使用HttpClient发送HTTPS请求以及配置Tomcat支持SSL
2016-03-23 12:24
477 查看
这里使用的是HttpComponents-Client-4.1.2
package com.jadyer.util; import java.io.File; import java.io.FileInputStream; import java.io.FileNotFoundException; import java.io.IOException; import java.security.KeyManagementException; import java.security.KeyStore; import java.security.KeyStoreException; import java.security.NoSuchAlgorithmException; import java.security.UnrecoverableKeyException; import java.security.cert.CertificateException; import org.apache.http.HttpEntity; import org.apache.http.HttpResponse; import org.apache.http.ParseException; import org.apache.http.client.ClientProtocolException; import org.apache.http.client.HttpClient; import org.apache.http.client.methods.HttpGet; import org.apache.http.conn.scheme.Scheme; import org.apache.http.conn.ssl.SSLSocketFactory; import org.apache.http.impl.client.DefaultHttpClient; import org.apache.http.util.EntityUtils; /** * 使用HttpClient模拟HTTPS访问 * @see =================================================================================================================================== * @see 【配置Tomcat支持SSL(即让Tomcat下的Web应用处于SSL安全通道中)】 * @see =================================================================================================================================== * @see 1、生成KeyStore * @see 1)运行-->CMD-->"keytool -genkey -alias Jadyer_SSL_20120508 -keyalg RSA -validity 1024 -keystore D:\Jadyer_SSL_20120508.keystore" * @see 参数说明----->-genkey 表示生成密钥 * @see -alias 指定别名,这里是Jadyer_SSL_20120508 * @see -keyalg 指定算法,这里是RSA * @see -validity 指定证书有效期,这里是1024天 * @see -keystore 指定存储位置,这里是D:\\Jadyer_SSL_20120508.keystore * @see 2)CMD输出----->输入keystore密码:hongyu75 * @see 再次输入新密码:hongyu75 * @see 您的名字与姓氏是什么?[Unknown]:127.0.0.1(这里要根据实际情况填写网站域名或者IP,否则会出现证书上的名称无效) * @see 您的组织单位名称是什么?[Unknown]:http://blog.csdn.net/jadyer * @see 您的组织名称是什么?[Unknown]:JavaLover_jadyer * @see 您所在的城市或区域名称是什么?[Unknown]:BJ * @see 您所在的州或省份名称是什么?[Unknown]:BJ_NanTian * @see 该单位的两字母国家代码是什么[Unknown]:CN * @see CN=127.0.0.1, OU=http://blog.csdn.net/jadyer, O=JavaLover_jadyer, L=BJ, ST=BJ_NanTian, C=CN 正确吗?[否]:Y * @see 输入<Jadyer_SSL_20120508>的主密码(如果和 keystore 密码相同,按回车):这里按回车键 * @see (这里的主密码一定要与keystore密码相同,否则启动Tomcat时就会告诉你java.io.IOException: Cannot recover key) * @see 3)接下来就会按照-keystore参数值在指定位置生成指定的KeyStore文件了 * @see =================================================================================================================================== * @see 2、让Tomcat支持SSL * @see 1)将生成的Jadyer_SSL_20120508.keystore拷贝到\\%TOMCAT_HOME%\\conf\\目录中(其它目录也可以) * @see 2)修改\\%TOMCAT_HOME%\\conf\\server.xml文件(大约在85行的位置),新增内容如下 * @see <Connector port="8443" protocol="HTTP/1.1" SSLEnabled="true" * @see maxThreads="150" scheme="https" secure="true" * @see clientAuth="false" sslProtocol="TLS" URIEncoding="UTF-8" * @see keystoreFile="conf/Jadyer_SSL_20120508.keystore" keystorePass="hongyu75"/> * @see 3)这样,我们的Tomcat就支持HTTPS访问了(关于<Connector/>标签中的属性说明,参拜Google大神) * @see =================================================================================================================================== * @see 3、用浏览器访问我们的应用 * @see 1)输入https://127.0.0.1:8443/blog会发现你的应用已经处于SSL安全通道中了 * @see 此时,如果我们在浏览器里访问http://127.0.0.1:8443/blog会发现,竟然能访问 * @see 也就是说,我们虽然启用了HTTPS,但现在还可以绕开HTTPS直接访问HTTP还能,这样HTTPS也就起不到作用了 * @see 2)我们可以配置一下\\%TOMCAT_HOME%\\conf\\web.xml文件,使得HTTP的访问能够重定向到HTTPS的连接 * @see 修改位置大约为web.xml的1224行,即在</welcome-file-list>标签后面加入下面的内容,即可 * @see <security-constraint> * @see <!-- Authorization setting for SSL --> * @see <web-resource-collection> * @see <web-resource-name>SSL_App</web-resource-name> * @see <!-- 指明需要SSL的url --> * @see <url-pattern>/*</url-pattern> * @see <http-method>GET</http-method> * @see <http-method>POST</http-method> * @see </web-resource-collection> * @see <user-data-constraint> * @see <!-- 指明需要SSL --> * @see <transport-guarantee>CONFIDENTIAL</transport-guarantee> * @see </user-data-constraint> * @see </security-constraint> * @see =================================================================================================================================== * @author http://blog.csdn.net/jadyer * @editor Feb 1, 2012 3:02:27 PM */ public class HttpClientUtil { public static void main(String[] args)throws Exception{ //String requestUrl = "http://127.0.0.1:8088/test/web/userac"; String requestUrl = "https://127.0.0.1:8443/test/web/userac"; System.out.println(sendSSLRequest(requestUrl)); } /** * 发送HTTPS请求 * @param requestUrl 请求的地址 * @return 响应内容 */ @SuppressWarnings("finally") public static String sendSSLRequest(String requestUrl){ long responseLength = 0; //响应长度 String responseContent = null; //响应内容 HttpClient httpClient = new DefaultHttpClient(); //创建默认的httpClient实例 try { KeyStore trustStore = KeyStore.getInstance(KeyStore.getDefaultType()); FileInputStream fis = new FileInputStream(new File("F:\\Tool\\IDE\\Jadyer_SSL_20120508.keystore")); try { trustStore.load(fis, "hongyu75".toCharArray()); //加载KeyStore } catch (NoSuchAlgorithmException e) { e.printStackTrace(); } catch (CertificateException e) { e.printStackTrace(); } catch (IOException e) { e.printStackTrace(); } finally { try { fis.close(); } catch (IOException e) { e.printStackTrace(); } } SSLSocketFactory socketFactory = new SSLSocketFactory(trustStore); //创建Socket工厂,将trustStore注入 Scheme sch = new Scheme("https", 8443, socketFactory); //创建Scheme httpClient.getConnectionManager().getSchemeRegistry().register(sch); //注册Scheme HttpGet httpGet = new HttpGet(requestUrl); //创建HttpGet HttpResponse response = httpClient.execute(httpGet); //执行GET请求 HttpEntity entity = response.getEntity(); //获取响应实体 if (null != entity) { responseLength = entity.getContentLength(); responseContent = EntityUtils.toString(entity, "UTF-8"); EntityUtils.consume(entity); //Consume response content } System.out.println("请求地址: " + httpGet.getURI()); System.out.println("响应状态: " + response.getStatusLine()); System.out.println("响应长度: " + responseLength); System.out.println("响应内容: " + responseContent); } catch (KeyManagementException e) { e.printStackTrace(); } catch (UnrecoverableKeyException e) { e.printStackTrace(); } catch (KeyStoreException e) { e.printStackTrace(); } catch (FileNotFoundException e) { e.printStackTrace(); } catch (NoSuchAlgorithmException e) { e.printStackTrace(); } catch (ClientProtocolException e) { e.printStackTrace(); } catch (ParseException e) { e.printStackTrace(); } catch (IOException e) { e.printStackTrace(); } finally { httpClient.getConnectionManager().shutdown(); //关闭连接,释放资源 return responseContent; } } }
相关文章推荐
- HttpClient工具类v1.7
- vmware虚拟机中ubuntu上网问题
- 网络七层协议
- HTTP协议的特点,关于HTTP请求GET和POST的区别
- http://www.cnblogs.com/draem0507/archive/2013/02/01/2889317.html
- windows安装并配置apache https 网站 &发布企业级iOS APP(enterprise)
- TCP和UDP的区别于联系,Scoket连接和HTTP连接的区别
- bzoj 3931 [CQOI2015]网络吞吐量(最短路,最大流)
- Mac OS X EI Captitan 配置 Apache https 网站 & 发布 ios 企业级APP(Enterprise)
- 《第一行代码:Android》读书笔记——第10章 Android网络编程
- Linux Netcat 命令——网络工具中的瑞士军刀
- tcp/ip ---子网寻址
- HTTP消息中header头部信息的讲解
- 关于spring,IOC和AOP的解析原理和举例 http://blog.sina.com.cn/s/blog_624a352c0101fo9j.html
- 深入理解HTTP协议
- 网络基本功(2)之TCP重传
- Linux网络编程 (获取ip地址 gethostbyname)
- mousedos网络批量部署xp
- 移动端高清、多屏适配方案 [来源:http://div.io/topic/1092]
- Linux服务器上监控网络带宽的18个常用命令