com.aliyuncs.utils.HttpsUtils Maven / Gradle / Ivy

Go to download
Show more of this group Show more artifacts with this name
Show all versions of aliyun-java-sdk-core Show documentation
There is a newer version: 4.7.3
package com.aliyuncs.utils;

import java.io.FileInputStream;
import java.io.InputStream;
import java.security.KeyStore;
import java.security.SecureRandom;
import java.security.cert.Certificate;
import java.security.cert.CertificateFactory;
import java.util.Collection;
import java.util.Iterator;

import javax.net.ssl.SSLContext;
import javax.net.ssl.SSLException;
import javax.net.ssl.SSLSocketFactory;
import javax.net.ssl.TrustManager;
import javax.net.ssl.TrustManagerFactory;

/**
 * @author VK.Gao
 * @date 2018/01/04
 */
public class HttpsUtils {

    public static SSLSocketFactory buildJavaSSLSocketFactory(String certPath) throws SSLException {
        String trustCertPath = certPath != null ? certPath : getTrustCertPath();
        String truststoreFile = getTruststoreFile();

        if (trustCertPath == null && truststoreFile == null) {
            return null;
        } else {
            try {
                String secureSocketProtocol = getSecureSocketProtocol();

                SSLContext sc = SSLContext.getInstance(secureSocketProtocol);
                TrustManager[] trustManagers = null;
                if (trustCertPath != null) {
                    trustManagers = buildCertTrustManager(trustCertPath);
                } else if (truststoreFile != null) {
                    trustManagers = buildTrustStoreTrustManager();
                }
                sc.init(null, trustManagers, new SecureRandom());
                return sc.getSocketFactory();
            } catch (Exception e) {
                throw new SSLException("Https buildSSLSocketFactory error ", e);
            }
        }

    }

    private static TrustManager[] buildTrustStoreTrustManager() throws SSLException {
        try {
            String truststoreType = getTruststoreType();
            String truststoreFile = getTruststoreFile();
            String truststorePassword = getTruststorePassword();
            String truststoreAlgorithm = getTruststoreAlgorithm();

            KeyStore keyStore = KeyStore.getInstance(truststoreType);
            keyStore.load(new FileInputStream(truststoreFile), truststorePassword.toCharArray());
            TrustManagerFactory tmf = TrustManagerFactory.getInstance(truststoreAlgorithm);
            tmf.init(keyStore);
            return tmf.getTrustManagers();
        } catch (Exception ex) {
            throw new SSLException(ex);
        }
    }

    private static TrustManager[] buildCertTrustManager(String trustCertPath) throws SSLException {
        TrustManagerFactory selfTmf;
        FileInputStream in = null;

        try {
            String algorithm = TrustManagerFactory.getDefaultAlgorithm();
            selfTmf = TrustManagerFactory.getInstance(algorithm);
            KeyStore trustKeyStore = KeyStore.getInstance("JKS");
            trustKeyStore.load((InputStream)null, (char[])null);
            in = new FileInputStream(trustCertPath);
            CertificateFactory cf = CertificateFactory.getInstance("X.509");
            Collection certs = cf.generateCertificates(in);
            int count = 0;
            Iterator i$ = certs.iterator();

            while (i$.hasNext()) {
                Certificate cert = (Certificate)i$.next();
                trustKeyStore.setCertificateEntry("cert-" + count++, cert);
            }

            selfTmf.init(trustKeyStore);
            TrustManager[] trustManagers = selfTmf.getTrustManagers();
            return trustManagers;
        } catch (Exception ex) {
            throw new SSLException(ex);
        } finally {
            IOUtils.closeQuietly(in);
        }
    }

    private static String getTrustCertPath() {
        return System.getProperty("aliyun.sdk.ssl.trustCertPath");
    }

    private static String getTruststoreFile() {
        return System.getProperty("aliyun.sdk.ssl.truststoreFile");
    }

    private static String getSecureSocketProtocol() {
        return System.getProperty("aliyun.sdk.ssl.secureSocketProtocol", "TLSv1.2");
    }

    private static String getTruststoreType() {
        return System.getProperty("aliyun.sdk.ssl.truststoreType", "JKS");
    }

    private static String getTruststorePassword() {
        return System.getProperty("aliyun.sdk.ssl.truststorePassword", null);
    }

    private static String getTruststoreAlgorithm() {
        return System.getProperty("aliyun.sdk.ssl.truststoreAlgorithm", "SunX509");
    }

}