HttpsUrlConnection https双向验证

￡神魔★判官ぃ 2022-04-15 02:17 284阅读 0赞

//发布的httpsUrlConnection的服务：  
package com.abin.lee.https;  
import java.io.BufferedReader;  
import java.io.IOException;  
import java.io.InputStreamReader;  
import java.io.PrintWriter;  
import java.util.Enumeration;  
import java.util.Map;  
import javax.servlet.ServletException;  
import javax.servlet.ServletOutputStream;  
import javax.servlet.http.HttpServlet;  
import javax.servlet.http.HttpServletRequest;  
import javax.servlet.http.HttpServletResponse;  
@SuppressWarnings("serial")  
public class ReceiveHttpsUrlConnectionRequest extends HttpServlet \{  
public void service(HttpServletRequest request, HttpServletResponse response)  
throws ServletException, IOException \{  
System.out.println("receive https request");  
BufferedReader reader=new BufferedReader(new InputStreamReader(request.getInputStream()));  
String line=null;  
StringBuffer stb=new StringBuffer();  
while((line=reader.readLine())!=null)\{  
stb.append(line);  
\}  
System.out.println("stb="+stb.toString());  
PrintWriter write=response.getWriter();  
write.write("receive HttpsUrlConnection success");  
write.flush();  
write.close();  
\}  
\}  
  
  
//web.xml  
<servlet>  
<servlet-name>httpsUrlConnectionRequest</servlet-name>  
<servlet-class>com.abin.lee.https.ReceiveHttpsUrlConnectionRequest</servlet-class>  
</servlet>  
<servlet-mapping>  
<servlet-name>httpsUrlConnectionRequest</servlet-name>  
<url-pattern>/httpsUrlConnectionRequest</url-pattern>  
</servlet-mapping>  
  
  
//HttpsUrlConnection测试类  
package com.abin.lee.test;  
import java.io.BufferedReader;  
import java.io.IOException;  
import java.io.InputStreamReader;  
import java.io.OutputStream;  
import java.net.URL;  
import java.util.Date;  
import javax.net.ssl.HostnameVerifier;  
import javax.net.ssl.HttpsURLConnection;  
import javax.net.ssl.SSLSession;  
import junit.framework.TestCase;  
import org.junit.Before;  
import org.junit.Test;  
public class HttpsUrlConnectionClient extends TestCase \{  
// 客户端密钥库  
private String sslKeyStorePath;  
private String sslKeyStorePassword;  
private String sslKeyStoreType;  
// 客户端信任的证书  
private String sslTrustStore;  
private String sslTrustStorePassword;  
private String httpsUrlConnectionUrl = "https://localhost:8443/global/httpsUrlConnectionRequest";  
@Before  
public void setUp() \{  
sslKeyStorePath = "D:\\\\home\\\\tomcat.keystore";  
sslKeyStorePassword = "stevenjohn";  
sslKeyStoreType = "JKS"; // 密钥库类型，有JKS PKCS12等  
sslTrustStore = "D:\\\\home\\\\tomcat.keystore";  
sslTrustStorePassword = "stevenjohn";  
System.setProperty("javax.net.ssl.keyStore", sslKeyStorePath);  
System.setProperty("javax.net.ssl.keyStorePassword",  
sslKeyStorePassword);  
System.setProperty("javax.net.ssl.keyStoreType", sslKeyStoreType);  
// 设置系统参数  
System.setProperty("javax.net.ssl.trustStore", sslTrustStore);  
System.setProperty("javax.net.ssl.trustStorePassword",  
sslTrustStorePassword);  
System.setProperty("java.protocol.handler.pkgs", "sun.net.www.protocol");  
\}  
@Test  
public void testHttpsUrlConnectionClient() \{  
try \{  
URL url = new URL(httpsUrlConnectionUrl);  
HostnameVerifier hv = new HostnameVerifier() \{  
public boolean verify(String urlHostName, SSLSession session) \{  
return true;  
\}  
\};  
HttpsURLConnection.setDefaultHostnameVerifier(hv);  
HttpsURLConnection connection = (HttpsURLConnection) url  
.openConnection();  
connection.setRequestProperty("Content-Type", "text/xml");  
connection.setDoOutput(true);  
connection.setDoInput(true);  
connection.setRequestMethod("POST");  
connection.setUseCaches(false);  
connection.setReadTimeout(30000);  
String user="abin";  
String pwd="abing";  
String request="user="+user+"&pwd="+pwd;  
OutputStream out = connection.getOutputStream();  
out.write(request.getBytes());  
out.flush();  
out.close();  
  
//接收请求的返回值  
BufferedReader reader = new BufferedReader(new InputStreamReader(connection.getInputStream()));  
StringBuffer stb = new StringBuffer();  
String line;  
while ((line = reader.readLine()) != null) \{  
stb.append(line);  
\}  
Integer statusCode = connection.getResponseCode();  
System.out.println("返回状态码:" + statusCode);  
reader.close();  
connection.disconnect();  
\} catch (IOException e) \{  
e.printStackTrace();  
\}  
  
\}  
\}  
  
  
//tomcat配置文件：  
<Connector port="6060" protocol="HTTP/1.1"  
connectionTimeout="20000"  
redirectPort="8443" />  
<Connector port="8443" protocol="org.apache.coyote.http11.Http11NioProtocol"  
SSLEnabled="true" maxThreads="150" scheme="https"  
secure="true" clientAuth="true" sslProtocol="TLS"  
keystoreFile="D:\\\\home\\\\tomcat.keystore" keystorePass="stevenjohn"  
truststoreFile="D:\\\\home\\\\tomcat.keystore" truststorePass="stevenjohn" />