httpclient 无信任证书直接使用https含项目demo

说下HTPPS:

 

HTTPS,即安全的超文本传输协议,采用了SSL技术,被普遍使用以保证Web应用系统的安全性。访问Web应用的编程接口大多封装了SSL,使得访问HTTPS和访问HTTP同样简单。可是不少中、小型应用系统或基于局域网、校园网的应用系统所使用的证书并非由权威的认证机构发行或者被其验证,直接使用这些编程接口将不能访问HTTPS。java

说下JSSE:apache

JSSE=SSL+TLS  本文便是使用了jsse轻松访问HTPPS无信任证书请求..编程

Java安全套接扩展 (Java Secure Socket Extension, JSSE)是实现Internet安全通讯的一系列包的集合。它是一个SSL和TLS的纯Java实现,能够透明地提供数据加密、服务器认证、信息完整性等功能,可使咱们像使用普通的套接字同样使用JSSE创建的安全套接字。JSSE是一个开放的标准,不仅是Sun公司才能实现一个JSSE,事实上其余公司有本身实现的JSSE。
在深刻了解JSSE以前,须要了解一个有关Java安全的概念:客户端的TrustStore文件。客户端的TrustStore文件中保存着被客户端所信任的服务器的证书信息。客户端在进行SSL链接时,JSSE将根据这个文件中的证书决定是否信任服务器端的证书。

JSSE中,有一个信任管理器类负责决定是否信任远端的证书,咱们重写X509证书信任管理器后使其信任便可.在这就很少说了,能够到这边下载完整的DEMO.本身看看把.安全

转:http://download.csdn.net/detail/q119909033/7930099服务器

原型:dom

post:socket

package com.zyf.util;

import java.io.IOException;
import java.net.InetAddress;
import java.net.InetSocketAddress;
import java.net.Socket;
import java.net.SocketAddress;
import java.net.UnknownHostException;
import java.security.KeyManagementException;
import java.security.NoSuchAlgorithmException;
import java.security.cert.CertificateException;
import java.security.cert.X509Certificate;

import javax.net.SocketFactory;
import javax.net.ssl.SSLContext;
import javax.net.ssl.TrustManager;
import javax.net.ssl.X509TrustManager;

import org.apache.commons.httpclient.ConnectTimeoutException;
import org.apache.commons.httpclient.params.HttpConnectionParams;
import org.apache.commons.httpclient.protocol.ProtocolSocketFactory;


public class MySSLProtocolSocketFactory implements ProtocolSocketFactory {
	
	private SSLContext sslcontext = null; 
	
	private SSLContext createSSLContext() {   
	      SSLContext sslcontext=null;   
	      try {   
	          sslcontext = SSLContext.getInstance("SSL");   
	          sslcontext.init(null, new TrustManager[]{new TrustAnyTrustManager()}, new java.security.SecureRandom());   
	      } catch (NoSuchAlgorithmException e) {   
	          e.printStackTrace();   
	      } catch (KeyManagementException e) {   
	          e.printStackTrace();   
	      }   
	      return sslcontext;   
	  }   
	   
	  private SSLContext getSSLContext() {   
	      if (this.sslcontext == null) {   
	          this.sslcontext = createSSLContext();   
	      }   
	      return this.sslcontext;   
	  }   
	   
	  public Socket createSocket(Socket socket, String host, int port, boolean autoClose)   
	          throws IOException, UnknownHostException {   
	      return getSSLContext().getSocketFactory().createSocket(   
	              socket,   
	              host,   
	              port,   
	              autoClose   
	          );   
	  }   
	  
	  public Socket createSocket(String host, int port) throws IOException,   
	          UnknownHostException {   
	      return getSSLContext().getSocketFactory().createSocket(   
	              host,   
	              port   
	          );   
	  }   
	   
	   
	  public Socket createSocket(String host, int port, InetAddress clientHost, int clientPort)   
	          throws IOException, UnknownHostException {   
	      return getSSLContext().getSocketFactory().createSocket(host, port, clientHost, clientPort);   
	  }   
	  
	  public Socket createSocket(String host, int port, InetAddress localAddress,   
	          int localPort, HttpConnectionParams params) throws IOException,   
	          UnknownHostException, ConnectTimeoutException {   
	      if (params == null) {   
	          throw new IllegalArgumentException("Parameters may not be null");   
	      }   
	      int timeout = params.getConnectionTimeout();   
	      SocketFactory socketfactory = getSSLContext().getSocketFactory();   
	      if (timeout == 0) {   
	          return socketfactory.createSocket(host, port, localAddress, localPort);   
	      } else {   
	          Socket socket = socketfactory.createSocket();   
	          SocketAddress localaddr = new InetSocketAddress(localAddress, localPort);   
	          SocketAddress remoteaddr = new InetSocketAddress(host, port);   
	          socket.bind(localaddr);   
	          socket.connect(remoteaddr, timeout);   
	          return socket;   
	      }   
	  }   
	   
	  //自定义私有类   
	  private static class TrustAnyTrustManager implements X509TrustManager {   
	      
	      public void checkClientTrusted(X509Certificate[] chain, String authType) throws CertificateException {   
	      }   
	  
	      public void checkServerTrusted(X509Certificate[] chain, String authType) throws CertificateException {   
	      }   
	  
	      public X509Certificate[] getAcceptedIssuers() {   
	          return new X509Certificate[]{};   
	      }   
	  }     

}
相关文章
相关标签/搜索