Java中的SSL套接字

Question

我想在使用SSL的應用程序中確保通信安全。我正在使用org.apache.commons.ssl和OpenSSL。我已創建的密鑰和CRT這樣的（這些是自現在籤）：

openssl req -new -x509 -nodes -out szrr.crt -keyout szrr.key 
openssl rsa -des3 -in szrr.key -out szrr.key.new 
del szrr.key 
move szrr.key.new szrr.key 

所以我現在已經鍵和證書，我用這樣的方式：

KeyMaterial km = new KeyMaterial(certChain, key, password); 
SSLServer sslServer = new SSLServer(); 
sslServer.setKeyMaterial(km); 
sslServer.addTrustMaterial(TrustMaterial.TRUST_ALL); 
sslServerSocket = (SSLServerSocket) sslServer 
        .createServerSocket(serverPort); 

certChain，關鍵是路徑crt和鍵，密碼只是密碼:)

現在還有什麼我必須做類似的方式來創建SSLClient？

Answer 1

檢查下面的例子：

SSLClient client = new SSLClient(); 
char[] pwd = "secret".toCharArray(); 

client.addTrustMaterial(TrustMaterial.DEFAULT); 
client.addTrustMaterial(new TrustMaterial("/path/to/self-signed.pem")); 
client.addTrustMaterial(new KeyMaterial("/path/to/keystore.jks", pwd)); 

client.setCheckHostname(true); // default is "true" 
client.setCheckExpiry(true); // default is "true" 
client.setCheckCRL(true);  // default is "true" 

// load a client certificate (max: 1 per SSLClient instance). 
client.setKeyMaterial(new KeyMaterial("/path/to/client.pfx", "secret".toCharArray())); 
SSLSocket s = (SSLSocket) client.createSocket("www.mysite.com", 443);