如何在Java中加载SSL证书

Question

我正在创建一个Java程序来从服务器获取信息，但我必须从Java程序与服务器执行ssl握手。

我有myfilercert.cer文件证书用于身份验证，但我不知道如何用java加载该证书，以便java程序可以与我想要从中获取信息的服务器进行“握手”。从哪里开始？

Answer 1

您可以使用Apache HttpClient（或者实际上只使用它所需的类来使用SSLContextBuilder)，然后就会像这样：

        SSLContextBuilder sslContextBuilder = SSLContextBuilder.create();
        sslContextBuilder.loadTrustMaterial(new File("yourTrustStore.jks"), "thePassWord");
        SSLContext sslContext = sslContextBuilder.build();
        HttpsURLConnection httpsURLConnection = (HttpsURLConnection) (new URL("https://thesite.com").openConnection());
        httpsURLConnection.setSSLSocketFactory(sslContext.getSocketFactory());

                KeyStore keyStore = KeyStore.getInstance("BKS",
                                                         BouncyCastleProvider.PROVIDER_NAME);
                byteArrayInputStream = new ByteArrayInputStream(keyStoreBytes);
                keyStore.load(byteArrayInputStream, keyStorePassword);
                Certificate[] certificates = keyStore.getCertificateChain("theCertAlias");
                Certificate certificate = certificates[0];