netty通信的tls部分

最新推荐文章于 2025-06-13 05:04:41 发布

jiaxiangwo

最新推荐文章于 2025-06-13 05:04:41 发布

阅读量893

点赞数 1

分类专栏：代码文章标签：通信

代码专栏收录该内容

3 篇文章

订阅专栏

本文介绍了一个用于管理服务器端和客户端SSLContext的Java类。通过初始化密钥库和信任库，该类提供静态方法来获取已配置好的服务器和客户端SSL环境。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

package securechat2;

import io.netty.util.internal.SystemPropertyUtil;

import javax.net.ssl.KeyManagerFactory;

import javax.net.ssl.SSLContext;

import javax.net.ssl.TrustManagerFactory;

import java.io.FileInputStream;

import java.security.KeyStore;

public final class SecureChatSslContextFactory {

    private static final String PROTOCOL = "TLS";

    private static final SSLContext SERVER_CONTEXT;

    private static final SSLContext CLIENT_CONTEXT;

    private static String CLIENT_KEY_STORE = "E:\\javassl2\\sslclientkeys";

    private static String CLIENT_TRUST_KEY_STORE = "E:\\javassl2\\sslclienttrust";

    private static String CLIENT_KEY_STORE_PASSWORD = "123456";

    private static String CLIENT_TRUST_KEY_STORE_PASSWORD = "123456";

    private static String SERVER_KEY_STORE = "E:\\javassl2\\sslserverkeys";

    private static String SERVER_TRUST_KEY_STORE = "E:\\javassl2\\sslservertrust";

    private static String SERVER_KEY_STORE_PASSWORD = "123456";

    private static String SERVER_TRUST_KEY_STORE_PASSWORD = "123456";

    static {

        String algorithm = SystemPropertyUtil.get("ssl.KeyManagerFactory.algorithm");

        if (algorithm == null) {

            algorithm = "SunX509";

        }

        SSLContext serverContext;

        SSLContext clientContext;

        try {

            KeyStore ks = KeyStore.getInstance("JKS");

            ks.load(new FileInputStream(SERVER_KEY_STORE), SERVER_KEY_STORE_PASSWORD.toCharArray());

            KeyStore tks = KeyStore.getInstance("JKS");

            tks.load(new FileInputStream(SERVER_TRUST_KEY_STORE), SERVER_TRUST_KEY_STORE_PASSWORD.toCharArray());

            // Set up key manager factory to use our key store

            KeyManagerFactory kmf = KeyManagerFactory.getInstance(algorithm);

            TrustManagerFactory tmf = TrustManagerFactory.getInstance("SunX509");

            kmf.init(ks, SERVER_KEY_STORE_PASSWORD.toCharArray());

            tmf.init(tks);

            // Initialize the SSLContext to work with our key managers.

            serverContext = SSLContext.getInstance(PROTOCOL);

            serverContext.init(kmf.getKeyManagers(), tmf.getTrustManagers(), null);

        } catch (Exception e) {

            throw new Error("Failed to initialize the server-side SSLContext", e);

        }

        try {

            KeyStore ks2 = KeyStore.getInstance("JKS");

            ks2.load(new FileInputStream(CLIENT_KEY_STORE), CLIENT_KEY_STORE_PASSWORD.toCharArray());

            KeyStore tks2 = KeyStore.getInstance("JKS");

            tks2.load(new FileInputStream(CLIENT_TRUST_KEY_STORE), CLIENT_TRUST_KEY_STORE_PASSWORD.toCharArray());

            // Set up key manager factory to use our key store

            KeyManagerFactory kmf2 = KeyManagerFactory.getInstance(algorithm);

            TrustManagerFactory tmf2 = TrustManagerFactory.getInstance("SunX509");

            kmf2.init(ks2, CLIENT_KEY_STORE_PASSWORD.toCharArray());

            tmf2.init(tks2);

            clientContext = SSLContext.getInstance(PROTOCOL);

            clientContext.init(kmf2.getKeyManagers(), tmf2.getTrustManagers(), null);

        } catch (Exception e) {

            throw new Error("Failed to initialize the client-side SSLContext", e);

        }

        SERVER_CONTEXT = serverContext;

        CLIENT_CONTEXT = clientContext;

    }

    public static SSLContext getServerContext() {

        return SERVER_CONTEXT;

    }

    public static SSLContext getClientContext() {

        return CLIENT_CONTEXT;

    }

    private SecureChatSslContextFactory() {

        // Unused

    }

}