Java Socket实战之五:使用加密协议传输对象

转自：http://developer.51cto.com/art/201202/317547.htm

前面几篇博文提到了Socket中一些常用的用法，但是对于一些有安全要求的应用就需要加密传输的数据，此时就需要用到SSLSocket了。

 1 package com.googlecode.garbagecan.test.socket.ssl;  
 2  
 3 public class User implements java.io.Serializable {  
 4     private static final long serialVersionUID = 1L;  
 5     private String name;  
 6     private String password;  
 7  
 8     public User() {  
 9           
10     }  
11       
12     public User(String name, String password) {  
13         this.name = name;  
14         this.password = password;  
15     }  
16       
17     public String getName() {  
18         return name;  
19     }  
20  
21     public void setName(String name) {  
22         this.name = name;  
23     }  
24  
25     public String getPassword() {  
26         return password;  
27     }  
28  
29     public void setPassword(String password) {  
30         this.password = password;  
31     }  
32       
33 }

SSL Server类，这里需要用到ServerSocketFactory类来创建SSLServerSocket类实例，然后在通过SSLServerSocket来获取SSLSocket实例，这里考虑到面向对象中的面向接口编程的理念，所以代码中并没有出现SSLServerSocket和SSLSocket，而是用了他们的父类ServerSocket和Socket。在获取到ServerSocket和Socket实例以后，剩下的代码就和不使用加密方式一样了。

 1 package com.googlecode.garbagecan.test.socket.ssl;  
 2  
 3 import java.io.BufferedInputStream;  
 4 import java.io.IOException;  
 5 import java.io.ObjectInputStream;  
 6 import java.io.ObjectOutputStream;  
 7 import java.net.ServerSocket;  
 8 import java.net.Socket;  
 9 import java.util.logging.Level;  
10 import java.util.logging.Logger;  
11  
12 import javax.net.ServerSocketFactory;  
13 import javax.net.ssl.SSLServerSocketFactory;  
14  
15 public class MyServer {  
16       
17     private final static Logger logger = Logger.getLogger(MyServer.class.getName());  
18       
19     public static void main(String[] args) {  
20         try {  
21             ServerSocketFactory factory = SSLServerSocketFactory.getDefault();  
22             ServerSocket server = factory.createServerSocket(10000);  
23               
24             while (true) {  
25                 Socket socket = server.accept();  
26                 invoke(socket);  
27             }  
28         } catch (Exception ex) {  
29             ex.printStackTrace();  
30         }  
31     }  
32       
33     private static void invoke(final Socket socket) throws IOException {  
34         new Thread(new Runnable() {  
35             public void run() {  
36                 ObjectInputStream is = null;  
37                 ObjectOutputStream os = null;  
38                 try {  
39                     is = new ObjectInputStream(new BufferedInputStream(socket.getInputStream()));  
40                     os = new ObjectOutputStream(socket.getOutputStream());  
41  
42                     Object obj = is.readObject();  
43                     User user = (User)obj;  
44                     System.out.println("user: " + user.getName() + "/" + user.getPassword());  
45  
46                     user.setName(user.getName() + "_new");  
47                     user.setPassword(user.getPassword() + "_new");  
48  
49                     os.writeObject(user);  
50                     os.flush();  
51                 } catch (IOException ex) {  
52                     logger.log(Level.SEVERE, null, ex);  
53                 } catch(ClassNotFoundException ex) {  
54                     logger.log(Level.SEVERE, null, ex);  
55                 } finally {  
56                     try {  
57                         is.close();  
58                     } catch(Exception ex) {}  
59                     try {  
60                         os.close();  
61                     } catch(Exception ex) {}  
62                     try {  
63                         socket.close();  
64                     } catch(Exception ex) {}  
65                 }  
66             }  
67         }).start();  
68     }  
69 }

SSL Client类和SSL Server类类似，只是将其中获取Socket的方式有所变化，其余的代码也和不使用加密方式一样。

 1 package com.googlecode.garbagecan.test.socket.ssl;  
 2  
 3 import java.io.BufferedInputStream;  
 4 import java.io.IOException;  
 5 import java.io.ObjectInputStream;  
 6 import java.io.ObjectOutputStream;  
 7 import java.net.Socket;  
 8 import java.util.logging.Level;  
 9 import java.util.logging.Logger;  
10  
11 import javax.net.SocketFactory;  
12 import javax.net.ssl.SSLSocketFactory;  
13  
14 public class MyClient {  
15       
16 private final static Logger logger = Logger.getLogger(MyClient.class.getName());  
17  
18     public static void main(String[] args) throws Exception {  
19         for (int i = 0; i < 100; i++) {  
20             Socket socket = null;  
21             ObjectOutputStream os = null;  
22             ObjectInputStream is = null;  
23               
24             try {  
25                 SocketFactory factory = SSLSocketFactory.getDefault();  
26                 socket = factory.createSocket("localhost", 10000);  
27       
28                 os = new ObjectOutputStream(socket.getOutputStream());  
29                 User user = new User("user_" + i, "password_" + i);  
30                 os.writeObject(user);  
31                 os.flush();  
32                   
33                 is = new ObjectInputStream(new BufferedInputStream(socket.getInputStream()));  
34                 Object obj = is.readObject();  
35                 if (obj != null) {  
36                     user = (User)obj;  
37                     System.out.println("user: " + user.getName() + "/" + user.getPassword());  
38                 }  
39             } catch(IOException ex) {  
40                 logger.log(Level.SEVERE, null, ex);  
41             } finally {  
42                 try {  
43                     is.close();  
44                 } catch(Exception ex) {}  
45                 try {  
46                     os.close();  
47                 } catch(Exception ex) {}  
48                 try {  
49                     socket.close();  
50                 } catch(Exception ex) {}  
51             }  
52         }  
53     }  
54 }

代码写完了，下面就需要产生keystore文件了，运行下面的命令

keytool -genkey -alias mysocket -keyalg RSA -keystore mysocket.jks

在提示输入项中，密码项自己给定，其它都不改直接回车，这里我使用的密码是“mysocket”。

运行Server

java -Djavax.net.ssl.keyStore=mysocket.jks -Djavax.net.ssl.keyStorePassword=mysocket com.googlecode.garbagecan.test.socket.ssl.MyServer

运行Client

java -Djavax.net.ssl.trustStore=mysocket.jks -Djavax.net.ssl.trustStorePassword=mysocket com.googlecode.garbagecan.test.socket.ssl.MyClient

前面几篇博文提到了Socket中一些常用的用法，但是对于一些有安全要求的应用就需要加密传输的数据，此时就需要用到SSLSocket了。