JETTY with SSL

来源：互联网发布：何祚庥知乎编辑：程序博客网时间：2024/06/07 09:44

创建keystore相关资料

基于jetty9 编程构建嵌入式https 服务器

java中Keytool的使用总结

实践代码

封装了个函数, 方便构造出一个Connector

ServerConnector buildSslConnector(Server server, int securePort, String keyStorePath, String keyStorePassword, String keyManagerPassword) {        HttpConfiguration https_config = new HttpConfiguration();        https_config.setSecureScheme("https");        https_config.setSecurePort(securePort);        https_config.addCustomizer(new SecureRequestCustomizer());        SslContextFactory sslContextFactory = new SslContextFactory();        sslContextFactory.setKeyStorePath(keyStorePath);        sslContextFactory.setKeyStorePassword(keyStorePassword);        sslContextFactory.setKeyManagerPassword(keyManagerPassword);        ServerConnector httpsConnector = new ServerConnector(server, new SslConnectionFactory(sslContextFactory, "http/1.1"), new HttpConnectionFactory(https_config));        httpsConnector.setPort(securePort);        return httpsConnector;    }

服务器启动代码

Server httpServer = new Server();        ServerConnector sslConnector = buildSslConnector(httpServer, 端口,                keystore文件,                keystore密码,                证书密码);        httpServer.addConnector(sslConnector);        //加入web app        try {            httpServer.start();            httpServer.join();        } catch (Exception e) {            e.printStackTrace();        }

需要注意的是, 证书的被颁发者要和域名一致, 且手动添加到可信证书中, 否则浏览器不认

0 0