用java与支持ssl的服务器通信

Question

我有一个关于SSLConnection的问题，在java中，我为客户端编写了下面的代码（这个应用程序必须连接到服务器，我有支持ssl的服务器），但我得到了这样的错误“javax.net.ssl.sslException：Connection Hays Shutdown：javax.net.ssl.sslhandShakeException：sun.security.validator.validatoreXception：PKIX path building failed：sun.security.provider.certPath.SunCertPathBuilderException：

我怎样才能解决我的问题？

  public static void main(String[] args)  {
              BufferedReader in = new BufferedReader(
                 new InputStreamReader(System.in));
              PrintStream out = System.out;
              SSLSocketFactory f = 
                 (SSLSocketFactory) SSLSocketFactory.getDefault();
              try {
                 SSLSocket c =
                   (SSLSocket) f.createSocket("192.168.10.38", 7701);
                   printSocketInfo(c);
                   System.out.println("End printSocketInfo");
                   c.startHandshake();
                   System.out.println("HandShake oK");

                   BufferedWriter w = new BufferedWriter(
                    new OutputStreamWriter(c.getOutputStream()));
                   BufferedReader r = new BufferedReader(
                    new InputStreamReader(c.getInputStream()));
                   String m = null;
                // String m=
                 while ((m=r.readLine())!= null) {
                     System.out.println("11111");
                    out.println(m);
                    m = in.readLine();
                    System.out.println("M is:  "+ m);
                    w.write(m,0,m.length());
                    w.newLine();
                    w.flush();
                 }
                 w.close();
                 r.close();
                 c.close();
              } catch (IOException e) {
                 System.err.println(e.toString());
              }



 }

     private static void printSocketInfo(SSLSocket s) {
          System.out.println("Socket class: "+s.getClass());
          System.out.println("   Remote address = "
             +s.getInetAddress().toString());
          System.out.println("   Remote port = "+s.getPort());
          System.out.println("   Local socket address = "
             +s.getLocalSocketAddress().toString());
          System.out.println("   Local address = "
             +s.getLocalAddress().toString());
          System.out.println("   Local port = "+s.getLocalPort());
          System.out.println("   Need client authentication = "
             +s.getNeedClientAuth());
          SSLSession ss = s.getSession();
          System.out.println("   Cipher suite = "+ss.getCipherSuite());
          System.out.println("   Protocol = "+ss.getProtocol());
       }

我有一个证书文件，如何使用这个证书？

致以最诚挚的问候

Answer 1

您必须将HTTPS证书放入JVM。要从HTTPS获得证书，请通过浏览器，然后单击地址栏上的“锁定”徽标。您应该能够导出证书。

Linux的解决方案：在$java_home/jre/lib/security中，使用以下命令：

sudo keytool -import -alias keyName -file /[pathForYourKey]/keyName.cert -keystore cacerts

“Cacerts”的默认密码是ChangeIt。