具有给定PKCS12的Netty Websocket客户端示例

Question

我有client.p12文件和MyPassword，我正在尝试使用Netty code available over here建立websocket连接。目前，我在OkHttpClient中有工作示例。但是我很难将其映射为净资产。

我的服务器为我提供了该域以连接到“ https://api.server.com”

在OkHttpClient中，以下代码有效

    OkHttpClient client = getClient(info);
    Request request = new Request.Builder().url("https://api.server.com" + "/messaging").build();
    WebSocket webSocket = client.newWebSocket(request, listener);

以下是getClient代码：

    public static OkHttpClient getClient(ConnectionInfo info) {

      KeyStore appKeyStore = KeyStore.getInstance("PKCS12");
      appKeyStore.load(new FileInputStream("client.p12"), "MyPassword".toCharArray());
      KeyManagerFactory keyManagerFactory = KeyManagerFactory.getInstance("SunX509");
      keyManagerFactory.init(appKeyStore, info.getPassword().toCharArray());

      TrustManagerFactory trustManagerFactory = TrustManagerFactory.getInstance("SunX509");
      trustManagerFactory.init((KeyStore) null);
      TrustManager[] trustManagers = trustManagerFactory.getTrustManagers();

      if (trustManagers.length != 1 || !(trustManagers[0] instanceof X509TrustManager)) {
        throw new IllegalStateException(
              "Unexpected default trust managers:" + Arrays.toString(trustManagers));
      }

      X509TrustManager trustManager = (X509TrustManager) trustManagers[0];

      SSLContext context = SSLContext.getInstance("TLS");
      context.init(null, new TrustManager[] {trustManager}, null);
      context.init(keyManagerFactory.getKeyManagers(), null, new SecureRandom());

      OkHttpClient.Builder builder =
        new OkHttpClient.Builder().sslSocketFactory(context.getSocketFactory(), trustManager);

      builder.retryOnConnectionFailure(true);

      return builder.build();
  }

现在上面的代码可以正常工作，我正在Netty中尝试实现此功能。因此，在示例代码中，它仅接受协议ws和wss。在上述示例中，HTTPS使用适当的标头请求“升级到WebSocket”。因此，我的理解是，如果我将域名提供为“ wss：/////api.server.com/messaging”，则它将首先建立https连接，然后将其升级到WebSocket。

现在我不确定如何设置证书和密码。

    // I have created a keyStore as following
    KeyStore keyStore  = KeyStore.getInstance("PKCS12");
    FileInputStream instream = new FileInputStream(new File("client.p12"));
    try {
      keyStore.load(instream, "MyPassword".toCharArray());
    } finally {
      instream.close();
    }

    final boolean ssl = "wss".equalsIgnoreCase(scheme);
    final SslContext sslCtx;
    if (ssl) {
     // How to specify the above keystore with this client?
      sslCtx = SslContextBuilder.forClient()
        .trustManager(InsecureTrustManagerFactory.INSTANCE).build();
    } else {
      sslCtx = null;
    }

Answer 1

[SSlContextBuilder具有采用KeyManagerFactory的方法：

SslContextBuilder.forClient()
    .keyManager(keyManagerFactory)
    .trustManager(InsecureTrustManagerFactory.INSTANCE)
    .build();