Java Code Examples for javax.net.ssl.SSLContext

最新推荐文章于 2025-07-17 14:47:27 发布

原创最新推荐文章于 2025-07-17 14:47:27 发布 · 4.6k 阅读

0 ·

CC 4.0 BY-SA版权

文章标签：

#security #ssl #example #SSLContext #javax.net.ssl.SSLCon

网页学习专栏收录该内容

3 篇文章

订阅专栏

本文精选了30个从开源项目中提取的SSLContext使用案例，覆盖了不同场景下的配置与应用，为开发者提供了丰富的参考资源。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

下面的这些例子是从开源项目中抽取出来的30个SSLContext的例子，收藏一下，供参考：

Code Example 1:
From project JGlobus, under directory /jsse/src/main/java/org/globus/gsi/jsse/.

Source SSLConfigurator.java

public SSLContext getSSLContext() throws GlobusSSLConfigurationException {
	if (sslContext == null) {
		configureContext();
	}
	return this.sslContext;
}

Code Example 2:
From project JGlobus, under directory /jsse/src/main/java/org/globus/gsi/jsse/.
Source SSLConfigurator.java

public SSLServerSocketFactory createServerFactory()
		throws GlobusSSLConfigurationException {
	SSLContext context = getSSLContext();
	return context.getServerSocketFactory();
}

Code Example 3:
From project JGlobus, under directory /jsse/src/main/java/org/globus/gsi/jsse/.
Source SSLConfigurator.java

private SSLContext loadSSLContext() throws GlobusSSLConfigurationException {
	try {
		return provider == null ? SSLContext.getInstance(protocol)
				: SSLContext.getInstance(protocol, provider);
	} catch (NoSuchAlgorithmException e) {
		throw new GlobusSSLConfigurationException(e);
	} catch (NoSuchProviderException e) {
		throw new GlobusSSLConfigurationException(e);
	}
}

Code Example 4:
From project plusyou-server, under directory /src/main/java/com/openplanetideas/plusyou/server/ssl/.
Source PlusYouLayeredSocketFactory.java

public PlusYouLayeredSocketFactory() throws IOException {
    try {
        sslContext = SSLContext.getInstance("TLS");
        sslContext.init(null, new TrustManager[]{new PlusYouX509TrustManager(null)}, null);
    }
    catch (Exception e) {
        throw new IOException(e.getMessage());
    }
}

Code Example 5:
From project aws-sdk-for-android, under directory /src/com/amazonaws/http/.
Source EasySSLSocketFactory.java

private static SSLContext createEasySSLContext() throws IOException {
	try {
		SSLContext context = SSLContext.getInstance("TLS");
		context.init(null, new TrustManager[] { new EasyX509TrustManager(
				null) }, null);
		return context;
	} catch (Exception e) {
		throw new IOException(e.getMessage());
	}
}

Code Example 6:
From project aws-sdk-for-android, under directory /src/com/amazonaws/http/.
Source EasySSLSocketFactory.java

private SSLContext getSSLContext() throws IOException {
	if (this.sslcontext == null) {
		this.sslcontext = createEasySSLContext();
	}
	return this.sslcontext;
}

Code Example 7:
From project java-oss-lib, under directory /src/main/com/trendrr/oss/.
Source SSLContextBuilder.java

public SSLContext toSSLContext() throws Exception {
	try {
		KeyManager km[] = null;
		SSLContext context = SSLContext.getInstance(this.protocol);
		if (this.stream != null) {
		    ks.load(this.stream,
		    		this.keystorePassword.toCharArray());
		    // Set up key manager factory to use our key store
		    KeyManagerFactory kmf = KeyManagerFactory.getInstance(algorithm);
		    kmf.init(ks, this.certificatePassword.toCharArray());
		    km = kmf.getKeyManagers();
		}
		context.init(km, this.getTrustManager(), this.random);
	    return context;
	} catch (Exception e) {
	    throw new Exception(
	            "Failed to initialize the server-side SSLContext", e);
	} finally {
		if (this.stream !=null) {
			try {this.stream.close();} catch (Exception x){}
		}
	}
}

Code Example 8:
From project geocamMobileForAndroid, under directory /android/src/gov/nasa/arc/geocam/geocam/.
Source DisableSSLCertificateCheckUtil.java

public static void disableChecks() throws NoSuchAlgorithmException, KeyManagementException {
    try {
        new URL("https://0.0.0.0/").getContent();
    } catch (IOException e) {
        // This invocation will always fail, but it will register the
        // default SSL provider to the URL class.
    }

    try {
        SSLContext sslc;

        sslc = SSLContext.getInstance("TLS");

        TrustManager[] trustManagerArray = { new NullX509TrustManager() };
        sslc.init(null, trustManagerArray, null);

        HttpsURLConnection.setDefaultSSLSocketFactory(sslc.getSocketFactory());
        HttpsURLConnection.setDefaultHostnameVerifier(new NullHostnameVerifier());

    }
    catch(Exception e) {
        e.printStackTrace();
    }
}

Code Example 9:
From project Ushahidi_Android, under directory /Core/src/com/ushahidi/android/app/net/.

Source EasySSLSocketFactory.java

private static SSLContext createEasySSLContext() throws IOException {
    try {
        SSLContext context = SSLContext.getInstance("TLS");
        context.init(null, new TrustManager[] { new EasyX509TrustManager(null) }, null);
        return context;
    } catch (Exception e) {
        throw new IOException(e.getMessage());
    }
}

Code Example 10:
From project Ushahidi_Android, under directory /Core/src/com/ushahidi/android/app/net/.
Source EasySSLSocketFactory.java

private SSLContext getSSLContext() throws IOException {
    if (this.sslcontext == null) {
        this.sslcontext = createEasySSLContext();
    }
    return this.sslcontext;
}

Code Example 11:
From project Ushahidi_Android, under directory /Core/src/com/ushahidi/android/app/net/.
Source TrustedSocketFactory.java

public TrustedSocketFactory(String host, boolean secure) throws NoSuchAlgorithmException, KeyManagementException {
    SSLContext sslContext = SSLContext.getInstance("TLS");
    sslContext.init(null, new TrustManager[] {
                        TrustManagerFactory.get(host, secure)
                    }, new SecureRandom());
    mSocketFactory = sslContext.getSocketFactory();
    mSchemeSocketFactory = org.apache.http.conn.ssl.SSLSocketFactory.getSocketFactory();
    mSchemeSocketFactory.setHostnameVerifier(
        org.apache.http.conn.ssl.SSLSocketFactory.ALLOW_ALL_HOSTNAME_VERIFIER);
}

Code Example 12:
From project Trello-Android, under directory /src/com/chrishoekstra/trello/service/.
Source TrustAllSSLSocketFactory.java

public TrustAllSSLSocketFactory() throws KeyManagementException,
                NoSuchAlgorithmException, KeyStoreException,
                UnrecoverableKeyException {
        super(null);
        try {
                SSLContext sslcontext = SSLContext.getInstance("TLS");
                sslcontext.init(null, new TrustManager[] { new TrustAllManager() },
                                null);
                factory = sslcontext.getSocketFactory();
                setHostnameVerifier(new AllowAllHostnameVerifier());
        } catch (Exception ex) {
        }
}

Code Example 13:
From project cloudify, under directory /esc/src/main/java/org/cloudifysource/esc/driver/provisioning/azure/client/.
Source MicrosoftAzureRestClient.java

private Client createClient(final SSLContext context) {
	ClientConfig config = new DefaultClientConfig();
	config.getProperties().put(HTTPSProperties.PROPERTY_HTTPS_PROPERTIES,
			new HTTPSProperties(null, context));
	Client client = Client.create(config);
	return client;
}

Code Example 14:
From project cloudify, under directory /esc/src/main/java/org/cloudifysource/esc/driver/provisioning/azure/client/.

Source MicrosoftAzureSSLHelper.java

public SSLContext createSSLContext() throws NoSuchAlgorithmException,
		KeyStoreException, CertificateException, IOException,
		UnrecoverableKeyException, KeyManagementException {

	InputStream pfxFile = null;
	SSLContext context = null;
	try {
		pfxFile = new FileInputStream(new File(pathToPfxFile));
		KeyManagerFactory keyManagerFactory = KeyManagerFactory
				.getInstance(SUN_X_509_ALGORITHM);
		KeyStore keyStore = KeyStore.getInstance(KEY_STORE_CONTEXT);

		keyStore.load(pfxFile, pfxPassword.toCharArray());
		pfxFile.close();

		keyManagerFactory.init(keyStore, pfxPassword.toCharArray());

		context = SSLContext.getInstance("SSL");
		context.init(keyManagerFactory.getKeyManagers(), null,
				new SecureRandom());

		return context;
	} finally {
		if (pfxFile != null) {
			pfxFile.close();
		}
	}
}

Code Example 15:
From project recurly-client-java, under directory /src/com/kwanzoo/recurly/.

Source Base.java

private static SSLContext getSSLContext(){
	SSLContext context = null;

       try {
           context = SSLContext.getInstance("SSL");
           context.init(null, getTrustManager(), null);
       }
       catch (final Exception e) {
       	context = null;
       	e.printStackTrace();
       }
       return context;
}

Code Example 16:
From project ec2-plugin, under directory /src/main/java/hudson/plugins/ec2/.

Source Eucalyptus.java

private void makeIgnoreCertificate(HttpsURLConnection con) throws NoSuchAlgorithmException, KeyManagementException {
    SSLContext sc = SSLContext.getInstance("SSL");
    TrustManager[] tma = {new X509TrustManager() {
        public X509Certificate[] getAcceptedIssuers() {
            return null;
        }

        public void checkClientTrusted(X509Certificate[] certs, String authType) {
        }

        public void checkServerTrusted(X509Certificate[] certs, String authType) {
        }
    }};
    sc.init(null, tma, null);

    con.setSSLSocketFactory(sc.getSocketFactory());
    con.setHostnameVerifier(new HostnameVerifier() {
        public boolean verify(String s, SSLSession sslSession) {
            return true;    // everything goes
        }
    });
}

Code Example 17:
From project hadoop-common, under directory /hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/security/ssl/.

Source SSLFactory.java

public void init() throws GeneralSecurityException, IOException {
  keystoresFactory.init(mode);
  context = SSLContext.getInstance("TLS");
  context.init(keystoresFactory.getKeyManagers(),
               keystoresFactory.getTrustManagers(), null);

  hostnameVerifier = getHostnameVerifier(conf);
}

Code Example 18:
From project alfresco, under directory /root/projects/core/source/java/org/alfresco/encryption/ssl/.

Source AuthSSLProtocolSocketFactory.java

private SSLContext createSSLContext()
{
	KeyManager[] keymanagers = keyStore.createKeyManagers();;
	TrustManager[] trustmanagers = trustStore.createTrustManagers();

	try
	{
		SSLContext sslcontext = SSLContext.getInstance("TLS");
		sslcontext.init(keymanagers, trustmanagers, null);
		return sslcontext;
	}
	catch(Throwable e)
	{
		throw new AlfrescoRuntimeException("Unable to create SSL context", e);
	}
}

Code Example 19:
From project alfresco, under directory /root/projects/core/source/java/org/alfresco/encryption/ssl/.

Source AuthSSLProtocolSocketFactory.java

private SSLContext getSSLContext()
{
	try
	{
		if(this.sslcontext == null)
		{
			this.sslcontext = createSSLContext();
		}
		return this.sslcontext;
	}
	catch(Throwable e)
	{
		throw new AlfrescoRuntimeException("Unable to create SSL context", e);
	}
}

Code Example 20:
From project mogwee-push, under directory /src/main/java/com/mogwee/push/.

Source ApnsSocketFactory.java

private static SSLContext createContext(File keystore, String keystorePassword, String keystoreType) throws GeneralSecurityException, IOException
{
    TrustManagerFactory trustManagerFactory = TrustManagerFactory.getInstance("sunx509");
    KeyStore appleStore = KeyStore.getInstance("JKS");
    InputStream appleStoreInputStream = null;

    try {
        // created by com.mogwee.push.CreateAppleCertificateKeystore (in tests)
        appleStoreInputStream = ApnsSocketFactory.class.getResourceAsStream("/apple.keystore");
        appleStore.load(appleStoreInputStream, "apple".toCharArray());
    }
    finally {
        CloseableUtil.closeQuietly(appleStoreInputStream);
    }

    trustManagerFactory.init(appleStore);

    KeyManagerFactory keyManagerFactory = KeyManagerFactory.getInstance("sunx509");
    SSLContext context = SSLContext.getInstance("TLS");
    char[] password = keystorePassword.toCharArray();
    KeyStore.ProtectionParameter passwordProtection = new KeyStore.PasswordProtection(password);
    KeyStore keyStore = KeyStore.Builder.newInstance(keystoreType, null, keystore, passwordProtection).getKeyStore();

    keyManagerFactory.init(keyStore, password);
    context.init(keyManagerFactory.getKeyManagers(), trustManagerFactory.getTrustManagers(), null);

    return context;
}

Code Example 21:
From project xnio_1, under directory /api/src/test/java/org/xnio/ssl/.

Source JsseXnioSslTestCase.java

public void getSslContext() throws Exception {
    final Xnio xnio = Xnio.getInstance("xnio-mock", JsseXnioSslTestCase.class.getClassLoader());
    final JsseXnioSsl xnioSsl = (JsseXnioSsl) xnio.getSslProvider(OptionMap.EMPTY);
    SSLContext context = xnioSsl.getSslContext();
    assertNotNull(context);
}

Code Example 22:
From project xnio_1, under directory /api/src/main/java/org/xnio/ssl/.

Source JsseXnioSsl.java

public JsseXnioSsl(final Xnio xnio, final OptionMap optionMap, final SSLContext sslContext) {
    super(xnio, sslContext, optionMap);
    // todo - find out better default values
    final int appBufSize = optionMap.get(Options.SSL_APPLICATION_BUFFER_SIZE, 17000);
    final int pktBufSize = optionMap.get(Options.SSL_PACKET_BUFFER_SIZE, 17000);
    final int appBufRegionSize = optionMap.get(Options.SSL_APPLICATION_BUFFER_REGION_SIZE, appBufSize * 16);
    final int pktBufRegionSize = optionMap.get(Options.SSL_PACKET_BUFFER_REGION_SIZE, pktBufSize * 16);
    socketBufferPool = new ByteBufferSlicePool(optionMap.get(Options.USE_DIRECT_BUFFERS, false) ? BufferAllocator.DIRECT_BYTE_BUFFER_ALLOCATOR : BufferAllocator.BYTE_BUFFER_ALLOCATOR, pktBufSize, pktBufRegionSize);
    applicationBufferPool = new ByteBufferSlicePool(BufferAllocator.BYTE_BUFFER_ALLOCATOR, appBufSize, appBufRegionSize);
    this.sslContext = sslContext;
}

Code Example 23:
From project xnio_1, under directory /api/src/main/java/org/xnio/ssl/.

Source JsseSslUtils.java

public static SSLEngine createSSLEngine(SSLContext sslContext, OptionMap optionMap, InetSocketAddress peerAddress) {
    final SSLEngine engine = sslContext.createSSLEngine(
            optionMap.get(Options.SSL_PEER_HOST_NAME, peerAddress.getHostName()),
            optionMap.get(Options.SSL_PEER_PORT, peerAddress.getPort())
    );
    engine.setUseClientMode(true);
    engine.setEnableSessionCreation(optionMap.get(Options.SSL_ENABLE_SESSION_CREATION, true));
    final Sequence<String> cipherSuites = optionMap.get(Options.SSL_ENABLED_CIPHER_SUITES);
    if (cipherSuites != null) {
        final Set<String> supported = new HashSet<String>(Arrays.asList(engine.getSupportedCipherSuites()));
        final List<String> finalList = new ArrayList<String>();
        for (String name : cipherSuites) {
            if (supported.contains(name)) {
                finalList.add(name);
            }
        }
        engine.setEnabledCipherSuites(finalList.toArray(new String[finalList.size()]));
    }
    final Sequence<String> protocols = optionMap.get(Options.SSL_ENABLED_PROTOCOLS);
    if (protocols != null) {
        final Set<String> supported = new HashSet<String>(Arrays.asList(engine.getSupportedProtocols()));
        final List<String> finalList = new ArrayList<String>();
        for (String name : protocols) {
            if (supported.contains(name)) {
                finalList.add(name);
            }
        }
        engine.setEnabledProtocols(finalList.toArray(new String[finalList.size()]));
    }
    return engine;
}

Code Example 24:
From project xnio_1, under directory /api/src/main/java/org/xnio/ssl/.

Source JsseAcceptingSslStreamChannel.java

JsseAcceptingSslStreamChannel(final SSLContext sslContext, final AcceptingChannel<? extends ConnectedStreamChannel> tcpServer, final OptionMap optionMap, final Pool<ByteBuffer> socketBufferPool, final Pool<ByteBuffer> applicationBufferPool, final boolean startTls) {
    this.tcpServer = tcpServer;
    this.sslContext = sslContext;
    this.socketBufferPool = socketBufferPool;
    this.applicationBufferPool = applicationBufferPool;
    this.startTls = startTls;
    clientAuthMode = optionMap.get(Options.SSL_CLIENT_AUTH_MODE);
    useClientMode = optionMap.get(Options.SSL_USE_CLIENT_MODE, false) ? 1 : 0;
    enableSessionCreation = optionMap.get(Options.SSL_ENABLE_SESSION_CREATION, true) ? 1 : 0;
    final Sequence<String> enabledCipherSuites = optionMap.get(Options.SSL_ENABLED_CIPHER_SUITES);
    cipherSuites = enabledCipherSuites != null ? enabledCipherSuites.toArray(new String[enabledCipherSuites.size()]) : null;
    final Sequence<String> enabledProtocols = optionMap.get(Options.SSL_ENABLED_PROTOCOLS);
    protocols = enabledProtocols != null ? enabledProtocols.toArray(new String[enabledProtocols.size()]) : null;
    //noinspection ThisEscapedInObjectConstruction
    closeSetter = ChannelListeners.<AcceptingChannel<ConnectedSslStreamChannel>>getDelegatingSetter(tcpServer.getCloseSetter(), this);
    //noinspection ThisEscapedInObjectConstruction
    acceptSetter = ChannelListeners.<AcceptingChannel<ConnectedSslStreamChannel>>getDelegatingSetter(tcpServer.getAcceptSetter(), this);
}

Code Example 25:
From project trestle-android-client, under directory /com/trestleapp/android/.

Source TrustAllSocketFactory.java

public TrustAllSocketFactory() throws KeyManagementException,
    NoSuchAlgorithmException, KeyStoreException,
    UnrecoverableKeyException {
        super(null);
        try {
            SSLContext sslcontext = SSLContext.getInstance("TLS");
            sslcontext.init(null, new TrustManager[] { new TrustAllManager() },
                null);
            factory = sslcontext.getSocketFactory();
            setHostnameVerifier(new AllowAllHostnameVerifier());
        } 
        catch (Exception ex) {
        }
}

Code Example 26:
From project platform_packages_apps_KeyChain, under directory /tests/src/com/android/keychain/tests/.

Source KeyChainTestActivity.java

private URL startWebServer() throws Exception {
    KeyStore serverKeyStore = mTestKeyStore.keyStore;
    char[] serverKeyStorePassword = mTestKeyStore.storePassword;
    String kmfAlgoritm = KeyManagerFactory.getDefaultAlgorithm();
    KeyManagerFactory kmf = KeyManagerFactory.getInstance(kmfAlgoritm);
    kmf.init(serverKeyStore, serverKeyStorePassword);
    SSLContext serverContext = SSLContext.getInstance("SSL");
    serverContext.init(kmf.getKeyManagers(),
                       new TrustManager[] { new TrustAllTrustManager() },
                       null);
    SSLSocketFactory sf = serverContext.getSocketFactory();
    SSLSocketFactory needClientAuth = TestSSLContext.clientAuth(sf, false, true);
    MockWebServer server = new MockWebServer();
    server.useHttps(needClientAuth, false);
    server.enqueue(new MockResponse().setBody("this response comes via HTTPS"));
    server.play();
    return server.getUrl("/");
}

Code Example 27:
From project platform_packages_apps_KeyChain, under directory /tests/src/com/android/keychain/tests/.

Source KeyChainTestActivity.java

private void makeHttpsRequest(URL url) throws Exception {
    SSLContext clientContext = SSLContext.getInstance("SSL");
    clientContext.init(new KeyManager[] { new KeyChainKeyManager() }, null, null);
    HttpsURLConnection connection = (HttpsURLConnection) url.openConnection();
    connection.setSSLSocketFactory(clientContext.getSocketFactory());
    if (connection.getResponseCode() != 200) {
        throw new AssertionError();
    }
}

Code Example 28:
From project psiandroid, under directory /src/com/phpsysinfo/xml/.

Source PSIDownloadData.java

private static void trustAllHosts() {
	// Create a trust manager that does not validate certificate chains
	TrustManager[] trustAllCerts = new TrustManager[] { new X509TrustManager() {
		public java.security.cert.X509Certificate[] getAcceptedIssuers() {
			return new java.security.cert.X509Certificate[] {};
		}

		public void checkClientTrusted(X509Certificate[] chain,
				String authType) throws CertificateException {
		}

		public void checkServerTrusted(X509Certificate[] chain,
				String authType) throws CertificateException {
		}
	} };

	// Install the all-trusting trust manager
	try {
		SSLContext sc = SSLContext.getInstance("TLS");
		sc.init(null, trustAllCerts, new java.security.SecureRandom());
		HttpsURLConnection
		.setDefaultSSLSocketFactory(sc.getSocketFactory());
	} catch (Exception e) {
		e.printStackTrace();
	}
}

Code Example 29:
From project paho.mqtt.java, under directory /org.eclipse.paho.client.mqttv3/src/org/eclipse/paho/client/mqttv3/internal/security/.

Source SSLSocketFactoryFactory.java

public SSLServerSocketFactory createServerSocketFactory(String configID)
		throws MqttDirectException {
	final String METHOD_NAME = "createServerSocketFactory";
	SSLContext ctx = getSSLContext(configID);
	if (logger != null) {
		// 12018 "SSL initialization: configID = {0}, application-enabled cipher suites = {1}"
		logger.fine(CLASS_NAME, METHOD_NAME, "12018", new Object[]{configID!=null ? configID : "null (broker defaults)", 
				getEnabledCipherSuites(configID)!=null ? getProperty(configID, CIPHERSUITES, null) : "null (using platform-enabled cipher suites)"});
		
		// 12019 "SSL initialization: configID = {0}, client authentication = {1}"
		logger.fine(CLASS_NAME, METHOD_NAME, "12019", new Object[]{configID!=null ? configID : "null (broker defaults)", 
				new Boolean (getClientAuthentication(configID)).toString()});
	}
	
	return ctx.getServerSocketFactory();
}

Code Example 30:
From project paho.mqtt.java, under directory /org.eclipse.paho.client.mqttv3/src/org/eclipse/paho/client/mqttv3/internal/security/.

Source SSLSocketFactoryFactory.java

public SSLSocketFactory createSocketFactory(String configID) 
		throws MqttDirectException {
	final String METHOD_NAME = "createSocketFactory";
	SSLContext ctx = getSSLContext(configID);
	if (logger != null) {
		// 12020 "SSL initialization: configID = {0}, application-enabled cipher suites = {1}"
		logger.fine(CLASS_NAME, METHOD_NAME, "12020", new Object[]{configID!=null ? configID : "null (broker defaults)", 
				getEnabledCipherSuites(configID)!=null ? getProperty(configID, CIPHERSUITES, null) : "null (using platform-enabled cipher suites)"});
	}
		
	return ctx.getSocketFactory();
}