Java http SSL连接(双向认证)及共享Cookie方法

作者: flow__啊 | 来源:发表于2017-03-29 15:38 被阅读723次

SSL是什么

百度、谷歌自己搜吧，你以为我会在这里告诉你？

安全套接字（Secure Socket Layer，SSL）协议是Web浏览器与Web服务器之间安全交换信息的协议，提供两个基本的安全服务：鉴别与保密。
　　SSL是Netscape于1994年开发的，后来成为了世界上最著名的web安全机制，所有主要的浏览器都支持SSL协议。
　　目前有三个版本：2、3、3.1，最常用的是第3版，是1995年发布的。
　　SSL协议的三个特性
　　1 保密：在握手协议中定义了会话密钥后，所有的消息都被加密。
　　2 鉴别：可选的客户端认证，和强制的服务器端认证。
　　3 完整性：传送的消息包括消息完整性检查（使用MAC）。
　　SSL的位置
　　SSL介于应用层和TCP层之间。应用层数据不再直接传递给传输层，而是传递给SSL层，SSL层对从应用层收到的数据进行加密，并增加自己的SSL头。

** 这里是HTTP封装过的，不是直接操作的socket**

//封装操作
 SSLContext sslcontext = SSLContexts
                .custom()
                .loadTrustMaterial(trustStore, new TrustSelfSignedStrategy())  //加载本地信任证书   信任自签名策略
                .loadKeyMaterial(clientStore, "123456".toCharArray())          //加载本地证书
                .build();                                                      //构造
        SSLConnectionSocketFactory sslsf = new SSLConnectionSocketFactory(sslcontext);  //制造一个socket
        httpclient = HttpClients.custom().setSSLSocketFactory(sslsf).build();           //通过这个socket来生成一个http请求
        // 创建http请求(get方式)  delete put 全都有相应的方法
        //共享一个cookie
        HttpGet httpget = new HttpGet(url1);
        HttpGet httpget2 = new HttpGet(url2);

//先上gradle配置
    compile 'org.apache.httpcomponents:httpclient:4.5.2'
    // https://mvnrepository.com/artifact/org.json/json
    compile group: 'org.json', name: 'json', version: '20160810'
    compile group: 'javax.mail', name: 'mail', version: '1.4.7'
    compile group: 'org.bouncycastle', name: 'bcprov-jdk15on', version: '1.54'
    compile group: 'org.bouncycastle', name: 'bcpkix-jdk15on', version: '1.54'
    compile 'commons-codec:commons-codec:1.10'
    testCompile group: 'junit', name: 'junit', version: '4.11'

//调用
 String url1 = "https://mail.koal.com";
 String url2 = "https://mail.koal.com/userMail!queryMailList.do?currentFolder.folderId=10";
 //如果不想在操作COOKIE，就这么写
// url1为登录
// url2为拉取列表
//两次请求共用一个cookie
Getmail.ssl(url1, url2);
//两次请求用一个 cookieStore
// Getmail.ssl1(url1);
// Getmail.ssl2(url2);

import org.apache.http.HttpEntity;
import org.apache.http.ParseException;
import org.apache.http.client.methods.CloseableHttpResponse;
import org.apache.http.client.methods.HttpGet;
import org.apache.http.conn.ssl.SSLConnectionSocketFactory;
import org.apache.http.conn.ssl.TrustSelfSignedStrategy;
import org.apache.http.impl.client.BasicCookieStore;
import org.apache.http.impl.client.CloseableHttpClient;
import org.apache.http.impl.client.HttpClients;
import org.apache.http.ssl.SSLContexts;
import org.apache.http.util.EntityUtils;
import org.json.JSONException;
import week4a.Certool.PfxHelper;
import week4a.utils.StringUtil;

import javax.net.ssl.SSLContext;
import java.io.FileInputStream;
import java.io.IOException;
import java.security.*;
import java.security.cert.CertificateException;

/**
 * Created by Administrator on 2017/3/22.
 */
public class Getmail {

    /**
     * 进行一次SSL操作，两次请求，共享一个Cookie
     * 进行两次SSL操作，一次次SSL，共享一个Cookie
     * 列出SSl
     * @param url1 第一个Url操作
     * @param url2 第二个Url操作
     * @return
     * @throws UnrecoverableKeyException
     * @throws CertificateException
     * @throws IOException
     * @throws KeyStoreException
     * @throws NoSuchAlgorithmException
     * @throws KeyManagementException
     */
    public static String ssl(String url1, String url2) throws UnrecoverableKeyException, CertificateException, IOException, KeyStoreException, NoSuchAlgorithmException, KeyManagementException {
        CloseableHttpClient httpclient = null;

        KeyStore trustStore = KeyStore.getInstance(KeyStore.getDefaultType());
        //需要证书二
        //需要证书密码    123456
        //CLIENT_CERT_PATH="E://证书/刘xx2.pfx";
        KeyStore clientStore = PfxHelper.getKeyStore(StringUtil.CLIENT_CERT_PATH, StringUtil.CLIENT_KEY_STORE_PASSWORD);
        // TKCLIENT_PATH= "D:/tkclient.jks";
        //  ------> 载入服务器端的keyStore TKCLIENT_PATH= "D:/tkclient.jks";
        FileInputStream servlet_instream = new FileInputStream(StringUtil.TKCLIENT_PATH);
        // 加载客户端和服务器的keyStore   D:/kclient.jks
        trustStore.load(servlet_instream, "123456".toCharArray());
        servlet_instream.close();

        // 相信自己的CA和所有自签名的证书
        // 载入服务器端的keyStore TKCLIENT_PATH= "D:/tkclient.jks"; <------
        // 相信自己的CA和所有自签名的证书   一个SSL 流~~~

        SSLContext sslcontext = SSLContexts
                .custom()
                .loadTrustMaterial(trustStore, new TrustSelfSignedStrategy())  //加载本地信任证书   信任自签名策略
                .loadKeyMaterial(clientStore, "123456".toCharArray())          //加载本地证书
                .build();                                                      //构造
        SSLConnectionSocketFactory sslsf = new SSLConnectionSocketFactory(sslcontext);  //制造一个socket
        httpclient = HttpClients.custom().setSSLSocketFactory(sslsf).build();           //通过这个socket来生成一个http请求
        // 创建http请求(get方式)  delete put 全都有相应的方法
        //共享一个cookie
        HttpGet httpget = new HttpGet(url1);
        HttpGet httpget2 = new HttpGet(url2);

        //读 第一次请求内容
        System.out.println("executing request" + httpget.getRequestLine());
        CloseableHttpResponse response = httpclient.execute(httpget);
        //读 第二次请求内容
        System.out.println("executing request2" + httpget2.getRequestLine());
        CloseableHttpResponse response2 = httpclient.execute(httpget2);

        //EntityUtils对象是org.apache.http.util下的一个工具类，用官方的解释是为HttpEntity对象提供的静态帮助类
        HttpEntity entity = response2.getEntity();
        System.out.println("----------------------------------------");
        System.out.println(response2.getStatusLine());
        if (entity != null) {
            // System.out.println("Response content length: " + entity.getContentLength());
            String re=EntityUtils.toString(entity, "GBK");
            System.out.println(re);
            EntityUtils.consume(entity);
            return  re;
        }
        response.close();
        response2.close();
        httpclient.close();

        return  null;
    }


    //分两次，共享cookie
    // public static String CookieID = null;
    //两次操作共享一个cookie
    public static BasicCookieStore cookieStore = new BasicCookieStore();

    /**
     * HttpClient连接SSL
     *
     * @throws UnrecoverableKeyException
     * @throws JSONException
     */
    public static void ssl1(String url) throws Exception {
        CloseableHttpClient httpclient = null;

        try {
            KeyStore trustStore = KeyStore.getInstance(KeyStore.getDefaultType());

            //需要证书二
            //需要证书密码    123456
            //CLIENT_CERT_PATH="E://证书/刘xx2.pfx";
            KeyStore clientStore = PfxHelper.getKeyStore(StringUtil.CLIENT_CERT_PATH, StringUtil.CLIENT_KEY_STORE_PASSWORD);
            // TKCLIENT_PATH= "D:/tkclient.jks";
            //  ------> 载入服务器端的keyStore TKCLIENT_PATH= "D:/tkclient.jks";
            FileInputStream servlet_instream = new FileInputStream(StringUtil.TKCLIENT_PATH);
            try {
                // 加载客户端和服务器的keyStore   D:/kclient.jks
                trustStore.load(servlet_instream, "123456".toCharArray());
                servlet_instream.close();
            } catch (CertificateException e) {
                e.printStackTrace();
            }
            // 相信自己的CA和所有自签名的证书
            // 载入服务器端的keyStore TKCLIENT_PATH= "D:/tkclient.jks"; <------
            // 相信自己的CA和所有自签名的证书   一个SSL 流
            SSLContext sslcontext = SSLContexts
                    .custom()
                    .loadTrustMaterial(trustStore, new TrustSelfSignedStrategy())  //加载本地信任证书   信息自签名策略
                    .loadKeyMaterial(clientStore, "123456".toCharArray())          //加载本地证书
                    .build();                                                      //构造
            SSLConnectionSocketFactory sslsf = new SSLConnectionSocketFactory(sslcontext);  //制造一个socket
            httpclient = HttpClients.custom().setDefaultCookieStore(cookieStore).setSSLSocketFactory(sslsf).build();           //通过这个socket来生成一个http请求
            // 创建http请求(get方式)  delete put 全都有相应的方法
            HttpGet httpget = new HttpGet(url);
            // HttpGet httpget2 = new HttpGet("https://mail.koal.com/userMail!queryMailList.do?currentFolder.folderId=10");
            System.out.println("executing request" + httpget.getRequestLine());
            CloseableHttpResponse response = httpclient.execute(httpget);
            response.close();
        } catch (ParseException e) {
            e.printStackTrace();
        } catch (IOException e) {
            e.printStackTrace();
        } catch (KeyManagementException e) {
            e.printStackTrace();
        } catch (NoSuchAlgorithmException e) {
            e.printStackTrace();
        } catch (KeyStoreException e) {
            e.printStackTrace();
        } finally {
            if (httpclient != null) {
                try {
                    httpclient.close();
                } catch (IOException e) {
                    e.printStackTrace();
                }
            }
        }
    }

    public static void ssl2(String url) throws Exception {
        //如上，就是添加一个json解析的过程
        CloseableHttpClient httpclient = null;
        try {
            KeyStore trustStore = KeyStore.getInstance(KeyStore.getDefaultType());
            KeyStore clientStore = PfxHelper.getKeyStore(StringUtil.CLIENT_CERT_PATH, StringUtil.CLIENT_KEY_STORE_PASSWORD);
            FileInputStream servlet_instream = new FileInputStream(StringUtil.TKCLIENT_PATH);
            try {
                // 加载客户端和服务器的keyStore   D:/kclient.jks
                trustStore.load(servlet_instream, "123456".toCharArray());
            } catch (CertificateException e) {
                e.printStackTrace();
            } finally {
                try {
                    servlet_instream.close();
                } catch (Exception ignore) {
                }
            }
            // 相信自己的CA和所有自签名的证书
            SSLContext sslcontext = SSLContexts
                    .custom()
                    .loadTrustMaterial(trustStore, new TrustSelfSignedStrategy())
                    .loadKeyMaterial(clientStore, "123456".toCharArray())
                    .build();
            SSLConnectionSocketFactory sslsf = new SSLConnectionSocketFactory(sslcontext);
            httpclient = HttpClients.custom().setDefaultCookieStore(cookieStore).setSSLSocketFactory(sslsf).build();
            // 创建http请求(get方式)
            HttpGet httpget = new HttpGet(url);

            System.out.println("executing request" + httpget.getRequestLine());
            CloseableHttpResponse response = httpclient.execute(httpget);
            try {
                HttpEntity entity = response.getEntity();
                System.out.println("----------------------------------------");
                System.out.println(response.getStatusLine());
                if (entity != null) {
                    System.out.println("Response content length: " + entity.getContentLength());
                    System.out.println(EntityUtils.toString(entity, "GBK"));
                    EntityUtils.consume(entity);
                }
            } finally {
                response.close();
            }
        } catch (ParseException e) {
            e.printStackTrace();
        } catch (IOException e) {
            e.printStackTrace();
        } catch (KeyManagementException e) {
            e.printStackTrace();
        } catch (NoSuchAlgorithmException e) {
            e.printStackTrace();
        } catch (KeyStoreException e) {
            e.printStackTrace();
        } finally {
            if (httpclient != null) {
                try {
                    httpclient.close();
                } catch (IOException e) {
                    e.printStackTrace();
                }
            }
        }
    }

}

Java http SSL连接(双向认证)及共享Cookie方法

SSL是什么

相关文章

网友评论

延伸阅读

深度阅读

栏目导航

热点阅读