Jdk1.6 HTTPS访问问题解决办法

真是艹蛋的一次经历,jdk6上面去访问别人的https,还好有百度搞定了问题.现在写下随笔,记录下;

首先要自己重写SSLSocketFactory这个类,

下面是自己重写的这个类:TLSSocketConnectionFactory

package cn.cbsw.tools;

import java.io.ByteArrayInputStream;

import java.io.ByteArrayOutputStream;

import java.io.DataOutputStream;

import java.io.FileInputStream;

import java.io.IOException;

import java.io.InputStream;

import java.io.OutputStream;

import java.net.InetAddress;

import java.net.InetSocketAddress;

import java.net.Socket;

import java.net.UnknownHostException;

import java.security.KeyStore;

import java.security.Principal;

import java.security.SecureRandom;

import java.security.Security;

import java.security.cert.CertificateExpiredException;

import java.security.cert.CertificateFactory;

import java.util.Hashtable;

import java.util.LinkedList;

import java.util.List;

import javax.net.ssl.HandshakeCompletedListener;

import javax.net.ssl.SSLPeerUnverifiedException;

import javax.net.ssl.SSLSession;

import javax.net.ssl.SSLSessionContext;

import javax.net.ssl.SSLSocket;

import javax.net.ssl.SSLSocketFactory;

import javax.security.cert.X509Certificate;

import org.bouncycastle.crypto.tls.Certificate;

import org.bouncycastle.crypto.tls.CertificateRequest;

import org.bouncycastle.crypto.tls.DefaultTlsClient;

import org.bouncycastle.crypto.tls.ExtensionType;

import org.bouncycastle.crypto.tls.TlsAuthentication;

import org.bouncycastle.crypto.tls.TlsClientProtocol;

import org.bouncycastle.crypto.tls.TlsCredentials;

import org.bouncycastle.jce.provider.BouncyCastleProvider;

/**

 * 建立一个自己的ssl类

 */

public class TLSSocketConnectionFactory extends SSLSocketFactory{

    static {

        if (Security.getProvider(BouncyCastleProvider.PROVIDER_NAME) == null) {

            Security.addProvider(new BouncyCastleProvider());

        }

    }

    @Override

    public Socket createSocket(Socket socket, final String host, int port,

                               boolean arg3) throws IOException {

        if (socket == null) {

            socket = new Socket();

        }

        if (!socket.isConnected()) {

            socket.connect(new InetSocketAddress(host, port));

        }

        final TlsClientProtocol tlsClientProtocol = new     TlsClientProtocol(socket.getInputStream(), socket.getOutputStream(), new     SecureRandom());

        return _createSSLSocket(host, tlsClientProtocol);

    }

    @Override public String[] getDefaultCipherSuites() { return null; }

    @Override public String[] getSupportedCipherSuites() { return null; }

    @Override public Socket createSocket(String host, int port) throws IOException, UnknownHostException { return null; }

    @Override public Socket createSocket(InetAddress host, int port) throws IOException { return null; }

    @Override public Socket createSocket(String host, int port, InetAddress localHost, int localPort) throws IOException, UnknownHostException { return null; }

    @Override public Socket createSocket(InetAddress address, int port, InetAddress localAddress, int localPort) throws IOException { return null; }

    private SSLSocket _createSSLSocket(final String host, final TlsClientProtocol tlsClientProtocol) {

        return new SSLSocket() {

            private java.security.cert.Certificate[] peertCerts;

            @Override public InputStream getInputStream() throws IOException { return tlsClientProtocol.getInputStream(); }

            @Override public OutputStream getOutputStream() throws IOException { return tlsClientProtocol.getOutputStream(); }

            @Override public synchronized void close() throws IOException { tlsClientProtocol.close(); }

            @Override public void addHandshakeCompletedListener( HandshakeCompletedListener arg0) { }

            @Override public boolean getEnableSessionCreation() { return false; }

            @Override public String[] getEnabledCipherSuites() { return null; }

            @Override public String[] getEnabledProtocols() { return null; }

            @Override public boolean getNeedClientAuth() { return false; }

            @Override

            public SSLSession getSession() {

                return new SSLSession() {

                    /*原本这些方法都是直接throw UnsupportedOperationException 导致看不到真实异常*/

                    @Override

                    public int getApplicationBufferSize() {

                        return 0;

                    }

                    @Override public String getCipherSuite() { return null; }

                    @Override public long getCreationTime() { return 0; }

                    @Override public byte[] getId() { return null; }

                    @Override public long getLastAccessedTime() { return 0; }

                    @Override public java.security.cert.Certificate[] getLocalCertificates() { return null; }

                    @Override public Principal getLocalPrincipal() { return null; }

                    @Override public int getPacketBufferSize() { return 0; }

                    @Override public X509Certificate[] getPeerCertificateChain() throws SSLPeerUnverifiedException { return null; }

                    @Override public java.security.cert.Certificate[] getPeerCertificates() throws SSLPeerUnverifiedException { return peertCerts; }

                    @Override public String getPeerHost() { return null; }

                    @Override public int getPeerPort() { return 0; }

                    @Override public Principal getPeerPrincipal() throws SSLPeerUnverifiedException { return null; }

                    @Override public String getProtocol() { return null; }

                    @Override public SSLSessionContext getSessionContext() { return null; }

                    @Override public Object getValue(String arg0) { return null; }

                    @Override public String[] getValueNames() { return null; }

                    @Override public void invalidate() { return; }

                    @Override public boolean isValid() { return true; }

                    @Override public void putValue(String arg0, Object arg1) { return; }

                    @Override

                    public void removeValue(String arg0) {

                        return;

                    }

                };

            }

            @Override public String[] getSupportedProtocols() { return null; }

            @Override public boolean getUseClientMode() { return false; }

            @Override public boolean getWantClientAuth() { return false; }

            @Override public void removeHandshakeCompletedListener(HandshakeCompletedListener arg0) { }

            @Override public void setEnableSessionCreation(boolean arg0) { }

            @Override public void setEnabledCipherSuites(String[] arg0) { }

            @Override public void setEnabledProtocols(String[] arg0) { }

            @Override public void setNeedClientAuth(boolean arg0) { }

            @Override public void setUseClientMode(boolean arg0) { }

            @Override public void setWantClientAuth(boolean arg0) { }

            @Override public String[] getSupportedCipherSuites() { return null; }

            @Override

            public void startHandshake() throws IOException {

                tlsClientProtocol.connect(new DefaultTlsClient() {

                    @SuppressWarnings("unchecked")

                    @Override

                    public Hashtable<Integer, byte[]> getClientExtensions() throws IOException {

                        Hashtable<Integer, byte[]> clientExtensions = super.getClientExtensions();

                        if (clientExtensions == null) {

                            clientExtensions = new Hashtable<Integer, byte[]>();

                        }

                        //Add host_name

                        byte[] host_name = host.getBytes();

                        final ByteArrayOutputStream baos = new ByteArrayOutputStream();

                        final DataOutputStream dos = new DataOutputStream(baos);

                        dos.writeShort(host_name.length + 3);

                        dos.writeByte(0);

                        dos.writeShort(host_name.length);

                        dos.write(host_name);

                        dos.close();

                        clientExtensions.put(ExtensionType.server_name, baos.toByteArray());

                        return clientExtensions;

                    }

                    @Override

                    public TlsAuthentication getAuthentication() throws IOException {

                        return new TlsAuthentication() {

                            @Override

                            public void notifyServerCertificate(Certificate serverCertificate) throws IOException {

                                try {

                                    KeyStore ks = _loadKeyStore();

                                    CertificateFactory cf = CertificateFactory.getInstance("X.509");

                                    List<java.security.cert.Certificate> certs = new LinkedList<java.security.cert.Certificate>();

                                    boolean trustedCertificate = false;

                                    for ( org.bouncycastle.asn1.x509.Certificate c : serverCertificate.getCertificateList()) {

                                        java.security.cert.Certificate cert = cf.generateCertificate(new ByteArrayInputStream(c.getEncoded()));

                                        certs.add(cert);

                                        String alias = ks.getCertificateAlias(cert);

                                        if(alias != null) {

                                            if (cert instanceof java.security.cert.X509Certificate) {

                                                try {

                                                    ( (java.security.cert.X509Certificate) cert).checkValidity();

                                                    trustedCertificate = true;

                                                } catch(CertificateExpiredException cee) {

                                                    // Accept all the certs!

                                                }

                                            }

                                        } else {

                                            // Accept all the certs!

                                        }

                                    }

                                    if (!trustedCertificate) {

                                        // Accept all the certs!

                                    }

                                    peertCerts = certs.toArray(new java.security.cert.Certificate[0]);

                                } catch (Exception ex) {

                                    ex.printStackTrace();

                                    throw new IOException(ex);

                                }

                            }

                            @Override

                            public TlsCredentials getClientCredentials(CertificateRequest certificateRequest) throws IOException {

                                return null;

                            }

                            private KeyStore _loadKeyStore() throws Exception {

                                FileInputStream trustStoreFis = null;

                                try {

                                    KeyStore localKeyStore = null;

                                    String trustStoreType = System.getProperty("javax.net.ssl.trustStoreType")!=null?System.getProperty("javax.net.ssl.trustStoreType"):KeyStore.getDefaultType();

                                    String trustStoreProvider = System.getProperty("javax.net.ssl.trustStoreProvider")!=null?System.getProperty("javax.net.ssl.trustStoreProvider"):"";

                                    if (trustStoreType.length() != 0) {

                                        if (trustStoreProvider.length() == 0) {

                                            localKeyStore = KeyStore.getInstance(trustStoreType);

                                        } else {

                                            localKeyStore = KeyStore.getInstance(trustStoreType, trustStoreProvider);

                                        }

                                        char[] keyStorePass = null;

                                        String str5 = System.getProperty("javax.net.ssl.trustStorePassword")!=null?System.getProperty("javax.net.ssl.trustStorePassword"):"";

                                        if (str5.length() != 0) {

                                            keyStorePass = str5.toCharArray();

                                        }

                                        localKeyStore.load(trustStoreFis, keyStorePass);

                                        if (keyStorePass != null) {

                                            for (int i = 0; i < keyStorePass.length; i++) {

                                                keyStorePass[i] = 0;

                                            }

                                        }

                                    }

                                    return localKeyStore;

                                } finally {

                                    if (trustStoreFis != null) {

                                        trustStoreFis.close();

                                    }

                                }

                            }

                        };

                    }

                });

            } // startHandshake

        };

    }

}

依赖jar包:

bcpkix-jdk15on-1.60.jar

bcprov-jdk15on-1.60.jar

然后再写一个httpsConnectionUtils工具类:

package cn.cbsw.tools;

import java.io.BufferedReader;

import java.io.DataOutputStream;

import java.io.InputStreamReader;

import java.net.URL;

import java.net.URLEncoder;

import java.security.cert.CertificateException;

import java.security.cert.X509Certificate;

import java.util.ArrayList;

import java.util.Iterator;

import java.util.List;

import java.util.Map;

import javax.net.ssl.HostnameVerifier;

import javax.net.ssl.HttpsURLConnection;

import javax.net.ssl.SSLContext;

import javax.net.ssl.SSLSession;

import javax.net.ssl.TrustManager;

import javax.net.ssl.X509TrustManager;

import org.apache.commons.lang.StringUtils;

/**

 * 本类是解决https访问问题

 * @author sun

 *

 */

public class HttpsConnectUtils {

    /**

     * 获取url内容

     */

    public static String getQuery(String desUrl,String method,Map<String,String> params) throws Throwable{

        if(!"POST".equalsIgnoreCase(method)){

            method="GET";//如果不是POST就认为是GET,至于PUT很少用到,暂时用不到

        }

        String paramStr="";

        if(params!=null && !params.isEmpty()){

               List<String> list=new ArrayList<String>();//存放参数

               Iterator<String> it=params.keySet().iterator();

               while(it.hasNext()){

                   String key=it.next();

                   list.add(key+"="+URLEncoder.encode(params.get(key), "utf-8"));

               }

               paramStr=StringUtils.join(list,"&");

           }

        //如果是get请求且带有参数

        if(!"".equals(paramStr) && "GET".equalsIgnoreCase(method)){

            desUrl+="?"+paramStr;

        }

         URL url = new URL(null,desUrl,new sun.net.www.protocol.https.Handler());

        SSLContext sslContext=SSLContext.getInstance("TLS");

        TrustManager x509TrustManager=new X509TrustManager() {

            @Override

            public X509Certificate[] getAcceptedIssuers() {

                return null;

            }

            @Override

            public void checkServerTrusted(X509Certificate[] arg0, String arg1)

                    throws CertificateException {

            }

            @Override

            public void checkClientTrusted(X509Certificate[] arg0, String arg1)

                    throws CertificateException {

            }

        };

        sslContext.init(null, new TrustManager[]{x509TrustManager}, null);

        HttpsURLConnection httpsConn=(HttpsURLConnection) url.openConnection();

        httpsConn.setSSLSocketFactory(new TLSSocketConnectionFactory());

           httpsConn.setRequestProperty("accept", "*/*");

           httpsConn.setRequestProperty("connection", "Keep-Alive");

           httpsConn.setRequestProperty("user-agent", "Mozilla/4.0 (compatible; MSIE 7.0; Windows xp)");

           httpsConn.setDoOutput(true);

           httpsConn.setDoInput(true);

           httpsConn.setRequestMethod(method!=null?method:"GET");//默认get

           //忽略证书设置

           httpsConn.setHostnameVerifier(new HostnameVerifier() {

            @Override

            public boolean verify(String arg0, SSLSession arg1) {

                return true;

            }

        });

           //下面的方法会自动修改请求方式为POST

           if(!"".equals(paramStr) && "POST".equalsIgnoreCase(method)){

            DataOutputStream out = new DataOutputStream(httpsConn.getOutputStream());

            out.writeBytes(paramStr);

            out.flush();

            out.close();

           }

           InputStreamReader isr = new InputStreamReader(httpsConn.getInputStream(), "utf-8");

           BufferedReader inReader = new BufferedReader(isr);

           StringBuffer result = new StringBuffer();

           String inputLine;

           while ((inputLine = inReader.readLine()) != null) {

               result.append(inputLine);

           }

           // 关闭输入流

           inReader.close();

           isr.close();

           httpsConn.disconnect();//每次请求完毕后关闭链接

           return result.toString();

    }

}

然后调用的时候直接按httpsConnectionUtils.getQuery(String desUrl,String method,Map<String,String> params)调用即可.

通过百度整整坑了一个星期总算搞定.另外jdk1.8版的工具类也发下httpsConnectionUtils

package cn.cbsw.tools;

import java.io.BufferedReader;

import java.io.DataOutputStream;

import java.io.InputStreamReader;

import java.net.URL;

import java.net.URLEncoder;

import java.security.cert.CertificateException;

import java.security.cert.X509Certificate;

import java.util.ArrayList;

import java.util.Iterator;

import java.util.List;

import java.util.Map;

import javax.net.ssl.HostnameVerifier;

import javax.net.ssl.HttpsURLConnection;

import javax.net.ssl.SSLContext;

import javax.net.ssl.SSLSession;

import javax.net.ssl.TrustManager;

import javax.net.ssl.X509TrustManager;

import org.apache.commons.lang.StringUtils;

/**

 * 本类是解决https访问问题

 * @author sun

 *

 */

public class HttpsConnectUtils {

    /**

     * 获取url内容

     */

    public static String getQuery(String desUrl,String method,Map<String,String> params) throws Throwable{

        if(!"POST".equalsIgnoreCase(method)){

            method="GET";//如果不是POST就认为是GET,至于PUT很少用到,暂时用不到

        }

        String paramStr="";

        if(params!=null && !params.isEmpty()){

               List<String> list=new ArrayList<String>();//存放参数

               Iterator<String> it=params.keySet().iterator();

               while(it.hasNext()){

                   String key=it.next();

                   list.add(key+"="+URLEncoder.encode(params.get(key), "utf-8"));

               }

               paramStr=StringUtils.join(list,"&");

           }

        //如果是get请求且带有参数

        if(!"".equals(paramStr) && "GET".equalsIgnoreCase(method)){

            desUrl+="?"+paramStr;

        }

         URL url = new URL(null,desUrl,new sun.net.www.protocol.https.Handler());

        SSLContext sslContext=SSLContext.getInstance("TLSv1.2");//jdk8支持1.2版本

        TrustManager x509TrustManager=new X509TrustManager() {

            @Override

            public X509Certificate[] getAcceptedIssuers() {

                return null;

            }

            @Override

            public void checkServerTrusted(X509Certificate[] arg0, String arg1)

                    throws CertificateException {

            }

            @Override

            public void checkClientTrusted(X509Certificate[] arg0, String arg1)

                    throws CertificateException {

            }

        };

        sslContext.init(null, new TrustManager[]{x509TrustManager}, null);

        HttpsURLConnection httpsConn=(HttpsURLConnection) url.openConnection();

        httpsConn.setSSLSocketFactory(sslContext.getSocketFactory());

           httpsConn.setRequestProperty("accept", "*/*");

           httpsConn.setRequestProperty("connection", "Keep-Alive");

           httpsConn.setRequestProperty("user-agent", "Mozilla/4.0 (compatible; MSIE 7.0; Windows xp)");

           httpsConn.setDoOutput(true);

           httpsConn.setDoInput(true);

           httpsConn.setRequestMethod(method!=null?method:"GET");//默认get

           //忽略证书设置

           httpsConn.setHostnameVerifier(new HostnameVerifier() {

            @Override

            public boolean verify(String arg0, SSLSession arg1) {

                return true;

            }

        });

           //下面的方法会自动修改请求方式为POST

           if(!"".equals(paramStr) && "POST".equalsIgnoreCase(method)){

            DataOutputStream out = new DataOutputStream(httpsConn.getOutputStream());

            out.writeBytes(paramStr);

            out.flush();

            out.close();

           }

           InputStreamReader isr = new InputStreamReader(httpsConn.getInputStream(), "utf-8");

           BufferedReader inReader = new BufferedReader(isr);

           StringBuffer result = new StringBuffer();

           String inputLine;

           while ((inputLine = inReader.readLine()) != null) {

               result.append(inputLine);

           }

           // 关闭输入流

           inReader.close();

           isr.close();

           httpsConn.disconnect();//每次请求完毕后关闭链接

           return result.toString();

    }

}

希望能帮到后来人!

package cn.cbsw.tools;
import java.io.ByteArrayInputStream;import java.io.ByteArrayOutputStream;import java.io.DataOutputStream;import java.io.FileInputStream;import java.io.IOException;import java.io.InputStream;import java.io.OutputStream;import java.net.InetAddress;import java.net.InetSocketAddress;import java.net.Socket;import java.net.UnknownHostException;import java.security.KeyStore;import java.security.Principal;import java.security.SecureRandom;import java.security.Security;import java.security.cert.CertificateExpiredException;import java.security.cert.CertificateFactory;import java.util.Hashtable;import java.util.LinkedList;import java.util.List;
import javax.net.ssl.HandshakeCompletedListener;import javax.net.ssl.SSLPeerUnverifiedException;import javax.net.ssl.SSLSession;import javax.net.ssl.SSLSessionContext;import javax.net.ssl.SSLSocket;import javax.net.ssl.SSLSocketFactory;import javax.security.cert.X509Certificate;
import org.bouncycastle.crypto.tls.Certificate;import org.bouncycastle.crypto.tls.CertificateRequest;import org.bouncycastle.crypto.tls.DefaultTlsClient;import org.bouncycastle.crypto.tls.ExtensionType;import org.bouncycastle.crypto.tls.TlsAuthentication;import org.bouncycastle.crypto.tls.TlsClientProtocol;import org.bouncycastle.crypto.tls.TlsCredentials;import org.bouncycastle.jce.provider.BouncyCastleProvider; /** * 建立一个自己的ssl类 */public class TLSSocketConnectionFactory extends SSLSocketFactory{ static { if (Security.getProvider(BouncyCastleProvider.PROVIDER_NAME) == null) { Security.addProvider(new BouncyCastleProvider()); } }
@Override public Socket createSocket(Socket socket, final String host, int port, boolean arg3) throws IOException { if (socket == null) { socket = new Socket(); } if (!socket.isConnected()) { socket.connect(new InetSocketAddress(host, port)); }
final TlsClientProtocol tlsClientProtocol = new TlsClientProtocol(socket.getInputStream(), socket.getOutputStream(), new SecureRandom());
return _createSSLSocket(host, tlsClientProtocol); }
@Override public String[] getDefaultCipherSuites() { return null; } @Override public String[] getSupportedCipherSuites() { return null; } @Override public Socket createSocket(String host, int port) throws IOException, UnknownHostException { return null; } @Override public Socket createSocket(InetAddress host, int port) throws IOException { return null; } @Override public Socket createSocket(String host, int port, InetAddress localHost, int localPort) throws IOException, UnknownHostException { return null; } @Override public Socket createSocket(InetAddress address, int port, InetAddress localAddress, int localPort) throws IOException { return null; }
private SSLSocket _createSSLSocket(final String host, final TlsClientProtocol tlsClientProtocol) { return new SSLSocket() { private java.security.cert.Certificate[] peertCerts;
@Override public InputStream getInputStream() throws IOException { return tlsClientProtocol.getInputStream(); } @Override public OutputStream getOutputStream() throws IOException { return tlsClientProtocol.getOutputStream(); } @Override public synchronized void close() throws IOException { tlsClientProtocol.close(); } @Override public void addHandshakeCompletedListener( HandshakeCompletedListener arg0) { } @Override public boolean getEnableSessionCreation() { return false; } @Override public String[] getEnabledCipherSuites() { return null; } @Override public String[] getEnabledProtocols() { return null; } @Override public boolean getNeedClientAuth() { return false; }
@Override public SSLSession getSession() { return new SSLSession() {
/*原本这些方法都是直接throw UnsupportedOperationException 导致看不到真实异常*/ @Override public int getApplicationBufferSize() { return 0; } @Override public String getCipherSuite() { return null; } @Override public long getCreationTime() { return 0; } @Override public byte[] getId() { return null; } @Override public long getLastAccessedTime() { return 0; } @Override public java.security.cert.Certificate[] getLocalCertificates() { return null; } @Override public Principal getLocalPrincipal() { return null; } @Override public int getPacketBufferSize() { return 0; } @Override public X509Certificate[] getPeerCertificateChain() throws SSLPeerUnverifiedException { return null; } @Override public java.security.cert.Certificate[] getPeerCertificates() throws SSLPeerUnverifiedException { return peertCerts; } @Override public String getPeerHost() { return null; } @Override public int getPeerPort() { return 0; } @Override public Principal getPeerPrincipal() throws SSLPeerUnverifiedException { return null; } @Override public String getProtocol() { return null; } @Override public SSLSessionContext getSessionContext() { return null; } @Override public Object getValue(String arg0) { return null; } @Override public String[] getValueNames() { return null; } @Override public void invalidate() { return; } @Override public boolean isValid() { return true; } @Override public void putValue(String arg0, Object arg1) { return; } @Override public void removeValue(String arg0) { return; } }; }
@Override public String[] getSupportedProtocols() { return null; } @Override public boolean getUseClientMode() { return false; } @Override public boolean getWantClientAuth() { return false; } @Override public void removeHandshakeCompletedListener(HandshakeCompletedListener arg0) { } @Override public void setEnableSessionCreation(boolean arg0) { } @Override public void setEnabledCipherSuites(String[] arg0) { } @Override public void setEnabledProtocols(String[] arg0) { } @Override public void setNeedClientAuth(boolean arg0) { } @Override public void setUseClientMode(boolean arg0) { } @Override public void setWantClientAuth(boolean arg0) { } @Override public String[] getSupportedCipherSuites() { return null; }
@Override public void startHandshake() throws IOException { tlsClientProtocol.connect(new DefaultTlsClient() {
@SuppressWarnings("unchecked") @Override public Hashtable<Integer, byte[]> getClientExtensions() throws IOException { Hashtable<Integer, byte[]> clientExtensions = super.getClientExtensions(); if (clientExtensions == null) { clientExtensions = new Hashtable<Integer, byte[]>(); }
//Add host_name byte[] host_name = host.getBytes();
final ByteArrayOutputStream baos = new ByteArrayOutputStream(); final DataOutputStream dos = new DataOutputStream(baos); dos.writeShort(host_name.length + 3); dos.writeByte(0); dos.writeShort(host_name.length); dos.write(host_name); dos.close(); clientExtensions.put(ExtensionType.server_name, baos.toByteArray()); return clientExtensions; }
@Override public TlsAuthentication getAuthentication() throws IOException { return new TlsAuthentication() {
@Override public void notifyServerCertificate(Certificate serverCertificate) throws IOException { try { KeyStore ks = _loadKeyStore();
CertificateFactory cf = CertificateFactory.getInstance("X.509"); List<java.security.cert.Certificate> certs = new LinkedList<java.security.cert.Certificate>(); boolean trustedCertificate = false; for ( org.bouncycastle.asn1.x509.Certificate c : serverCertificate.getCertificateList()) { java.security.cert.Certificate cert = cf.generateCertificate(new ByteArrayInputStream(c.getEncoded())); certs.add(cert);
String alias = ks.getCertificateAlias(cert); if(alias != null) { if (cert instanceof java.security.cert.X509Certificate) { try { ( (java.security.cert.X509Certificate) cert).checkValidity(); trustedCertificate = true; } catch(CertificateExpiredException cee) { // Accept all the certs! } } } else { // Accept all the certs! }
} if (!trustedCertificate) { // Accept all the certs! } peertCerts = certs.toArray(new java.security.cert.Certificate[0]); } catch (Exception ex) { ex.printStackTrace(); throw new IOException(ex); } }
@Override public TlsCredentials getClientCredentials(CertificateRequest certificateRequest) throws IOException { return null; }
private KeyStore _loadKeyStore() throws Exception { FileInputStream trustStoreFis = null; try { KeyStore localKeyStore = null;
String trustStoreType = System.getProperty("javax.net.ssl.trustStoreType")!=null?System.getProperty("javax.net.ssl.trustStoreType"):KeyStore.getDefaultType(); String trustStoreProvider = System.getProperty("javax.net.ssl.trustStoreProvider")!=null?System.getProperty("javax.net.ssl.trustStoreProvider"):"";
if (trustStoreType.length() != 0) { if (trustStoreProvider.length() == 0) { localKeyStore = KeyStore.getInstance(trustStoreType); } else { localKeyStore = KeyStore.getInstance(trustStoreType, trustStoreProvider); }
char[] keyStorePass = null; String str5 = System.getProperty("javax.net.ssl.trustStorePassword")!=null?System.getProperty("javax.net.ssl.trustStorePassword"):"";
if (str5.length() != 0) { keyStorePass = str5.toCharArray(); }
localKeyStore.load(trustStoreFis, keyStorePass);
if (keyStorePass != null) { for (int i = 0; i < keyStorePass.length; i++) { keyStorePass[i] = 0; } } } return localKeyStore; } finally { if (trustStoreFis != null) { trustStoreFis.close(); } } } }; }
}); } // startHandshake }; }}

Jdk1.6 HTTPS访问问题解决办法的更多相关文章

web项目中url-pattern改成'/'后，js、css、图片等静态资源（404）无法访问问题解决办法
感谢http://blog.csdn.net/this_super/article/details/7884383的文章 1.增加静态资源url映射如Tomcat, Jetty, JBoss, Gl ...
web项目中url-pattern改成'/'后，js、css、图片等静态资源（404）无法访问问题解决办法
感谢http://blog.csdn.net/this_super/article/details/7884383的文章 1.增加静态资源url映射如Tomcat, Jetty, JBoss, Gl ...
Discuz x3.2利用阿里云cdn处理https访问亲测教程
第一步配置cdn和https 1.首先去阿里云.腾讯云.七牛云等申请免费https证书 2.虚拟主机是不能直接支持https的,需要cdn处理后才可以,并且端口是80 3.开启cdn加速处理,(买一个 ...
Tomcat创建HTTPS访问，java访问https
一 https和ssL HTTPS(全称:Hyper Text Transfer Protocol over Secure Socket Layer),是以安全为目标的HTTP通道,简单讲是HTTP的 ...
Windows XP系统下添加任务计划常出现问题解决办法
Windows XP系统下添加任务计划常出现问题解决办法计划任务就是让电脑在指定的时间内执行指定的动作(计划动作),这些动作可以是一个程序,也可以是一个批处理,但是至少是可以运行的(通俗一些就是双击 ...
记一次https访问握手失败（handshake failure）
文章作者:luxianghao 文章来源:http://www.cnblogs.com/luxianghao/p/6239518.html 转载请注明,谢谢合作. 免责声明:文章内容仅代表个人观点, ...
ASP+Access UTF-8 网页乱码问题解决办法
用ACCESS数据库和ASP做网站时用UTF-8编码有时会出现乱码,再者网页出错或者刷新页面后就是乱码,如果数据库取值乱码在开头加上<%@LANGUAGE="VBSCRIPT" ...
小程序后端项目【Springboot框架】部署到阿里云服务器【支持https访问】
前言: 我的后端项目是Java写的,用的Springboot框架.在部署服务器并配置https访问过程中,因为做了一些令人窒息的操作(事后发现),所以老是不能成功. 不成功具体点说就是:域名地址可以正 ...
Gitbook 生成 pdf 中文字体错乱问题解决办法
Gitbook 生成 pdf 中文字体错乱问题解决办法用过 Gitbook 的都知道, Gitbook 会自动生成 pdf 以提供下载, 但十分遗憾的是自动生成的 pdf 对中文的支持并不好, ...

随机推荐

ionic环境安装步骤
注:准确性有待考证,仅供参考. 1,安装jdk 配置环境变量:java_home和path2,安装node 检查版本 node -v3,安装npm:npm i cnpm -g 检查版本:cnpm -v ...
高阶Pandas知识图谱-《利用Python进行数据分析》
所有内容整理自<利用Python进行数据分析>,使用MindMaster Pro 7.3制作,emmx格式,源文件已经上传Github,需要的同学转左上角自行下载或者右击保存图片. 其他章 ...
网络流（EK算法）
poj1273 #include <iostream> #include <cstdio> #include <cstring> #include <queu ...
springmvc（一）springmvc简介与入门程序
springmvc概括: Spring Web MVC是一种基于Java的实现了Web MVC设计模式的请求驱动类型的轻量级Web框架,即使用了MVC架构模式的思想,将web层进行职责解耦,基于请求驱 ...
最近建了一个.net源码共享群，群共享有大量网友分享的.net（C#）商业源码
.net源码共享群 324087998. 本群创建于2013/6/21: 群里都是.net(C#)程序开发人员,群共享有大量网友分享的.net(C#)商业源码.比如:DTCMS旗舰版,hishop微分 ...
goroutine间的同步&协作
Go语言中的同步工具基础概念竞态条件(race condition) 一份数据被多个线程共享,可能会产生争用和冲突的情况.这种情况被称为竞态条件,竞态条件会破坏共享数据的一致性,影响一些线程中代码 ...
羞羞的Python模块包
目录一.pip 二.pip常用命令三.No module 'xxxxx' 四.写在最后前言写Python代码的时候,经常会遇到包的问题,但是都是遇到一次,搜索一次,解决了.下一次还是同样的 ...
MyBatis----resultMap的使用
Upload 上传 el-upload 上传配置请求头为Content-Type: "multipart/form-data"
api接口处添加属性 (标红处) // 校验台账 export const checkEquiment = (data) => { return axios({ url: '/job/equip ...
Python time altzone()方法
描述 Python time altzone() 函数返回格林威治西部的夏令时地区的偏移秒数.高佣联盟 www.cgewang.com 如果该地区在格林威治东部会返回负值(如西欧,包括英国).对夏令时 ...

Jdk1.6 HTTPS访问问题解决办法

Jdk1.6 HTTPS访问问题解决办法的更多相关文章

随机推荐

热门专题