Jdk1.6 HTTPS访问问题解决办法

真是艹蛋的一次经历,jdk6上面去访问别人的https,还好有百度搞定了问题.现在写下随笔,记录下;

首先要自己重写SSLSocketFactory这个类,

下面是自己重写的这个类:TLSSocketConnectionFactory

package cn.cbsw.tools;

import java.io.ByteArrayInputStream;

import java.io.ByteArrayOutputStream;

import java.io.DataOutputStream;

import java.io.FileInputStream;

import java.io.IOException;

import java.io.InputStream;

import java.io.OutputStream;

import java.net.InetAddress;

import java.net.InetSocketAddress;

import java.net.Socket;

import java.net.UnknownHostException;

import java.security.KeyStore;

import java.security.Principal;

import java.security.SecureRandom;

import java.security.Security;

import java.security.cert.CertificateExpiredException;

import java.security.cert.CertificateFactory;

import java.util.Hashtable;

import java.util.LinkedList;

import java.util.List;

import javax.net.ssl.HandshakeCompletedListener;

import javax.net.ssl.SSLPeerUnverifiedException;

import javax.net.ssl.SSLSession;

import javax.net.ssl.SSLSessionContext;

import javax.net.ssl.SSLSocket;

import javax.net.ssl.SSLSocketFactory;

import javax.security.cert.X509Certificate;

import org.bouncycastle.crypto.tls.Certificate;

import org.bouncycastle.crypto.tls.CertificateRequest;

import org.bouncycastle.crypto.tls.DefaultTlsClient;

import org.bouncycastle.crypto.tls.ExtensionType;

import org.bouncycastle.crypto.tls.TlsAuthentication;

import org.bouncycastle.crypto.tls.TlsClientProtocol;

import org.bouncycastle.crypto.tls.TlsCredentials;

import org.bouncycastle.jce.provider.BouncyCastleProvider;

/**

 * 建立一个自己的ssl类

 */

public class TLSSocketConnectionFactory extends SSLSocketFactory{

    static {

        if (Security.getProvider(BouncyCastleProvider.PROVIDER_NAME) == null) {

            Security.addProvider(new BouncyCastleProvider());

        }

    }

    @Override

    public Socket createSocket(Socket socket, final String host, int port,

                               boolean arg3) throws IOException {

        if (socket == null) {

            socket = new Socket();

        }

        if (!socket.isConnected()) {

            socket.connect(new InetSocketAddress(host, port));

        }

        final TlsClientProtocol tlsClientProtocol = new     TlsClientProtocol(socket.getInputStream(), socket.getOutputStream(), new     SecureRandom());

        return _createSSLSocket(host, tlsClientProtocol);

    }

    @Override public String[] getDefaultCipherSuites() { return null; }

    @Override public String[] getSupportedCipherSuites() { return null; }

    @Override public Socket createSocket(String host, int port) throws IOException, UnknownHostException { return null; }

    @Override public Socket createSocket(InetAddress host, int port) throws IOException { return null; }

    @Override public Socket createSocket(String host, int port, InetAddress localHost, int localPort) throws IOException, UnknownHostException { return null; }

    @Override public Socket createSocket(InetAddress address, int port, InetAddress localAddress, int localPort) throws IOException { return null; }

    private SSLSocket _createSSLSocket(final String host, final TlsClientProtocol tlsClientProtocol) {

        return new SSLSocket() {

            private java.security.cert.Certificate[] peertCerts;

            @Override public InputStream getInputStream() throws IOException { return tlsClientProtocol.getInputStream(); }

            @Override public OutputStream getOutputStream() throws IOException { return tlsClientProtocol.getOutputStream(); }

            @Override public synchronized void close() throws IOException { tlsClientProtocol.close(); }

            @Override public void addHandshakeCompletedListener( HandshakeCompletedListener arg0) { }

            @Override public boolean getEnableSessionCreation() { return false; }

            @Override public String[] getEnabledCipherSuites() { return null; }

            @Override public String[] getEnabledProtocols() { return null; }

            @Override public boolean getNeedClientAuth() { return false; }

            @Override

            public SSLSession getSession() {

                return new SSLSession() {

                    /*原本这些方法都是直接throw UnsupportedOperationException 导致看不到真实异常*/

                    @Override

                    public int getApplicationBufferSize() {

                        return 0;

                    }

                    @Override public String getCipherSuite() { return null; }

                    @Override public long getCreationTime() { return 0; }

                    @Override public byte[] getId() { return null; }

                    @Override public long getLastAccessedTime() { return 0; }

                    @Override public java.security.cert.Certificate[] getLocalCertificates() { return null; }

                    @Override public Principal getLocalPrincipal() { return null; }

                    @Override public int getPacketBufferSize() { return 0; }

                    @Override public X509Certificate[] getPeerCertificateChain() throws SSLPeerUnverifiedException { return null; }

                    @Override public java.security.cert.Certificate[] getPeerCertificates() throws SSLPeerUnverifiedException { return peertCerts; }

                    @Override public String getPeerHost() { return null; }

                    @Override public int getPeerPort() { return 0; }

                    @Override public Principal getPeerPrincipal() throws SSLPeerUnverifiedException { return null; }

                    @Override public String getProtocol() { return null; }

                    @Override public SSLSessionContext getSessionContext() { return null; }

                    @Override public Object getValue(String arg0) { return null; }

                    @Override public String[] getValueNames() { return null; }

                    @Override public void invalidate() { return; }

                    @Override public boolean isValid() { return true; }

                    @Override public void putValue(String arg0, Object arg1) { return; }

                    @Override

                    public void removeValue(String arg0) {

                        return;

                    }

                };

            }

            @Override public String[] getSupportedProtocols() { return null; }

            @Override public boolean getUseClientMode() { return false; }

            @Override public boolean getWantClientAuth() { return false; }

            @Override public void removeHandshakeCompletedListener(HandshakeCompletedListener arg0) { }

            @Override public void setEnableSessionCreation(boolean arg0) { }

            @Override public void setEnabledCipherSuites(String[] arg0) { }

            @Override public void setEnabledProtocols(String[] arg0) { }

            @Override public void setNeedClientAuth(boolean arg0) { }

            @Override public void setUseClientMode(boolean arg0) { }

            @Override public void setWantClientAuth(boolean arg0) { }

            @Override public String[] getSupportedCipherSuites() { return null; }

            @Override

            public void startHandshake() throws IOException {

                tlsClientProtocol.connect(new DefaultTlsClient() {

                    @SuppressWarnings("unchecked")

                    @Override

                    public Hashtable<Integer, byte[]> getClientExtensions() throws IOException {

                        Hashtable<Integer, byte[]> clientExtensions = super.getClientExtensions();

                        if (clientExtensions == null) {

                            clientExtensions = new Hashtable<Integer, byte[]>();

                        }

                        //Add host_name

                        byte[] host_name = host.getBytes();

                        final ByteArrayOutputStream baos = new ByteArrayOutputStream();

                        final DataOutputStream dos = new DataOutputStream(baos);

                        dos.writeShort(host_name.length + 3);

                        dos.writeByte(0);

                        dos.writeShort(host_name.length);

                        dos.write(host_name);

                        dos.close();

                        clientExtensions.put(ExtensionType.server_name, baos.toByteArray());

                        return clientExtensions;

                    }

                    @Override

                    public TlsAuthentication getAuthentication() throws IOException {

                        return new TlsAuthentication() {

                            @Override

                            public void notifyServerCertificate(Certificate serverCertificate) throws IOException {

                                try {

                                    KeyStore ks = _loadKeyStore();

                                    CertificateFactory cf = CertificateFactory.getInstance("X.509");

                                    List<java.security.cert.Certificate> certs = new LinkedList<java.security.cert.Certificate>();

                                    boolean trustedCertificate = false;

                                    for ( org.bouncycastle.asn1.x509.Certificate c : serverCertificate.getCertificateList()) {

                                        java.security.cert.Certificate cert = cf.generateCertificate(new ByteArrayInputStream(c.getEncoded()));

                                        certs.add(cert);

                                        String alias = ks.getCertificateAlias(cert);

                                        if(alias != null) {

                                            if (cert instanceof java.security.cert.X509Certificate) {

                                                try {

                                                    ( (java.security.cert.X509Certificate) cert).checkValidity();

                                                    trustedCertificate = true;

                                                } catch(CertificateExpiredException cee) {

                                                    // Accept all the certs!

                                                }

                                            }

                                        } else {

                                            // Accept all the certs!

                                        }

                                    }

                                    if (!trustedCertificate) {

                                        // Accept all the certs!

                                    }

                                    peertCerts = certs.toArray(new java.security.cert.Certificate[0]);

                                } catch (Exception ex) {

                                    ex.printStackTrace();

                                    throw new IOException(ex);

                                }

                            }

                            @Override

                            public TlsCredentials getClientCredentials(CertificateRequest certificateRequest) throws IOException {

                                return null;

                            }

                            private KeyStore _loadKeyStore() throws Exception {

                                FileInputStream trustStoreFis = null;

                                try {

                                    KeyStore localKeyStore = null;

                                    String trustStoreType = System.getProperty("javax.net.ssl.trustStoreType")!=null?System.getProperty("javax.net.ssl.trustStoreType"):KeyStore.getDefaultType();

                                    String trustStoreProvider = System.getProperty("javax.net.ssl.trustStoreProvider")!=null?System.getProperty("javax.net.ssl.trustStoreProvider"):"";

                                    if (trustStoreType.length() != 0) {

                                        if (trustStoreProvider.length() == 0) {

                                            localKeyStore = KeyStore.getInstance(trustStoreType);

                                        } else {

                                            localKeyStore = KeyStore.getInstance(trustStoreType, trustStoreProvider);

                                        }

                                        char[] keyStorePass = null;

                                        String str5 = System.getProperty("javax.net.ssl.trustStorePassword")!=null?System.getProperty("javax.net.ssl.trustStorePassword"):"";

                                        if (str5.length() != 0) {

                                            keyStorePass = str5.toCharArray();

                                        }

                                        localKeyStore.load(trustStoreFis, keyStorePass);

                                        if (keyStorePass != null) {

                                            for (int i = 0; i < keyStorePass.length; i++) {

                                                keyStorePass[i] = 0;

                                            }

                                        }

                                    }

                                    return localKeyStore;

                                } finally {

                                    if (trustStoreFis != null) {

                                        trustStoreFis.close();

                                    }

                                }

                            }

                        };

                    }

                });

            } // startHandshake

        };

    }

}

依赖jar包:

bcpkix-jdk15on-1.60.jar

bcprov-jdk15on-1.60.jar

然后再写一个httpsConnectionUtils工具类:

package cn.cbsw.tools;

import java.io.BufferedReader;

import java.io.DataOutputStream;

import java.io.InputStreamReader;

import java.net.URL;

import java.net.URLEncoder;

import java.security.cert.CertificateException;

import java.security.cert.X509Certificate;

import java.util.ArrayList;

import java.util.Iterator;

import java.util.List;

import java.util.Map;

import javax.net.ssl.HostnameVerifier;

import javax.net.ssl.HttpsURLConnection;

import javax.net.ssl.SSLContext;

import javax.net.ssl.SSLSession;

import javax.net.ssl.TrustManager;

import javax.net.ssl.X509TrustManager;

import org.apache.commons.lang.StringUtils;

/**

 * 本类是解决https访问问题

 * @author sun

 *

 */

public class HttpsConnectUtils {

    /**

     * 获取url内容

     */

    public static String getQuery(String desUrl,String method,Map<String,String> params) throws Throwable{

        if(!"POST".equalsIgnoreCase(method)){

            method="GET";//如果不是POST就认为是GET,至于PUT很少用到,暂时用不到

        }

        String paramStr="";

        if(params!=null && !params.isEmpty()){

               List<String> list=new ArrayList<String>();//存放参数

               Iterator<String> it=params.keySet().iterator();

               while(it.hasNext()){

                   String key=it.next();

                   list.add(key+"="+URLEncoder.encode(params.get(key), "utf-8"));

               }

               paramStr=StringUtils.join(list,"&");

           }

        //如果是get请求且带有参数

        if(!"".equals(paramStr) && "GET".equalsIgnoreCase(method)){

            desUrl+="?"+paramStr;

        }

         URL url = new URL(null,desUrl,new sun.net.www.protocol.https.Handler());

        SSLContext sslContext=SSLContext.getInstance("TLS");

        TrustManager x509TrustManager=new X509TrustManager() {

            @Override

            public X509Certificate[] getAcceptedIssuers() {

                return null;

            }

            @Override

            public void checkServerTrusted(X509Certificate[] arg0, String arg1)

                    throws CertificateException {

            }

            @Override

            public void checkClientTrusted(X509Certificate[] arg0, String arg1)

                    throws CertificateException {

            }

        };

        sslContext.init(null, new TrustManager[]{x509TrustManager}, null);

        HttpsURLConnection httpsConn=(HttpsURLConnection) url.openConnection();

        httpsConn.setSSLSocketFactory(new TLSSocketConnectionFactory());

           httpsConn.setRequestProperty("accept", "*/*");

           httpsConn.setRequestProperty("connection", "Keep-Alive");

           httpsConn.setRequestProperty("user-agent", "Mozilla/4.0 (compatible; MSIE 7.0; Windows xp)");

           httpsConn.setDoOutput(true);

           httpsConn.setDoInput(true);

           httpsConn.setRequestMethod(method!=null?method:"GET");//默认get

           //忽略证书设置

           httpsConn.setHostnameVerifier(new HostnameVerifier() {

            @Override

            public boolean verify(String arg0, SSLSession arg1) {

                return true;

            }

        });

           //下面的方法会自动修改请求方式为POST

           if(!"".equals(paramStr) && "POST".equalsIgnoreCase(method)){

            DataOutputStream out = new DataOutputStream(httpsConn.getOutputStream());

            out.writeBytes(paramStr);

            out.flush();

            out.close();

           }

           InputStreamReader isr = new InputStreamReader(httpsConn.getInputStream(), "utf-8");

           BufferedReader inReader = new BufferedReader(isr);

           StringBuffer result = new StringBuffer();

           String inputLine;

           while ((inputLine = inReader.readLine()) != null) {

               result.append(inputLine);

           }

           // 关闭输入流

           inReader.close();

           isr.close();

           httpsConn.disconnect();//每次请求完毕后关闭链接

           return result.toString();

    }

}

然后调用的时候直接按httpsConnectionUtils.getQuery(String desUrl,String method,Map<String,String> params)调用即可.

通过百度整整坑了一个星期总算搞定.另外jdk1.8版的工具类也发下httpsConnectionUtils

package cn.cbsw.tools;

import java.io.BufferedReader;

import java.io.DataOutputStream;

import java.io.InputStreamReader;

import java.net.URL;

import java.net.URLEncoder;

import java.security.cert.CertificateException;

import java.security.cert.X509Certificate;

import java.util.ArrayList;

import java.util.Iterator;

import java.util.List;

import java.util.Map;

import javax.net.ssl.HostnameVerifier;

import javax.net.ssl.HttpsURLConnection;

import javax.net.ssl.SSLContext;

import javax.net.ssl.SSLSession;

import javax.net.ssl.TrustManager;

import javax.net.ssl.X509TrustManager;

import org.apache.commons.lang.StringUtils;

/**

 * 本类是解决https访问问题

 * @author sun

 *

 */

public class HttpsConnectUtils {

    /**

     * 获取url内容

     */

    public static String getQuery(String desUrl,String method,Map<String,String> params) throws Throwable{

        if(!"POST".equalsIgnoreCase(method)){

            method="GET";//如果不是POST就认为是GET,至于PUT很少用到,暂时用不到

        }

        String paramStr="";

        if(params!=null && !params.isEmpty()){

               List<String> list=new ArrayList<String>();//存放参数

               Iterator<String> it=params.keySet().iterator();

               while(it.hasNext()){

                   String key=it.next();

                   list.add(key+"="+URLEncoder.encode(params.get(key), "utf-8"));

               }

               paramStr=StringUtils.join(list,"&");

           }

        //如果是get请求且带有参数

        if(!"".equals(paramStr) && "GET".equalsIgnoreCase(method)){

            desUrl+="?"+paramStr;

        }

         URL url = new URL(null,desUrl,new sun.net.www.protocol.https.Handler());

        SSLContext sslContext=SSLContext.getInstance("TLSv1.2");//jdk8支持1.2版本

        TrustManager x509TrustManager=new X509TrustManager() {

            @Override

            public X509Certificate[] getAcceptedIssuers() {

                return null;

            }

            @Override

            public void checkServerTrusted(X509Certificate[] arg0, String arg1)

                    throws CertificateException {

            }

            @Override

            public void checkClientTrusted(X509Certificate[] arg0, String arg1)

                    throws CertificateException {

            }

        };

        sslContext.init(null, new TrustManager[]{x509TrustManager}, null);

        HttpsURLConnection httpsConn=(HttpsURLConnection) url.openConnection();

        httpsConn.setSSLSocketFactory(sslContext.getSocketFactory());

           httpsConn.setRequestProperty("accept", "*/*");

           httpsConn.setRequestProperty("connection", "Keep-Alive");

           httpsConn.setRequestProperty("user-agent", "Mozilla/4.0 (compatible; MSIE 7.0; Windows xp)");

           httpsConn.setDoOutput(true);

           httpsConn.setDoInput(true);

           httpsConn.setRequestMethod(method!=null?method:"GET");//默认get

           //忽略证书设置

           httpsConn.setHostnameVerifier(new HostnameVerifier() {

            @Override

            public boolean verify(String arg0, SSLSession arg1) {

                return true;

            }

        });

           //下面的方法会自动修改请求方式为POST

           if(!"".equals(paramStr) && "POST".equalsIgnoreCase(method)){

            DataOutputStream out = new DataOutputStream(httpsConn.getOutputStream());

            out.writeBytes(paramStr);

            out.flush();

            out.close();

           }

           InputStreamReader isr = new InputStreamReader(httpsConn.getInputStream(), "utf-8");

           BufferedReader inReader = new BufferedReader(isr);

           StringBuffer result = new StringBuffer();

           String inputLine;

           while ((inputLine = inReader.readLine()) != null) {

               result.append(inputLine);

           }

           // 关闭输入流

           inReader.close();

           isr.close();

           httpsConn.disconnect();//每次请求完毕后关闭链接

           return result.toString();

    }

}

希望能帮到后来人!

package cn.cbsw.tools;
import java.io.ByteArrayInputStream;import java.io.ByteArrayOutputStream;import java.io.DataOutputStream;import java.io.FileInputStream;import java.io.IOException;import java.io.InputStream;import java.io.OutputStream;import java.net.InetAddress;import java.net.InetSocketAddress;import java.net.Socket;import java.net.UnknownHostException;import java.security.KeyStore;import java.security.Principal;import java.security.SecureRandom;import java.security.Security;import java.security.cert.CertificateExpiredException;import java.security.cert.CertificateFactory;import java.util.Hashtable;import java.util.LinkedList;import java.util.List;
import javax.net.ssl.HandshakeCompletedListener;import javax.net.ssl.SSLPeerUnverifiedException;import javax.net.ssl.SSLSession;import javax.net.ssl.SSLSessionContext;import javax.net.ssl.SSLSocket;import javax.net.ssl.SSLSocketFactory;import javax.security.cert.X509Certificate;
import org.bouncycastle.crypto.tls.Certificate;import org.bouncycastle.crypto.tls.CertificateRequest;import org.bouncycastle.crypto.tls.DefaultTlsClient;import org.bouncycastle.crypto.tls.ExtensionType;import org.bouncycastle.crypto.tls.TlsAuthentication;import org.bouncycastle.crypto.tls.TlsClientProtocol;import org.bouncycastle.crypto.tls.TlsCredentials;import org.bouncycastle.jce.provider.BouncyCastleProvider; /** * 建立一个自己的ssl类 */public class TLSSocketConnectionFactory extends SSLSocketFactory{ static { if (Security.getProvider(BouncyCastleProvider.PROVIDER_NAME) == null) { Security.addProvider(new BouncyCastleProvider()); } }
@Override public Socket createSocket(Socket socket, final String host, int port, boolean arg3) throws IOException { if (socket == null) { socket = new Socket(); } if (!socket.isConnected()) { socket.connect(new InetSocketAddress(host, port)); }
final TlsClientProtocol tlsClientProtocol = new TlsClientProtocol(socket.getInputStream(), socket.getOutputStream(), new SecureRandom());
return _createSSLSocket(host, tlsClientProtocol); }
@Override public String[] getDefaultCipherSuites() { return null; } @Override public String[] getSupportedCipherSuites() { return null; } @Override public Socket createSocket(String host, int port) throws IOException, UnknownHostException { return null; } @Override public Socket createSocket(InetAddress host, int port) throws IOException { return null; } @Override public Socket createSocket(String host, int port, InetAddress localHost, int localPort) throws IOException, UnknownHostException { return null; } @Override public Socket createSocket(InetAddress address, int port, InetAddress localAddress, int localPort) throws IOException { return null; }
private SSLSocket _createSSLSocket(final String host, final TlsClientProtocol tlsClientProtocol) { return new SSLSocket() { private java.security.cert.Certificate[] peertCerts;
@Override public InputStream getInputStream() throws IOException { return tlsClientProtocol.getInputStream(); } @Override public OutputStream getOutputStream() throws IOException { return tlsClientProtocol.getOutputStream(); } @Override public synchronized void close() throws IOException { tlsClientProtocol.close(); } @Override public void addHandshakeCompletedListener( HandshakeCompletedListener arg0) { } @Override public boolean getEnableSessionCreation() { return false; } @Override public String[] getEnabledCipherSuites() { return null; } @Override public String[] getEnabledProtocols() { return null; } @Override public boolean getNeedClientAuth() { return false; }
@Override public SSLSession getSession() { return new SSLSession() {
/*原本这些方法都是直接throw UnsupportedOperationException 导致看不到真实异常*/ @Override public int getApplicationBufferSize() { return 0; } @Override public String getCipherSuite() { return null; } @Override public long getCreationTime() { return 0; } @Override public byte[] getId() { return null; } @Override public long getLastAccessedTime() { return 0; } @Override public java.security.cert.Certificate[] getLocalCertificates() { return null; } @Override public Principal getLocalPrincipal() { return null; } @Override public int getPacketBufferSize() { return 0; } @Override public X509Certificate[] getPeerCertificateChain() throws SSLPeerUnverifiedException { return null; } @Override public java.security.cert.Certificate[] getPeerCertificates() throws SSLPeerUnverifiedException { return peertCerts; } @Override public String getPeerHost() { return null; } @Override public int getPeerPort() { return 0; } @Override public Principal getPeerPrincipal() throws SSLPeerUnverifiedException { return null; } @Override public String getProtocol() { return null; } @Override public SSLSessionContext getSessionContext() { return null; } @Override public Object getValue(String arg0) { return null; } @Override public String[] getValueNames() { return null; } @Override public void invalidate() { return; } @Override public boolean isValid() { return true; } @Override public void putValue(String arg0, Object arg1) { return; } @Override public void removeValue(String arg0) { return; } }; }
@Override public String[] getSupportedProtocols() { return null; } @Override public boolean getUseClientMode() { return false; } @Override public boolean getWantClientAuth() { return false; } @Override public void removeHandshakeCompletedListener(HandshakeCompletedListener arg0) { } @Override public void setEnableSessionCreation(boolean arg0) { } @Override public void setEnabledCipherSuites(String[] arg0) { } @Override public void setEnabledProtocols(String[] arg0) { } @Override public void setNeedClientAuth(boolean arg0) { } @Override public void setUseClientMode(boolean arg0) { } @Override public void setWantClientAuth(boolean arg0) { } @Override public String[] getSupportedCipherSuites() { return null; }
@Override public void startHandshake() throws IOException { tlsClientProtocol.connect(new DefaultTlsClient() {
@SuppressWarnings("unchecked") @Override public Hashtable<Integer, byte[]> getClientExtensions() throws IOException { Hashtable<Integer, byte[]> clientExtensions = super.getClientExtensions(); if (clientExtensions == null) { clientExtensions = new Hashtable<Integer, byte[]>(); }
//Add host_name byte[] host_name = host.getBytes();
final ByteArrayOutputStream baos = new ByteArrayOutputStream(); final DataOutputStream dos = new DataOutputStream(baos); dos.writeShort(host_name.length + 3); dos.writeByte(0); dos.writeShort(host_name.length); dos.write(host_name); dos.close(); clientExtensions.put(ExtensionType.server_name, baos.toByteArray()); return clientExtensions; }
@Override public TlsAuthentication getAuthentication() throws IOException { return new TlsAuthentication() {
@Override public void notifyServerCertificate(Certificate serverCertificate) throws IOException { try { KeyStore ks = _loadKeyStore();
CertificateFactory cf = CertificateFactory.getInstance("X.509"); List<java.security.cert.Certificate> certs = new LinkedList<java.security.cert.Certificate>(); boolean trustedCertificate = false; for ( org.bouncycastle.asn1.x509.Certificate c : serverCertificate.getCertificateList()) { java.security.cert.Certificate cert = cf.generateCertificate(new ByteArrayInputStream(c.getEncoded())); certs.add(cert);
String alias = ks.getCertificateAlias(cert); if(alias != null) { if (cert instanceof java.security.cert.X509Certificate) { try { ( (java.security.cert.X509Certificate) cert).checkValidity(); trustedCertificate = true; } catch(CertificateExpiredException cee) { // Accept all the certs! } } } else { // Accept all the certs! }
} if (!trustedCertificate) { // Accept all the certs! } peertCerts = certs.toArray(new java.security.cert.Certificate[0]); } catch (Exception ex) { ex.printStackTrace(); throw new IOException(ex); } }
@Override public TlsCredentials getClientCredentials(CertificateRequest certificateRequest) throws IOException { return null; }
private KeyStore _loadKeyStore() throws Exception { FileInputStream trustStoreFis = null; try { KeyStore localKeyStore = null;
String trustStoreType = System.getProperty("javax.net.ssl.trustStoreType")!=null?System.getProperty("javax.net.ssl.trustStoreType"):KeyStore.getDefaultType(); String trustStoreProvider = System.getProperty("javax.net.ssl.trustStoreProvider")!=null?System.getProperty("javax.net.ssl.trustStoreProvider"):"";
if (trustStoreType.length() != 0) { if (trustStoreProvider.length() == 0) { localKeyStore = KeyStore.getInstance(trustStoreType); } else { localKeyStore = KeyStore.getInstance(trustStoreType, trustStoreProvider); }
char[] keyStorePass = null; String str5 = System.getProperty("javax.net.ssl.trustStorePassword")!=null?System.getProperty("javax.net.ssl.trustStorePassword"):"";
if (str5.length() != 0) { keyStorePass = str5.toCharArray(); }
localKeyStore.load(trustStoreFis, keyStorePass);
if (keyStorePass != null) { for (int i = 0; i < keyStorePass.length; i++) { keyStorePass[i] = 0; } } } return localKeyStore; } finally { if (trustStoreFis != null) { trustStoreFis.close(); } } } }; }
}); } // startHandshake }; }}

Jdk1.6 HTTPS访问问题解决办法的更多相关文章

web项目中url-pattern改成'/'后，js、css、图片等静态资源（404）无法访问问题解决办法
感谢http://blog.csdn.net/this_super/article/details/7884383的文章 1.增加静态资源url映射如Tomcat, Jetty, JBoss, Gl ...
web项目中url-pattern改成'/'后，js、css、图片等静态资源（404）无法访问问题解决办法
感谢http://blog.csdn.net/this_super/article/details/7884383的文章 1.增加静态资源url映射如Tomcat, Jetty, JBoss, Gl ...
Discuz x3.2利用阿里云cdn处理https访问亲测教程
第一步配置cdn和https 1.首先去阿里云.腾讯云.七牛云等申请免费https证书 2.虚拟主机是不能直接支持https的,需要cdn处理后才可以,并且端口是80 3.开启cdn加速处理,(买一个 ...
Tomcat创建HTTPS访问，java访问https
一 https和ssL HTTPS(全称:Hyper Text Transfer Protocol over Secure Socket Layer),是以安全为目标的HTTP通道,简单讲是HTTP的 ...
Windows XP系统下添加任务计划常出现问题解决办法
Windows XP系统下添加任务计划常出现问题解决办法计划任务就是让电脑在指定的时间内执行指定的动作(计划动作),这些动作可以是一个程序,也可以是一个批处理,但是至少是可以运行的(通俗一些就是双击 ...
记一次https访问握手失败（handshake failure）
文章作者:luxianghao 文章来源:http://www.cnblogs.com/luxianghao/p/6239518.html 转载请注明,谢谢合作. 免责声明:文章内容仅代表个人观点, ...
ASP+Access UTF-8 网页乱码问题解决办法
用ACCESS数据库和ASP做网站时用UTF-8编码有时会出现乱码,再者网页出错或者刷新页面后就是乱码,如果数据库取值乱码在开头加上<%@LANGUAGE="VBSCRIPT" ...
小程序后端项目【Springboot框架】部署到阿里云服务器【支持https访问】
前言: 我的后端项目是Java写的,用的Springboot框架.在部署服务器并配置https访问过程中,因为做了一些令人窒息的操作(事后发现),所以老是不能成功. 不成功具体点说就是:域名地址可以正 ...
Gitbook 生成 pdf 中文字体错乱问题解决办法
Gitbook 生成 pdf 中文字体错乱问题解决办法用过 Gitbook 的都知道, Gitbook 会自动生成 pdf 以提供下载, 但十分遗憾的是自动生成的 pdf 对中文的支持并不好, ...

随机推荐

题解 CF786B 【Legacy】
本题要求我们支持三种操作: ① 点向点连边. ② 点向区间连边. ③ 区间向点连边. 然后跑最短路得出答案. 考虑使用线段树优化建图. 建两颗线段树,入树和出树,每个节点为一段区间的原节点集合.入树内 ...
基于python实现查询ip地址来源
接口调用方法是在url后面直接加上IP地址. url = 'http://freeapi.ipip.net/218.192.3.42' #中文免费 url2 = 'http://ip-api.com/ ...
何时/如何使用 Vue3 render 函数
什么是 DOM? 如果我们把这个 HTML 加载到浏览器中,浏览器创建这些节点,用来显示网页.所以这个HTML映射到一系列DOM节点,然后我们可以使用JavaScript进行操作.例如: let it ...
【Unity3D】简单常用的功能实现1——鼠标点击实现移动
[鼠标点击实现移动] 第一步,在要移动的GameObject的Inspector面板中添加角色控制器组件并调整参数. 参数的调整可以依照Scene面板,如下图的绿色线框(角色控制器组件是一种胶囊形状的 ...
.Net微服务实战之CI/CD
系列文章 .Net微服务实战之技术选型篇 .Net微服务实战之技术架构分层篇 .Net微服务实战之DevOps篇 .Net微服务实战之负载均衡(上) 相关源码:https://github.com/S ...
Spring Security OAuth2之resource_id配置与验证
一.resource_id的作用 Spring Security OAuth2 架构上分为Authorization Server认证服务器和Resource Server资源服务器.我们可以为每一个 ...
5.5 省选模拟赛 B Permutation 构造贪心
LINK:Permutation 对于这种构造神题我自然是要补的.为啥就我没想出来哇. 30分还是很好写的注意8!实际上很小不需要爆搜写bfs记录状态即可.至于判断状态是否出现与否可以开ma ...
9 16 模拟赛&关于线段树上二分总结
1 考试时又犯了一个致命的错误,没有去思考T2的正解而是去简单的推了一下式子开始了漫漫找规律之路,不应该这样做的为了得到规律虽然也打了暴力但是还是打了一些不必要的程序例如求组合数什么的比较浪费时 ...
强烈推荐 16 款 IDEA 插件，让你的开发速度飞起来！
当前使用的IDEA版本是2020.1.随着IDEA版本的升级,有些插件不再支持,而有些插件变成了收费插件,这些插件将不再推荐.以下列举的,都是亲测可以在2020.1版本的IDEA中使用的插件. 1 g ...
python8.1多线程
import threadingimport time def run1 (name,sex): print(name,sex,"执行线程1") time.sleep(3)def ...

Jdk1.6 HTTPS访问问题解决办法

Jdk1.6 HTTPS访问问题解决办法的更多相关文章

随机推荐

热门专题