数据源中根据你的需求来创建数据模型,并且可以根据需要随时刷新这些数据.在上一篇中,Anna已经准备好了加载到Power Pivot中的数据.Power Pivot就 ...

  6. 【转】oracle 中随机取一条记录的两种方法

    oracle 中随机取一条记录的两种方法 V_COUNT INT:=0; V_NUM INT :=0; 1:TBL_MYTABLE 表中要有一个值连续且唯一的列FID BEGIN SELECT COU ...

  7. C#_实用

    1.获取当前浏览器信息HttpContext.Current.Request.Browser string browser = HttpContext.Current.Request.Browser. ...

  8. View基础知识

    一.View基础知识 View 是Android中所有控件的基类,是一种界面层的控件的一种抽象,代表了一个控件 1.View的位置参数 View的四个属性:top(左上角纵坐标)     left(左 ...

  9. java 将一张图片拷贝到另外一个地方。(IO流)

    package com.beiwo.inputstream; import java.io.FileInputStream; import java.io.FileOutputStream; impo ...

  10. *HDU 1086 计算几何

    You can Solve a Geometry Problem too Time Limit: 2000/1000 MS (Java/Others)    Memory Limit: 65536/3 ...