package examples.ssl;
import java.io.BufferedInputStream;
import java.io.BufferedOutputStream;
import java.io.FileInputStream;
import java.io.IOException;
import java.io.InputStream;
import java.io.OutputStream;
import java.security.KeyStore;
import javax.net.ssl.KeyManagerFactory;
import javax.net.ssl.SSLContext;
import javax.net.ssl.SSLSocket;
import javax.net.ssl.TrustManagerFactory;
/**
 * SSL Client
 *
 */
public class SSLClient {
 private static final String DEFAULT_HOST     = "127.0.0.1";
 private static final int DEFAULT_PORT     = 7777;
 private static final String CLIENT_KEY_STORE_PASSWORD  = "123456";
 private static final String CLIENT_TRUST_KEY_STORE_PASSWORD = "123456";
 private SSLSocket   sslSocket;
 /**
  * 啟動(dòng)客戶(hù)端程序
  *
  * @param args
  */
 public static void main(String[] args) {
  SSLClient client = new SSLClient();
  client.init();
  client.process();
 }
 /**
  * 通過(guò)ssl socket與服務(wù)端進(jìn)行連接,并且發(fā)送一個(gè)消息
  */
 public void process() {
  if (sslSocket == null) {
   System.out.println("ERROR");
   return;
  }
  try {
   InputStream input = sslSocket.getInputStream();
   OutputStream output = sslSocket.getOutputStream();
   BufferedInputStream bis = new BufferedInputStream(input);
   BufferedOutputStream bos = new BufferedOutputStream(output);
   bos.write("Client Message".getBytes());
   bos.flush();
   byte[] buffer = new byte[20];
   bis.read(buffer);
   System.out.println(new String(buffer));
   sslSocket.close();
  } catch (IOException e) {
   System.out.println(e);
  }
 }
 /**
  * <ul>
  * <li>ssl連接的重點(diǎn):</li>
  * <li>初始化SSLSocket</li>
  * <li>導(dǎo)入客戶(hù)端私鑰KeyStore，導(dǎo)入客戶(hù)端受信任的KeyStore(服務(wù)端的證書(shū))</li>
  * </ul>
  */
 public void init() {
  try {
   SSLContext ctx = SSLContext.getInstance("SSL");
   KeyManagerFactory kmf = KeyManagerFactory.getInstance("SunX509");
   TrustManagerFactory tmf = TrustManagerFactory.getInstance("SunX509");
   KeyStore ks = KeyStore.getInstance("JKS");
   KeyStore tks = KeyStore.getInstance("JKS");
   ks.load(new FileInputStream("E://kclient.keystore"), CLIENT_KEY_STORE_PASSWORD.toCharArray());
   tks.load(new FileInputStream("E://tclient.keystore"), CLIENT_TRUST_KEY_STORE_PASSWORD.toCharArray());
   kmf.init(ks, CLIENT_KEY_STORE_PASSWORD.toCharArray());
   tmf.init(tks);
   ctx.init(kmf.getKeyManagers(), tmf.getTrustManagers(), null);
   sslSocket = (SSLSocket) ctx.getSocketFactory().createSocket(DEFAULT_HOST, DEFAULT_PORT);
  } catch (Exception e) {
   System.out.println(e);
  }
 }
}

package examples.ssl;
import java.io.BufferedInputStream;
import java.io.BufferedOutputStream;
import java.io.FileInputStream;
import java.io.InputStream;
import java.io.OutputStream;
import java.net.Socket;
import java.security.KeyStore;
import javax.net.ssl.KeyManagerFactory;
import javax.net.ssl.SSLContext;
import javax.net.ssl.SSLServerSocket;
import javax.net.ssl.TrustManagerFactory;
/***********************************************************************************************************************
 * <ul>
 * <li>1)生成服務(wù)端私鑰</li>
 * <li>keytool -genkey -alias serverkey -keystore kserver.keystore</li>
 * <li>2)根據(jù)私鑰,到處服務(wù)端證書(shū)</li>
 * <li>keytool -exoport -alias serverkey -keystore kserver.keystore -file server.crt</li>
 * <li>3)把證書(shū)加入到客戶(hù)端受信任的keystore中</li>
 * <li>keytool -import -alias serverkey -file server.crt -keystore tclient.keystore</li>
 * </ul>
 **********************************************************************************************************************/
/**
 * SSL Server
 *
 */
public class SSLServer {
 private static final int DEFAULT_PORT     = 7777;
 private static final String SERVER_KEY_STORE_PASSWORD  = "123456";
 private static final String SERVER_TRUST_KEY_STORE_PASSWORD = "123456";
 private SSLServerSocket  serverSocket;
 /**
  * 啟動(dòng)程序
  *
  * @param args
  */
 public static void main(String[] args) {
  SSLServer server = new SSLServer();
  server.init();
  server.start();
 }
 /**
  * <ul>
  * <li>聽(tīng)SSL Server Socket</li>
  * <li> 由于該程序不是演示Socket監(jiān)聽(tīng)，所以簡(jiǎn)單采用單線程形式，并且僅僅接受客戶(hù)端的消息，并且返回客戶(hù)端指定消息</li>
  * </ul>
  */
 public void start() {
  if (serverSocket == null) {
   System.out.println("ERROR");
   return;
  }
  while (true) {
   try {
    Socket s = serverSocket.accept();
    InputStream input = s.getInputStream();
    OutputStream output = s.getOutputStream();
    BufferedInputStream bis = new BufferedInputStream(input);
    BufferedOutputStream bos = new BufferedOutputStream(output);
    byte[] buffer = new byte[20];
    bis.read(buffer);
    System.out.println(new String(buffer));
    bos.write("Server Echo".getBytes());
    bos.flush();
    s.close();
   } catch (Exception e) {
    System.out.println(e);
   }
  }
 }
 /**
  * <ul>
  * <li>ssl連接的重點(diǎn):</li>
  * <li>初始化SSLServerSocket</li>
  * <li>導(dǎo)入服務(wù)端私鑰KeyStore，導(dǎo)入服務(wù)端受信任的KeyStore(客戶(hù)端的證書(shū))</li>
  * </ul>
  */
 public void init() {
  try {
   SSLContext ctx = SSLContext.getInstance("SSL");
   KeyManagerFactory kmf = KeyManagerFactory.getInstance("SunX509");
   TrustManagerFactory tmf = TrustManagerFactory.getInstance("SunX509");
   KeyStore ks = KeyStore.getInstance("JKS");
   KeyStore tks = KeyStore.getInstance("JKS");
   ks.load(new FileInputStream("E://kserver.keystore"), SERVER_KEY_STORE_PASSWORD.toCharArray());
   tks.load(new FileInputStream("E://tserver.keystore"), SERVER_TRUST_KEY_STORE_PASSWORD.toCharArray());
   kmf.init(ks, SERVER_KEY_STORE_PASSWORD.toCharArray());
   tmf.init(tks);
   ctx.init(kmf.getKeyManagers(), tmf.getTrustManagers(), null);
   serverSocket = (SSLServerSocket) ctx.getServerSocketFactory().createServerSocket(DEFAULT_PORT);
   serverSocket.setNeedClientAuth(true);
  } catch (Exception e) {
   e.printStackTrace();
  }
 }
}