HttpsUrlConnection https双向验证

//发布的httpsUrlConnection的服务：
package com.abin.lee.https;
import java.io.BufferedReader;
import java.io.IOException;
import java.io.InputStreamReader;
import java.io.PrintWriter;
import java.util.Enumeration;
import java.util.Map;
import javax.servlet.ServletException;
import javax.servlet.ServletOutputStream;
import javax.servlet.http.HttpServlet;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
@SuppressWarnings("serial")
public class ReceiveHttpsUrlConnectionRequest extends HttpServlet {
public void service(HttpServletRequest request, HttpServletResponse response)
throws ServletException, IOException {
System.out.println("receive https request");
BufferedReader reader=new BufferedReader(new InputStreamReader(request.getInputStream()));
String line=null;
StringBuffer stb=new StringBuffer();
while((line=reader.readLine())!=null){
stb.append(line);
}
System.out.println("stb="+stb.toString());
PrintWriter write=response.getWriter();
write.write("receive HttpsUrlConnection success");
write.flush();
write.close();
}
}


//web.xml
<servlet>
<servlet-name>httpsUrlConnectionRequest</servlet-name>
<servlet-class>com.abin.lee.https.ReceiveHttpsUrlConnectionRequest</servlet-class>
</servlet>
<servlet-mapping>
<servlet-name>httpsUrlConnectionRequest</servlet-name>
<url-pattern>/httpsUrlConnectionRequest</url-pattern>
</servlet-mapping>


//HttpsUrlConnection测试类
package com.abin.lee.test;
import java.io.BufferedReader;
import java.io.IOException;
import java.io.InputStreamReader;
import java.io.OutputStream;
import java.net.URL;
import java.util.Date;
import javax.net.ssl.HostnameVerifier;
import javax.net.ssl.HttpsURLConnection;
import javax.net.ssl.SSLSession;
import junit.framework.TestCase;
import org.junit.Before;
import org.junit.Test;
public class HttpsUrlConnectionClient extends TestCase {
// 客户端密钥库
private String sslKeyStorePath;
private String sslKeyStorePassword;
private String sslKeyStoreType;
// 客户端信任的证书
private String sslTrustStore;
private String sslTrustStorePassword;
private String httpsUrlConnectionUrl = "https://localhost:8443/global/httpsUrlConnectionRequest";
@Before
public void setUp() {
sslKeyStorePath = "D:\\home\\tomcat.keystore";
sslKeyStorePassword = "stevenjohn";
sslKeyStoreType = "JKS"; // 密钥库类型，有JKS PKCS12等
sslTrustStore = "D:\\home\\tomcat.keystore";
sslTrustStorePassword = "stevenjohn";
System.setProperty("javax.net.ssl.keyStore", sslKeyStorePath);
System.setProperty("javax.net.ssl.keyStorePassword",
sslKeyStorePassword);
System.setProperty("javax.net.ssl.keyStoreType", sslKeyStoreType);
// 设置系统参数
System.setProperty("javax.net.ssl.trustStore", sslTrustStore);
System.setProperty("javax.net.ssl.trustStorePassword",
sslTrustStorePassword);
System.setProperty("java.protocol.handler.pkgs", "sun.net.www.protocol");
}
@Test
public void testHttpsUrlConnectionClient() {
try {
URL url = new URL(httpsUrlConnectionUrl);
HostnameVerifier hv = new HostnameVerifier() {
public boolean verify(String urlHostName, SSLSession session) {
return true;
}
};
HttpsURLConnection.setDefaultHostnameVerifier(hv);
HttpsURLConnection connection = (HttpsURLConnection) url
.openConnection();
connection.setRequestProperty("Content-Type", "text/xml");
connection.setDoOutput(true);
connection.setDoInput(true);
connection.setRequestMethod("POST");
connection.setUseCaches(false);
connection.setReadTimeout(30000);
String user="abin";
String pwd="abing";
String request="user="+user+"&pwd="+pwd;
OutputStream out = connection.getOutputStream();
out.write(request.getBytes());
out.flush();
out.close();

//接收请求的返回值
BufferedReader reader = new BufferedReader(new InputStreamReader(connection.getInputStream()));
StringBuffer stb = new StringBuffer();
String line;
while ((line = reader.readLine()) != null) {
stb.append(line);
}
Integer statusCode = connection.getResponseCode();
System.out.println("返回状态码:" + statusCode);
reader.close();
connection.disconnect();
} catch (IOException e) {
e.printStackTrace();
}

}
}


//tomcat配置文件：
<Connector port="6060" protocol="HTTP/1.1"
connectionTimeout="20000"
redirectPort="8443" />
<Connector port="8443" protocol="org.apache.coyote.http11.Http11NioProtocol"
SSLEnabled="true" maxThreads="150" scheme="https"
secure="true" clientAuth="true" sslProtocol="TLS"
keystoreFile="D:\\home\\tomcat.keystore" keystorePass="stevenjohn"
truststoreFile="D:\\home\\tomcat.keystore" truststorePass="stevenjohn" />