在Java Socket中實現數據的加密傳輸,可以使用Java的加密擴展(Java Cryptography Extension,JCE)和Java Secure Socket Extension(JSSE)。以下是一個簡單的示例,展示了如何使用SSL/TLS協議在客戶端和服務器之間進行加密通信。
keytool -genkeypair -alias mykeystore -keyalg RSA -keysize 2048 -keystore mykeystore.jks -validity 3650
這將生成一個名為mykeystore.jks
的Java密鑰庫文件。
import javax.net.ssl.*;
import java.io.*;
public class SecureServer {
public static void main(String[] args) throws Exception {
// Load the keystore
KeyStore ks = KeyStore.getInstance("JKS");
ks.load(new FileInputStream("mykeystore.jks"), "password".toCharArray());
// Set up the key manager factory
KeyManagerFactory kmf = KeyManagerFactory.getInstance("SunX509");
kmf.init(ks, "password".toCharArray());
// Set up the trust manager factory
TrustManagerFactory tmf = TrustManagerFactory.getInstance("SunX509");
tmf.init(ks);
// Create the SSL context
SSLContext sslContext = SSLContext.getInstance("TLS");
sslContext.init(kmf.getKeyManagers(), tmf.getTrustManagers(), null);
// Create the SSL server socket
SSLServerSocketFactory sslServerSocketFactory = sslContext.getServerSocketFactory();
SSLServerSocket sslServerSocket = (SSLServerSocket) sslServerSocketFactory.createServerSocket(8080);
// Accept client connections
SSLSocket sslSocket = (SSLSocket) sslServerSocket.accept();
// Read data from the client
InputStream inputStream = sslSocket.getInputStream();
BufferedReader reader = new BufferedReader(new InputStreamReader(inputStream));
String line;
while ((line = reader.readLine()) != null) {
System.out.println("Received: " + line);
}
// Close the connection
sslSocket.close();
sslServerSocket.close();
}
}
import javax.net.ssl.*;
import java.io.*;
public class SecureClient {
public static void main(String[] args) throws Exception {
// Load the keystore
KeyStore ks = KeyStore.getInstance("JKS");
ks.load(new FileInputStream("mykeystore.jks"), "password".toCharArray());
// Set up the key manager factory
KeyManagerFactory kmf = KeyManagerFactory.getInstance("SunX509");
kmf.init(ks, "password".toCharArray());
// Set up the trust manager factory
TrustManagerFactory tmf = TrustManagerFactory.getInstance("SunX509");
tmf.init(ks);
// Create the SSL context
SSLContext sslContext = SSLContext.getInstance("TLS");
sslContext.init(kmf.getKeyManagers(), tmf.getTrustManagers(), null);
// Create the SSL socket
SSLSocketFactory sslSocketFactory = sslContext.getSocketFactory();
SSLSocket sslSocket = (SSLSocket) sslSocketFactory.createSocket("localhost", 8080);
// Send data to the server
OutputStream outputStream = sslSocket.getOutputStream();
PrintWriter writer = new PrintWriter(outputStream, true);
writer.println("Hello, secure server!");
// Close the connection
sslSocket.close();
}
}
現在,當你運行SecureServer和SecureClient時,它們將通過SSL/TLS協議進行加密通信。請注意,這個示例使用了自簽名證書,因此在實際生產環境中,你需要使用由受信任的證書頒發機構(CA)簽發的證書。