Java keytool 从 urlport 添加服务器证书的简单方法

使用Java keytool从url/port添加服务器证书的简单方法

java
import java.io.BufferedInputStream;
import java.io.FileOutputStream;
import java.io.InputStream;
import java.net.URL;
import java.security.cert.Certificate;
import java.security.cert.CertificateFactory;
public class CertificateDownloader {
    public static void main(String[] args) {
        try {
            String urlString = "https://www.example.com"; // 服务器的URL
            URL url = new URL(urlString);
            InputStream inStream = url.openStream();
            BufferedInputStream bis = new BufferedInputStream(inStream);
            CertificateFactory cf = CertificateFactory.getInstance("X.509");
            Certificate cert = cf.generateCertificate(bis);
            String fileName = "server.cer"; // 保存证书的文件名
            FileOutputStream fos = new FileOutputStream(fileName);
            fos.write(cert.getEncoded());
            fos.close();
            System.out.println("证书下载成功！");
        } catch (Exception e) {
            e.printStackTrace();
        }
    }
}

java
import java.io.FileInputStream;
import java.security.KeyStore;
import java.security.cert.Certificate;
public class KeyStoreUpdater {
    public static void main(String[] args) {
        try {
            String keyStorePath = "/path/to/keystore.jks"; // 密钥库的路径
            String keyStorePassword = "password"; // 密钥库的密码
            String certPath = "server.cer"; // 证书的路径
            FileInputStream fis = new FileInputStream(keyStorePath);
            KeyStore keystore = KeyStore.getInstance(KeyStore.getDefaultType());
            keystore.load(fis, keyStorePassword.toCharArray());
            CertificateFactory cf = CertificateFactory.getInstance("X.509");
            FileInputStream certFileInputStream = new FileInputStream(certPath);
            Certificate cert = cf.generateCertificate(certFileInputStream);
            keystore.setCertificateEntry("server", cert);
            FileOutputStream fos = new FileOutputStream(keyStorePath);
            keystore.store(fos, keyStorePassword.toCharArray());
            fos.close();
            System.out.println("证书添加到密钥库成功！");
        } catch (Exception e) {
            e.printStackTrace();
        }
    }
}

java
import java.io.BufferedReader;
import java.io.InputStreamReader;
import java.net.URL;
import javax.net.ssl.HttpsURLConnection;
public class SSLConnection {
    public static void main(String[] args) {
        try {
            String urlString = "https://www.example.com"; // 服务器的URL
            URL url = new URL(urlString);
            HttpsURLConnection conn = (HttpsURLConnection) url.openConnection();
            conn.setSSLSocketFactory(getSSLContext().getSocketFactory());
            BufferedReader br = new BufferedReader(new InputStreamReader(conn.getInputStream()));
            String line;
            while ((line = br.readLine()) != null) {
                System.out.println(line);
            }
            br.close();
        } catch (Exception e) {
            e.printStackTrace();
        }
    }
    private static SSLContext getSSLContext() throws Exception {
        String keyStorePath = "/path/to/keystore.jks"; // 密钥库的路径
        String keyStorePassword = "password"; // 密钥库的密码
        KeyStore keystore = KeyStore.getInstance(KeyStore.getDefaultType());
        FileInputStream fis = new FileInputStream(keyStorePath);
        keystore.load(fis, keyStorePassword.toCharArray());
        TrustManagerFactory tmf = TrustManagerFactory.getInstance(TrustManagerFactory.getDefaultAlgorithm());
        tmf.init(keystore);
        SSLContext context = SSLContext.getInstance("TLS");
        context.init(null, tmf.getTrustManagers(), null);
        return context;
    }
}