https tomat

https相对安全的链接。

1.生成keystore:

命令行中C:\Java\jdk1.5.0_09\bin>

keytool -genkey -alias tomcat -keyalg RSA -validity 365

注：-alias tomcat 设定别名； -validity 365 证书有效期设为365天；

在输入国家之后，会问输入是否正确，键入： "Y" 表示确定。

生成证书过程中，提示设定<tomcat>的密码时，使用和keystore相同的密码。默认回车就可以了

生成的证书默认是放在当前系统用户的主目录下（C:\Documents and Settings\Administrator），复制至Tomcat的主目录以便于下一步中的server.xml的keystoreFile的值设定

将.keystore重命名为tomcat.keystore，并复制到tomato的根目录下

2.编辑tomcat的配置文件server.xml，去掉下面SSL Connector的注释,修改为如下：

<!-- Define an SSL HTTP/1.1 Connector on port 8443 -->

<Connector port="8443" protocol="org.apache.coyote.http11.Http11Protocol" SSLEnabled="true"
maxThreads="150" scheme="https" secure="true"
clientAuth="false" sslProtocol="TLS" 
keystoreFile="tomcat.keystore" keystorePass="mozilla"
/>

这样就开放了8443端口。注意protocol。

这样就ok了。

java代码中，由于我们diy的证书是非法的，所以直接用URL =new URL("https://localhost:8443")；是不可达的。

因此借助httpcomponents-client-4.1.3-bin.zip

String msg="需要发送的消息";

String result = "";
try {
// First create a trust manager that won't care.
X509TrustManager trustManager = new X509TrustManager() {
public void checkClientTrusted(X509Certificate[] chain,
String authType) throws CertificateException {
}
public void checkServerTrusted(X509Certificate[] chain,
String authType) throws CertificateException {
}
public X509Certificate[] getAcceptedIssuers() {
return null;
}
};
// Now put the trust manager into an SSLContext.
SSLContext sslcontext = SSLContext.getInstance("SSL");
sslcontext.init(null, new TrustManager[] { trustManager }, null);
// Use the above SSLContext to create your socket factory
// (I found trying to extend the factory a bit difficult due to a
// call to createSocket with no arguments, a method which doesn't
// exist anywhere I can find, but hey-ho).
SSLSocketFactory sf = new SSLSocketFactory(sslcontext,SSLSocketFactory.ALLOW_ALL_HOSTNAME_VERIFIER);
DefaultHttpClient httpclient = new DefaultHttpClient();
httpclient.getParams().setParameter(CoreConnectionPNames.CONNECTION_TIMEOUT, 1*1000);
httpclient.getConnectionManager().getSchemeRegistry().register(new Scheme("https",443 , sf));
HttpPost httpPost = new HttpPost("https://localhost:8443");
// Execute HTTP request
httpPost.setHeader("Authorization", "basic "+ "dGNsb3VkYWRtaW46dGNsb3VkMTIz");
httpPost.setHeader("Content-type", "application/xml");
httpPost.setEntity(new StringEntity(msg));
HttpResponse response = httpclient.execute(httpPost);
HttpEntity resEntity = response.getEntity();
InputStreamReader reader = new InputStreamReader(resEntity.getContent());
char[] buff = new char[1024];
int length = 0;
while ((length = reader.read(buff)) != -1) {
result += new String(buff, 0, length);
}
httpclient.getConnectionManager().shutdown();
} catch (Exception e) {
e.printStackTrace();
log.error("when send msg throw an exception:"+e);
}

我们还可以为tomcat指定java环境，编辑bin目录中catalina.sh文件在 #!/bin/sh的下一行添加

export JAVA_HOME=/usr/local/java/jdk1.6.0
export JRE_HOME=/usr/local/java/jdk1.6.0/jre