HttpsURLConnection使用，并实现双向认证

摘要：添加信任所有服务端证书也可在方法中控制信任所有证书使用发送请求默认端口测试客户端证书路径证书密码发送请求导入客户端证书添加信任证书为信任所有证书创建上下文初始化参数为，则不上传客户端证书通常情况都是如此验证系统默认证书导出服务端证书，

添加信任所有服务端证书也可在方法中控制

package something;

import java.security.cert.CertificateException;
import java.security.cert.X509Certificate;

import javax.net.ssl.X509TrustManager;
/**
 * 信任所有证书
 * @author hp
 *
 */
public class AllTrustManager implements X509TrustManager {

    @Override
    public void checkClientTrusted(X509Certificate[] arg0, String arg1) throws CertificateException {
        // TODO Auto-generated method stub

    }

    @Override
    public void checkServerTrusted(X509Certificate[] arg0, String arg1) throws CertificateException {
        // TODO Auto-generated method stub

    }

    @Override
    public X509Certificate[] getAcceptedIssuers() {
        // TODO Auto-generated method stub
        return null;
    }

}

使用HttpsURLConnection发送POST请求（默认443端口）

package something;

import java.io.BufferedReader;
import java.io.File;
import java.io.FileInputStream;
import java.io.IOException;
import java.io.InputStreamReader;
import java.io.PrintWriter;
import java.net.URL;
import java.security.KeyManagementException;
import java.security.KeyStore;
import java.security.KeyStoreException;
import java.security.NoSuchAlgorithmException;
import java.security.SecureRandom;
import java.security.UnrecoverableKeyException;
import java.security.cert.CertificateException;

import javax.net.ssl.HttpsURLConnection;
import javax.net.ssl.KeyManagerFactory;
import javax.net.ssl.SSLContext;
import javax.net.ssl.SSLSocketFactory;
import javax.net.ssl.TrustManager;

public class HttpsRequest {
    //测试url
    private final static String URL_TEST="https://www.baidu.com";
    //客户端证书路径
    private final static String PATH="c://xxxx";
    //证书密码
    private final static String psw="123456";
    /**
     * 发送POST请求
     * @param agrs
     * @return
     * @throws IOException
     * @throws KeyManagementException
     * @throws KeyStoreException
     * @throws NoSuchAlgorithmException
     * @throws CertificateException
     * @throws UnrecoverableKeyException
     */
    public String doPost(String agrs) throws IOException, KeyManagementException, KeyStoreException, NoSuchAlgorithmException, CertificateException, UnrecoverableKeyException{
        //导入客户端证书
        KeyStore ks=KeyStore.getInstance("pkcs12");
        FileInputStream instream = new FileInputStream(new File(PATH));
        ks.load(instream, psw.toCharArray());
        KeyManagerFactory kmf=KeyManagerFactory.getInstance("SunX509");
        kmf.init(ks, psw.toCharArray());
        //添加信任证书
        TrustManager[] tm={new AllTrustManager()};//AllTrustManager()为信任所有证书
        
        SSLContext ctx=SSLContext.getInstance("SSL");//创建ssl上下文
        //初始化 ；参数1为null，则不上传客户端证书（通常情况都是如此）；
        ctx.init(kmf.getKeyManagers(), tm, new SecureRandom());
        //ctx.init(kmf.getKeyManagers(), null, new SecureRandom());//验证系统默认证书
        //ctx.init(kmf.getKeyManagers(), TrustManager[] tm, new SecureRandom());//导出服务端证书，然后按照keymanager一样实现trustmanager
        SSLSocketFactory sf=ctx.getSocketFactory();
        
        URL _url=new URL(URL_TEST);
        HttpsURLConnection conn=(HttpsURLConnection) _url.openConnection();
        conn.setRequestMethod("POST");//设定请求方法
        conn.setConnectTimeout(20000);
        conn.setReadTimeout(20000);
        conn.setDoInput(true);//打开输入流
        conn.setDoOutput(true);//打开输出流写入写出参数必需
        conn.setSSLSocketFactory(sf);//添加ssl参数
        //输出参数
        PrintWriter pw=new PrintWriter(conn.getOutputStream());
        pw.write(agrs);
        pw.flush();
        //获取输入流
        BufferedReader br=new BufferedReader(new InputStreamReader(conn.getInputStream()));
        StringBuffer result=new StringBuffer();
        String s=br.readLine();
        while(s!=null){
            result.append(s);
            s=br.readLine();
        }
        pw.close();
        br.close();
        return result.toString();
    }
}