连接到APN时出现SSLHandshake异常

Question

我编写了一个示例Java客户端代码来连接到APNs服务器向我的设备发送推送通知。它在与APNs服务器的安全连接中失败了。有人能帮帮我吗？代码如下：

public class APNSDriver {
    public static void main(String[] args) {
        APNSDriver.sendSamplePushNotification();
    }

    static SSLSocketFactory getSSLSocketFactory() {
        try {
            String keystoreFilename = "D:\\Oracle\\IDCS\\MFA\\APNS\\OMA_prereqs_backup\\iOS_prod.p12";
            char[] storepass = "welcome1".toCharArray();
            FileInputStream fis = new FileInputStream(
                    new File(keystoreFilename));

            final KeyStore ks = KeyStore.getInstance("PKCS12");
            ks.load(fis, storepass);

            KeyManagerFactory keyManagerFactory = KeyManagerFactory
                    .getInstance("SunX509");
            keyManagerFactory.init(ks, storepass);

            TrustManagerFactory trustManagerFactory = TrustManagerFactory
                    .getInstance("SunX509");
            trustManagerFactory.init((KeyStore) null);

            // create ssl context
            SSLContext sslContext = SSLContext.getInstance("TLS");

            // setup the HTTPS context and parameters
            sslContext.init(keyManagerFactory.getKeyManagers(),
                    trustManagerFactory.getTrustManagers(), null);

            if (keyManagerFactory != null || trustManagerFactory != null) {
                return sslContext.getSocketFactory();
            }
        } catch (Exception e) {
            System.out.println("Unable to create ssl socket factory");
            e.printStackTrace();
        }
        return HttpsURLConnection.getDefaultSSLSocketFactory();
    }

    private static void sendSamplePushNotification() {
        URL url = null;
        try {
            HostnameVerifier hv = new HostnameVerifier() {
                public boolean verify(String urlHostName, SSLSession session) {
                    return true;
                }
            };

            url = new URL("https://api.development.push.appl.com:443");
            Proxy proxy = new Proxy(Proxy.Type.HTTP, new InetSocketAddress(
                    "www-proxy.us.oracle.com", 80));
            HttpsURLConnection conn = (HttpsURLConnection) url
                    .openConnection(proxy);
            conn.setRequestMethod("POST");
            conn.setDoOutput(true);
            conn.setHostnameVerifier(hv);
            conn.setSSLSocketFactory(getSSLSocketFactory());
            OutputStream os = conn.getOutputStream();
            ..........
    }
}

它在conn.getoutputstream()行处失败，出现以下错误：javax.net.ssl.sslhandShakeException：sun.security.validator.validatoreXception：在sun.security.ssl.alerts.getsslException（alerts.java.sslsocketimpl.fatal(sslsocketimpl.java:192)，在sun.security.ssl.slsocketimpl.fatalse（handshaker.java:302)，在sun.net.www.protocol.https.abstractDelegateHttpSurlConnection.connect(AbstractDelegateHttpSurlConnection.java:185)在sun.net.www.protocol.http.http.http.httpurlConnection.getoutputStream0(httpurlConnection.java:1282)在sun.net.www.protocol.https.httpsurlConnection.getoutputStream(httpurlConnection.java:1257)在mfa.apnsdriver.apnsdriver.main（apnsdriver.java:28)原因：sun.security.validator.validatoreXception：找不到受信任的证书................

Answer 1

您需要有效的证书才能连接到该URL。您可以尝试使用InstallCert.java应用程序（可以从github（https://github.com/escline/installCert）下载）从服务器获取证书，并将其添加到信任存储中。

1. 下载该类
2. 设置运行配置，添加为程序参数->https://api.development.push.appl.com:443 changeit（Change it是truststore默认的传递）
3. 应用程序创建truststore的副本，并将来自服务器的证书添加到该副本中。
4. 获取生成的名为“jssecacerts”的文件，将其重命名为“cacerts”，并替换Java>JRE>Security>lib文件夹中存在的cacerts文件。

如果您已经有了一个有效的证书，并且不需要从服务器获取它，只需使用KeyStoreExplorer工具，打开Java>JRE>Security>Lib cacerts文件，并添加您的证书。然后重新启动LocalServer。请确保进行此更改的java文件夹是本地服务器正在使用的JVM。