Java Socket實戰之五:使用加密協議傳輸對象

轉自：http://developer.51cto.com/art/201202/317547.htm

前面幾篇博文提到了Socket中一些經常使用的用法，可是對於一些有安全要求的應用就須要加密傳輸的數據，此時就須要用到SSLSocket了。

 1 package com.googlecode.garbagecan.test.socket.ssl;  2  
 3 public class User implements java.io.Serializable {  4     private static final long serialVersionUID = 1L;  5     private String name;  6     private String password;  7  
 8     public User() {  9           
10  } 11       
12     public User(String name, String password) { 13         this.name = name; 14         this.password = password; 15  } 16       
17     public String getName() { 18         return name; 19  } 20  
21     public void setName(String name) { 22         this.name = name; 23  } 24  
25     public String getPassword() { 26         return password; 27  } 28  
29     public void setPassword(String password) { 30         this.password = password; 31  } 32       
33 }

SSL Server類，這裏須要用到ServerSocketFactory類來建立SSLServerSocket類實例，而後在經過SSLServerSocket來獲取SSLSocket實例，這裏考慮到面向對象中的面向接口編程的理念，因此代碼中並無出現SSLServerSocket和SSLSocket，而是用了他們的父類ServerSocket和Socket。在獲取到ServerSocket和Socket實例之後，剩下的代碼就和不使用加密方式同樣了。

 1 package com.googlecode.garbagecan.test.socket.ssl;  2  
 3 import java.io.BufferedInputStream;  4 import java.io.IOException;  5 import java.io.ObjectInputStream;  6 import java.io.ObjectOutputStream;  7 import java.net.ServerSocket;  8 import java.net.Socket;  9 import java.util.logging.Level; 10 import java.util.logging.Logger; 11  
12 import javax.net.ServerSocketFactory; 13 import javax.net.ssl.SSLServerSocketFactory; 14  
15 public class MyServer { 16       
17     private final static Logger logger = Logger.getLogger(MyServer.class.getName()); 18       
19     public static void main(String[] args) { 20         try { 21             ServerSocketFactory factory = SSLServerSocketFactory.getDefault(); 22             ServerSocket server = factory.createServerSocket(10000); 23               
24             while (true) { 25                 Socket socket = server.accept(); 26  invoke(socket); 27  } 28         } catch (Exception ex) { 29  ex.printStackTrace(); 30  } 31  } 32       
33     private static void invoke(final Socket socket) throws IOException { 34         new Thread(new Runnable() { 35             public void run() { 36                 ObjectInputStream is = null; 37                 ObjectOutputStream os = null; 38                 try { 39                     is = new ObjectInputStream(new BufferedInputStream(socket.getInputStream())); 40                     os = new ObjectOutputStream(socket.getOutputStream()); 41  
42                     Object obj = is.readObject(); 43                     User user = (User)obj; 44                     System.out.println("user: " + user.getName() + "/" + user.getPassword()); 45  
46                     user.setName(user.getName() + "_new"); 47                     user.setPassword(user.getPassword() + "_new"); 48  
49  os.writeObject(user); 50  os.flush(); 51                 } catch (IOException ex) { 52                     logger.log(Level.SEVERE, null, ex); 53                 } catch(ClassNotFoundException ex) { 54                     logger.log(Level.SEVERE, null, ex); 55                 } finally { 56                     try { 57  is.close(); 58                     } catch(Exception ex) {} 59                     try { 60  os.close(); 61                     } catch(Exception ex) {} 62                     try { 63  socket.close(); 64                     } catch(Exception ex) {} 65  } 66  } 67  }).start(); 68  } 69 }

SSL Client類和SSL Server類相似，只是將其中獲取Socket的方式有所變化，其他的代碼也和不使用加密方式同樣。

 1 package com.googlecode.garbagecan.test.socket.ssl;  2  
 3 import java.io.BufferedInputStream;  4 import java.io.IOException;  5 import java.io.ObjectInputStream;  6 import java.io.ObjectOutputStream;  7 import java.net.Socket;  8 import java.util.logging.Level;  9 import java.util.logging.Logger; 10  
11 import javax.net.SocketFactory; 12 import javax.net.ssl.SSLSocketFactory; 13  
14 public class MyClient { 15       
16 private final static Logger logger = Logger.getLogger(MyClient.class.getName()); 17  
18     public static void main(String[] args) throws Exception { 19         for (int i = 0; i < 100; i++) { 20             Socket socket = null; 21             ObjectOutputStream os = null; 22             ObjectInputStream is = null; 23               
24             try { 25                 SocketFactory factory = SSLSocketFactory.getDefault(); 26                 socket = factory.createSocket("localhost", 10000); 27       
28                 os = new ObjectOutputStream(socket.getOutputStream()); 29                 User user = new User("user_" + i, "password_" + i); 30  os.writeObject(user); 31  os.flush(); 32                   
33                 is = new ObjectInputStream(new BufferedInputStream(socket.getInputStream())); 34                 Object obj = is.readObject(); 35                 if (obj != null) { 36                     user = (User)obj; 37                     System.out.println("user: " + user.getName() + "/" + user.getPassword()); 38  } 39             } catch(IOException ex) { 40                 logger.log(Level.SEVERE, null, ex); 41             } finally { 42                 try { 43  is.close(); 44                 } catch(Exception ex) {} 45                 try { 46  os.close(); 47                 } catch(Exception ex) {} 48                 try { 49  socket.close(); 50                 } catch(Exception ex) {} 51  } 52  } 53  } 54 }

代碼寫完了，下面就須要產生keystore文件了，運行下面的命令

1. keytool -genkey -alias mysocket -keyalg RSA -keystore mysocket.jks 

在提示輸入項中，密碼項本身給定，其它都不改直接回車，這裏我使用的密碼是「mysocket」。

運行Server

1. java -Djavax.net.ssl.keyStore=mysocket.jks -Djavax.net.ssl.keyStorePassword=mysocket com.googlecode.garbagecan.test.socket.ssl.MyServer 

運行Client

1. java -Djavax.net.ssl.trustStore=mysocket.jks  -Djavax.net.ssl.trustStorePassword=mysocket com.googlecode.garbagecan.test.socket.ssl.MyClient 

前面幾篇博文提到了Socket中一些經常使用的用法，可是對於一些有安全要求的應用就須要加密傳輸的數據，此時就須要用到SSLSocket了。