在 Java 聊天中实现 SSL答案

【问题标题】：Implement SSL in a Java chat在 Java 聊天中实现 SSL
【发布时间】：2017-06-26 05:36:15
【问题描述】：

我在基本的 Java 聊天中实现 SSL 时遇到了巨大的困难。服务端和客户端都可以，但是在实现ssl的时候，总是崩溃，无法继续。

我应该从哪里开始在我的代码旁边进行实施？我在这里展示的代码有一个非常简单的使用 swing 的图形界面。

客户聊天

package clientchat;

import javax.swing.JOptionPane;
import static javax.swing.JOptionPane.*;


public class ClientChat {

public static void main(String[] args) {

    String nome = JOptionPane.showInputDialog(null, "Type your name: ", PLAIN_MESSAGE);

    InterfaceChat chat = new InterfaceChat(name);
    chat.setVisible(true);
}

}

界面客户端

package clientchat;

import java.awt.event.KeyEvent;
import java.io.BufferedReader;
import java.io.IOException;
import java.io.InputStreamReader;
import java.io.PrintStream;
import java.net.*;
import java.util.logging.Level;
import java.util.logging.Logger;
import javax.swing.JOptionPane;
import static javax.swing.JOptionPane.ERROR_MESSAGE;

public class InterfaceChat extends javax.swing.JFrame {

private BufferedReader b;
private InputStreamReader i;
private String nome;
private Socket s;

public InterfaceChat(String nome) {
    this.nome = nome;
    try {
        s = new Socket("127.0.0.1", 5000);
    } catch (Exception e) {
        JOptionPane.showMessageDialog(null, "Não se conectou ao servidor",   "", ERROR_MESSAGE);
        System.exit(0);
    }
    initComponents();

    Thread();
}
private void Thread(){
    Thread t = new Thread(new Runnable() {
    String mensagem;    
        @Override
        public void run() {
            try{
                i = new InputStreamReader(s.getInputStream());
                b = new BufferedReader(i);

                while((mensagem = b.readLine())!= null){
                    mensagemRecebida.setText(mensagemRecebida.getText() +  mensagem + "\n");
                }

            }catch(IOException e){
                JOptionPane.showMessageDialog(null, "Erro na conexão com o servidor","",ERROR_MESSAGE);
            }
        }
    });
    t.start();
}

/**
 * This method is called from within the constructor to initialize the form.
 * WARNING: Do NOT modify this code. The content of this method is always
 * regenerated by the Form Editor.
 */
@SuppressWarnings("unchecked")
// <editor-fold defaultstate="collapsed" desc="Generated Code">                          
private void initComponents() {

    jScrollPane1 = new javax.swing.JScrollPane();
    mensagemRecebida = new javax.swing.JTextArea();
    jScrollPane2 = new javax.swing.JScrollPane();
    enviarMensagem = new javax.swing.JTextArea();
    jButton1 = new javax.swing.JButton();
    jButton2 = new javax.swing.JButton();

    setDefaultCloseOperation(javax.swing.WindowConstants.DO_NOTHING_ON_CLOSE);

    mensagemRecebida.setColumns(20);
    mensagemRecebida.setRows(5);
    jScrollPane1.setViewportView(mensagemRecebida);

    enviarMensagem.setColumns(20);
    enviarMensagem.setRows(5);
    enviarMensagem.addKeyListener(new java.awt.event.KeyAdapter() {
        public void keyPressed(java.awt.event.KeyEvent evt) {
            enviarMensagemKeyPressed(evt);
        }
    });
    jScrollPane2.setViewportView(enviarMensagem);

    jButton1.setText("Enviar");
    jButton1.addActionListener(new java.awt.event.ActionListener() {
        public void actionPerformed(java.awt.event.ActionEvent evt) {
            jButton1ActionPerformed(evt);
        }
    });

    jButton2.setText("Sair");
    jButton2.addActionListener(new java.awt.event.ActionListener() {
        public void actionPerformed(java.awt.event.ActionEvent evt) {
            jButton2ActionPerformed(evt);
        }
    });

    javax.swing.GroupLayout layout = new javax.swing.GroupLayout(getContentPane());
    getContentPane().setLayout(layout);
    layout.setHorizontalGroup(
        layout.createParallelGroup(javax.swing.GroupLayout.Alignment.LEADING)
        .addGroup(layout.createSequentialGroup()
            .addContainerGap()
            .addGroup(layout.createParallelGroup(javax.swing.GroupLayout.Alignment.LEADING)
                .addComponent(jScrollPane1)
                .addGroup(layout.createSequentialGroup()
                    .addComponent(jScrollPane2, javax.swing.GroupLayout.PREFERRED_SIZE, 312, javax.swing.GroupLayout.PREFERRED_SIZE)
                    .addPreferredGap(javax.swing.LayoutStyle.ComponentPlacement.RELATED)
                    .addGroup(layout.createParallelGroup(javax.swing.GroupLayout.Alignment.LEADING)
                        .addComponent(jButton1, javax.swing.GroupLayout.DEFAULT_SIZE, 99, Short.MAX_VALUE)
                        .addComponent(jButton2, javax.swing.GroupLayout.DEFAULT_SIZE, javax.swing.GroupLayout.DEFAULT_SIZE, Short.MAX_VALUE))))
            .addContainerGap())
    );
    layout.setVerticalGroup(
        layout.createParallelGroup(javax.swing.GroupLayout.Alignment.LEADING)
        .addGroup(layout.createSequentialGroup()
            .addContainerGap(javax.swing.GroupLayout.DEFAULT_SIZE, Short.MAX_VALUE)
            .addComponent(jScrollPane1, javax.swing.GroupLayout.PREFERRED_SIZE, 252, javax.swing.GroupLayout.PREFERRED_SIZE)
            .addPreferredGap(javax.swing.LayoutStyle.ComponentPlacement.RELATED)
            .addGroup(layout.createParallelGroup(javax.swing.GroupLayout.Alignment.LEADING, false)
                .addGroup(layout.createSequentialGroup()
                    .addComponent(jButton1, javax.swing.GroupLayout.PREFERRED_SIZE, 40, javax.swing.GroupLayout.PREFERRED_SIZE)
                    .addPreferredGap(javax.swing.LayoutStyle.ComponentPlacement.RELATED)
                    .addComponent(jButton2))
                .addComponent(jScrollPane2, javax.swing.GroupLayout.PREFERRED_SIZE, 0, Short.MAX_VALUE)))
    );

    pack();
}// </editor-fold>                        

private void jButton1ActionPerformed(java.awt.event.ActionEvent evt) {                                         

    String mensagem = nome + ": ";

    try {
        PrintStream ps = new PrintStream(s.getOutputStream());
        mensagem += enviarMensagem.getText();

        ps.println(mensagem);
        ps.flush();
        enviarMensagem.setText("");
    } catch (IOException e) {
        JOptionPane.showMessageDialog(null, "Não conseguiu enviar a mensagem", "", ERROR_MESSAGE);
    }
}                                        

private void enviarMensagemKeyPressed(java.awt.event.KeyEvent evt) {                                          
    if (evt.getKeyCode() == KeyEvent.VK_ENTER) {
        String mensagem = nome + ": ";

        try {
            PrintStream ps = new PrintStream(s.getOutputStream());
            mensagem += enviarMensagem.getText();

            ps.println(mensagem);
            ps.flush();
            enviarMensagem.setText("");
        } catch (IOException e) {
            JOptionPane.showMessageDialog(null, "Não conseguiu enviar a mensagem", "", ERROR_MESSAGE);
        }
    }
}                                         

private void jButton2ActionPerformed(java.awt.event.ActionEvent evt) {                                         
    try{
        s.close();
        System.exit(0);
    }
    catch(IOException e){
        e.printStackTrace();
    }
}                                        

// Variables declaration - do not modify                     
private javax.swing.JTextArea enviarMensagem;
private javax.swing.JButton jButton1;
private javax.swing.JButton jButton2;
private javax.swing.JScrollPane jScrollPane1;
private javax.swing.JScrollPane jScrollPane2;
private javax.swing.JTextArea mensagemRecebida;
// End of variables declaration                   
}

服务器

import java.io.IOException;
import java.io.PrintStream;
import java.net.*;
import java.util.ArrayList;
import javax.net.ssl.SSLServerSocket;
import javax.net.ssl.SSLServerSocketFactory;
import javax.net.ssl.SSLSocket;

public class ServidorChat {

public static void main(String[] args) {
    ArrayList<PrintStream> clientes = new ArrayList<>(); 
    try{
        SSLServerSocketFactory factory = (SSLServerSocketFactory) SSLServerSocketFactory.getDefault();
        SSLServerSocket server = (SSLServerSocket) factory.createServerSocket(5000);

        while(true){
            SSLSocket sslsocket = (SSLSocket) server.accept();

            //guarda o endereço dos clientes
            clientes.add(new PrintStream(sslsocket.getOutputStream()));
            Mensagem mensagem = new Mensagem(sslsocket, clientes);
        }


    }
    catch(IOException e){
        e.printStackTrace();
    }
}}

消息服务器

public class Mensagem {

private SSLSocket s;
private ArrayList<PrintStream> clientes;

public Mensagem(SSLSocket s, ArrayList<PrintStream> clientes) {
    this.s = s;
    this.clientes = clientes;
    Thread();
}

private void Thread() {
    Thread t = new Thread(new Runnable() {

        @Override
        public void run() {
            String mensagem = "";
            try {
                InputStreamReader i = new InputStreamReader(s.getInputStream());
                BufferedReader b = new BufferedReader(i);

                while ((mensagem = b.readLine()) != null) {
                    enviarMensagem(mensagem);
                }

            } catch (Exception e) {
                e.printStackTrace();
            }
        }
    });
    t.start();

}

private void enviarMensagem(String mensagem) {
    for (int i = 0; i < clientes.size(); i++) {
        clientes.get(i).println(mensagem);
        clientes.get(i).flush();

服务器错误

javax.net.ssl.SSLException: Unrecognized SSL message, plaintext connection?
at sun.security.ssl.InputRecord.handleUnknownRecord(InputRecord.java:710)
at sun.security.ssl.InputRecord.read(InputRecord.java:527)
at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:973)
at   sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1375)
at sun.security.ssl.SSLSocketImpl.readDataRecord(SSLSocketImpl.java:928)
at sun.security.ssl.AppInputStream.read(AppInputStream.java:105)
at sun.nio.cs.StreamDecoder.readBytes(StreamDecoder.java:284)
at sun.nio.cs.StreamDecoder.implRead(StreamDecoder.java:326)
at sun.nio.cs.StreamDecoder.read(StreamDecoder.java:178)
at java.io.InputStreamReader.read(InputStreamReader.java:184)
at java.io.BufferedReader.fill(BufferedReader.java:161)
at java.io.BufferedReader.readLine(BufferedReader.java:324)
at java.io.BufferedReader.readLine(BufferedReader.java:389)
at servidorchat.Mensagem$1.run(Mensagem.java:31)
at java.lang.Thread.run(Thread.java:745)

【问题讨论】：

“它总是崩溃”不是一个有用的问题描述，请提供更多细节。
当从一个客户端向另一个客户端发送消息时，发送的消息只被加密，无法读取。

标签： java multithreading sockets ssl

【解决方案1】：

为此，您必须使用 SSLContext。查看我在下面的一个应用程序中实现的示例代码。客户端上下文意味着您成为客户端并调用一些后端。服务器上下文意味着您接受客户端请求。

public class SSLUtil {
    private static String KEY_STORE_TYPE = "JKS";
    private static String TRUST_STORE_TYPE = "JKS";
    private static String KEY_MANAGER_TYPE = "SunX509";
    private static String TRUST_MANAGER_TYPE = "SunX509";
    private static String PROTOCOL = "TLS";

    private static SSLContext serverSSLCtx = null;
    private static SSLContext clientSSLCtx = null;

    public static SSLContext createServerSSLContext(final String keyStoreLocation,
                                                    final String keyStorePwd)
                                                                             throws KeyStoreException,
                                                                             NoSuchAlgorithmException,
                                                                             CertificateException,
                                                                             FileNotFoundException,
                                                                             IOException,
                                                                             UnrecoverableKeyException,
                                                                             KeyManagementException {
        if (serverSSLCtx == null) {
            KeyStore keyStore = KeyStore.getInstance(KEY_STORE_TYPE);
            keyStore.load(new FileInputStream(keyStoreLocation), keyStorePwd.toCharArray());
            KeyManagerFactory keyManagerFactory = KeyManagerFactory.getInstance(KEY_MANAGER_TYPE);
            keyManagerFactory.init(keyStore, keyStorePwd.toCharArray());
            serverSSLCtx = SSLContext.getInstance(PROTOCOL);
            serverSSLCtx.init(keyManagerFactory.getKeyManagers(), null, null);
        }

        return serverSSLCtx;
    }

    public static SSLContext createClientSSLContext(final String trustStoreLocation,
                                                    final String trustStorePwd)
                                                                               throws KeyStoreException,
                                                                               NoSuchAlgorithmException,
                                                                               CertificateException,
                                                                               FileNotFoundException,
                                                                               IOException,
                                                                               KeyManagementException {
        if (clientSSLCtx == null) {
            KeyStore trustStore = KeyStore.getInstance(TRUST_STORE_TYPE);
            trustStore.load(new FileInputStream(trustStoreLocation), trustStorePwd.toCharArray());
            TrustManagerFactory trustManagerFactory =
                                                      TrustManagerFactory.getInstance(TRUST_MANAGER_TYPE);
            trustManagerFactory.init(trustStore);
            clientSSLCtx = SSLContext.getInstance(PROTOCOL);
            clientSSLCtx.init(null, trustManagerFactory.getTrustManagers(), null);
        }

        return clientSSLCtx;

    }

}

希望这会有所帮助。快乐编码！

【讨论】：

您确实不“有为此目的使用SSLContext。”你不需要这些。您可以通过系统属性javax.net.ssl.keyStore/keyStoreType/keyStorePassword/trustStore/trustStoreType 完成完全相同的操作。使用这样的代码的唯一原因是如果你想安装不同的KeyManagers 或TrustManagers。

【解决方案2】：

s = new Socket("127.0.0.1", 5000);

正如错误消息中所说，您创建了一个纯文本连接。你需要

s = SSLSocketFactory.getInstance().createSocket("127.0.0.1", 5000);

如果您的服务器证书受到客户端信任，那么一切都应该正常工作。

【讨论】：