sslclient.java

java实现客户端/服务器的ssl通信。附带证书。

import java.io.*;
import java.net.*;
import java.security.*;

import javax.net.ssl.SSLServerSocketFactory;
import javax.net.ssl.SSLSocketFactory;
import javax.net.ssl.*;

import com.sun.net.ssl.SSLContext;
import com.sun.net.ssl.KeyManager;
import com.sun.net.ssl.KeyManagerFactory;
import com.sun.net.ssl.TrustManager;
import com.sun.net.ssl.TrustManagerFactory;
public class sslclient {

	/**
	 * @param args
	 */
	private static final String HOST="172.16.28.28";
	private static final int PORT=5000;
	//	初始化KeyManagers对象数组;
	private static KeyManager[] getKeyManagers()throws IOException, 
	GeneralSecurityException
	{
		KeyStore ks=null;
		KeyManagerFactory kmf=null;//KeyManager的主要职责就是选择最终会被发送给远程主机的认证凭证；
		KeyManager[] keyManagers=null;
		FileInputStream fis=null;


		try{
			fis=new FileInputStream("clientKeys"); 
			char[] passphrase="passwordc".toCharArray();//serverkeys证书密码；
			ks=KeyStore.getInstance("JKS");
			ks.load(fis, passphrase);//加载serverkeys密码；	
			kmf=KeyManagerFactory.getInstance("SunX509");
			kmf.init(ks,passphrase);
			
			keyManagers=kmf.getKeyManagers();
			fis.close();
			return keyManagers;
		} catch (Exception e) {
			e.printStackTrace();
			return null;
		}
		
	}
	//初始化TrustManager对象数组;
	private static TrustManager[] getTrustManagers()throws IOException, 
	GeneralSecurityException
	{
		
		KeyStore ks=null;
		TrustManagerFactory tmf=null;
		TrustManager[] trustManagers=null;//TrustManager的主要职责就是判断当前的认证凭证是否可信；
		FileInputStream fis=null;
		try{
			fis=new FileInputStream("clientTrust");
			//fis=new FileInputStream("clientKeys");
			char[] passphrase="passwords".toCharArray();//serverkeys证书密码；
			//char[] passphrase="passwordc".toCharArray();//serverkeys证书密码；
			ks=KeyStore.getInstance("JKS");
			ks.load(fis,passphrase);
			tmf=TrustManagerFactory.getInstance("SunX509");
			tmf.init(ks);
			
			trustManagers= tmf.getTrustManagers();
			fis.close();
			return trustManagers;
		} catch (Exception e) {
			e.printStackTrace();
			return null;
		}
		
	}
	public static void main(String[] args) {
		// TODO Auto-generated method stub
		String str=null;
		String sysstr="";
		//String teststr="bye";
		//首先设置上下文环境；
		SSLContext context=null;
		KeyManager[] keyManagers=null;
		TrustManager[] trustManagers=null;

		SSLSocketFactory sf=null;		
		SSLSocket s=null;
		Server_thread thread;
		
		try{		
			keyManagers=getKeyManagers();
			trustManagers=getTrustManagers();
			
			context=SSLContext.getInstance("TLS");
			//keyManagers=keyManagers.getKeyManagers();
			context.init(keyManagers, trustManagers, null);
		
			sf=context.getSocketFactory();
			//得到一个套结字，并创造输入输出流；
			s=(SSLSocket)sf.createSocket(HOST,PORT);
			s.startHandshake();
			//OutputStream out=s.getOutputStream();
			DataOutputStream out=new DataOutputStream(s.getOutputStream());
			DataInputStream  in=new DataInputStream(s.getInputStream());
			out.writeUTF("hello server,My name is client!");
			str=in.readUTF();
			System.out.println("客户端收到的信息为："+str);
			//sysstr=System.in.toString();
			InputStreamReader reader = new InputStreamReader(System.in);
			BufferedReader input = new BufferedReader(reader);
			
			while(sysstr.equals("bye")!=true)
			{
				sysstr=(String)input.readLine();
				out.writeUTF(sysstr);
				str=in.readUTF();
				System.out.println("客户端收到的信息为："+str);
			}	
			
			out.close();
			s.close();
					
		} catch (Exception e) {
			e.printStackTrace();
		}
			

	}

}