add java https url example
Jacob Barthelmeh
parent
360a7da821
commit
a8b06a52ae
|
|
@ -0,0 +1,6 @@
|
|||
These are created from the example client/server certificates. These certificates are only for example purposes and are self-signed
|
||||
|
||||
Creating the keystores can be done by using the script update-jks.sh located at wolfssljni/examples/provider from the wolfssljni repository.
|
||||
|
||||
An example of calling the script would be ~/Documents/wolfssljni/examples/provider/update-jks.sh ~/Documents/wolfssl/certs
|
||||
|
||||
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
|
|
@ -0,0 +1,8 @@
|
|||
Example HTTPS URL use with wolfJSSE
|
||||
|
||||
Example of Building
|
||||
javac -cp ~/Documents/wolfssljni/lib/wolfssl-jsse.jar URLClient.java
|
||||
|
||||
Example of Running
|
||||
|
||||
java -Djava.library.path=/Users/<username>/Documents/wolfssljni/lib/ -classpath ~/Documents/wolfssljni/lib/wolfssl-jsse.jar:./ URLClient -h https://www.google.com -A ../example-keystores/external.jks:"wolfSSL test"
|
||||
|
|
@ -0,0 +1,307 @@
|
|||
/* URLClient.java
|
||||
*
|
||||
* Copyright (C) 2006-2020 wolfSSL Inc.
|
||||
*
|
||||
* This file is part of wolfSSL.
|
||||
*
|
||||
* wolfSSL is free software; you can redistribute it and/or modify
|
||||
* it under the terms of the GNU General Public License as published by
|
||||
* the Free Software Foundation; either version 2 of the License, or
|
||||
* (at your option) any later version.
|
||||
*
|
||||
* wolfSSL is distributed in the hope that it will be useful,
|
||||
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
||||
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
||||
* GNU General Public License for more details.
|
||||
*
|
||||
* You should have received a copy of the GNU General Public License
|
||||
* along with this program; if not, write to the Free Software
|
||||
* Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA
|
||||
*/
|
||||
|
||||
import java.io.FileInputStream;
|
||||
import java.io.IOException;
|
||||
import java.io.InputStream;
|
||||
import java.io.OutputStream;
|
||||
import java.net.HttpURLConnection;
|
||||
import java.net.InetSocketAddress;
|
||||
import java.net.MalformedURLException;
|
||||
import java.net.ServerSocket;
|
||||
import java.net.Socket;
|
||||
import java.security.KeyManagementException;
|
||||
import java.security.KeyStore;
|
||||
import java.security.KeyStoreException;
|
||||
import java.security.NoSuchAlgorithmException;
|
||||
import javax.net.ssl.SSLContext;
|
||||
import javax.net.ssl.SSLEngine;
|
||||
import javax.net.ssl.SSLPeerUnverifiedException;
|
||||
import javax.net.ssl.SSLSession;
|
||||
import javax.net.ssl.SSLSocket;
|
||||
import javax.net.ssl.SSLSocketFactory;
|
||||
|
||||
import java.security.Provider;
|
||||
import java.security.UnrecoverableKeyException;
|
||||
import java.security.cert.CertificateException;
|
||||
import java.util.logging.Level;
|
||||
import java.util.logging.Logger;
|
||||
import javax.net.ServerSocketFactory;
|
||||
import javax.net.SocketFactory;
|
||||
import javax.net.ssl.KeyManagerFactory;
|
||||
import javax.net.ssl.TrustManagerFactory;
|
||||
|
||||
import com.wolfssl.provider.jsse.WolfSSLDebug;
|
||||
import com.wolfssl.provider.jsse.WolfSSLProvider;
|
||||
import com.wolfssl.WolfSSL;
|
||||
|
||||
import java.security.PrivateKey;
|
||||
import java.security.Security;
|
||||
import javax.net.ssl.KeyManager;
|
||||
import javax.net.ssl.X509KeyManager;
|
||||
import java.security.cert.X509Certificate;
|
||||
import java.security.cert.Certificate;
|
||||
|
||||
import javax.net.ssl.HttpsURLConnection;
|
||||
import javax.net.ssl.HostnameVerifier;
|
||||
import java.net.URL;
|
||||
|
||||
public class URLClient {
|
||||
public URLClient() {
|
||||
}
|
||||
|
||||
public void run(String[] args) throws Exception {
|
||||
int ret = 0, input;
|
||||
byte[] back = new byte[80];
|
||||
String msg = "Too legit to quit";
|
||||
String provider = "wolfJSSE";
|
||||
|
||||
KeyStore pKey, cert;
|
||||
TrustManagerFactory tm = null;
|
||||
KeyManagerFactory km = null;
|
||||
ServerSocketFactory srv;
|
||||
SSLContext ctx;
|
||||
SSLSocketFactory sf;
|
||||
|
||||
/* config info */
|
||||
String version;
|
||||
String cipherList = null; /* default ciphersuite list */
|
||||
int sslVersion = 3; /* default to TLS 1.2 */
|
||||
boolean useEnvVar = false; /* load cert/key from enviornment variable */
|
||||
boolean listSuites = false; /* list all supported cipher suites */
|
||||
boolean listEnabledProtocols = false; /* show enabled protocols */
|
||||
boolean putEnabledProtocols = false; /* set enabled protocols */
|
||||
|
||||
/* cert info */
|
||||
String clientJKS = "../example-keystores/client.jks";
|
||||
String caJKS = "../example-keystores/client.jks";
|
||||
String clientPswd = "wolfSSL test";
|
||||
String caPswd = "wolfSSL test";
|
||||
|
||||
/* server (peer) info */
|
||||
String host = "localhost";
|
||||
int port = 11111;
|
||||
|
||||
/* set/get enabled protocols */
|
||||
String[] protocols = null;
|
||||
|
||||
/* pull in command line options from user */
|
||||
for (int i = 0; i < args.length; i++)
|
||||
{
|
||||
String arg = args[i];
|
||||
|
||||
if (arg.equals("-?")) {
|
||||
printUsage();
|
||||
|
||||
} else if (arg.equals("-h")) {
|
||||
if (args.length < i+2)
|
||||
printUsage();
|
||||
host = args[++i];
|
||||
|
||||
} else if (arg.equals("-p")) {
|
||||
if (args.length < i+2)
|
||||
printUsage();
|
||||
port = Integer.parseInt(args[++i]);
|
||||
|
||||
} else if (arg.equals("-v")) {
|
||||
if (args.length < i+2)
|
||||
printUsage();
|
||||
if (args[i+1].equals("d")) {
|
||||
i++;
|
||||
sslVersion = -1;
|
||||
}
|
||||
else {
|
||||
sslVersion = Integer.parseInt(args[++i]);
|
||||
if (sslVersion < 0 || sslVersion > 4) {
|
||||
printUsage();
|
||||
}
|
||||
}
|
||||
|
||||
} else if (arg.equals("-l")) {
|
||||
if (args.length < i+2)
|
||||
printUsage();
|
||||
cipherList = args[++i];
|
||||
|
||||
} else if (arg.equals("-c")) {
|
||||
if (args.length < i+2) {
|
||||
printUsage();
|
||||
}
|
||||
String[] tmp = args[++i].split(":");
|
||||
if (tmp.length != 2) {
|
||||
printUsage();
|
||||
}
|
||||
clientJKS = tmp[0];
|
||||
clientPswd = tmp[1];
|
||||
|
||||
} else if (arg.equals("-A")) {
|
||||
if (args.length < i+2)
|
||||
printUsage();
|
||||
String[] tmp = args[++i].split(":");
|
||||
if (tmp.length != 2) {
|
||||
printUsage();
|
||||
}
|
||||
caJKS = tmp[0];
|
||||
caPswd = tmp[1];
|
||||
|
||||
} else if (arg.equals("-e")) {
|
||||
listSuites = true;
|
||||
|
||||
} else if (arg.equals("-env")) {
|
||||
useEnvVar = true;
|
||||
|
||||
} else if (arg.equals("-getp")) {
|
||||
listEnabledProtocols = true;
|
||||
|
||||
} else if (arg.equals("-setp")) {
|
||||
putEnabledProtocols = true;
|
||||
protocols = args[++i].split(" ");
|
||||
sslVersion = -1;
|
||||
|
||||
} else {
|
||||
printUsage();
|
||||
}
|
||||
}
|
||||
|
||||
switch (sslVersion) {
|
||||
case -1: version = "TLS"; break;
|
||||
case 0: version = "SSLv3"; break;
|
||||
case 1: version = "TLSv1"; break;
|
||||
case 2: version = "TLSv1.1"; break;
|
||||
case 3: version = "TLSv1.2"; break;
|
||||
case 4: version = "TLSv1.3"; break;
|
||||
default:
|
||||
printUsage();
|
||||
return;
|
||||
}
|
||||
|
||||
/* trust manager (certificates) */
|
||||
cert = KeyStore.getInstance("JKS");
|
||||
cert.load(new FileInputStream(caJKS), caPswd.toCharArray());
|
||||
tm = TrustManagerFactory.getInstance("SunX509", provider);
|
||||
tm.init(cert);
|
||||
|
||||
/* load private key */
|
||||
pKey = KeyStore.getInstance("JKS");
|
||||
pKey.load(new FileInputStream(clientJKS), clientPswd.toCharArray());
|
||||
km = KeyManagerFactory.getInstance("SunX509", provider);
|
||||
km.init(pKey, clientPswd.toCharArray());
|
||||
|
||||
/* setup context with certificate and private key */
|
||||
ctx = SSLContext.getInstance(version, provider);
|
||||
ctx.init(km.getKeyManagers(), tm.getTrustManagers(), null);
|
||||
|
||||
if (listSuites) {
|
||||
String[] suites = ctx.getDefaultSSLParameters().getCipherSuites();
|
||||
for (String x : suites) {
|
||||
System.out.println("\t" + x);
|
||||
}
|
||||
return;
|
||||
}
|
||||
|
||||
/* set system properties for protocol and cipher suite list */
|
||||
if (cipherList != null) {
|
||||
System.setProperty("https.cipherSuites", cipherList);
|
||||
}
|
||||
System.setProperty("https.protocols", version);
|
||||
|
||||
System.out.println("Creating socket factory using provider " + ctx.getProvider());
|
||||
sf = ctx.getSocketFactory();
|
||||
/* print enabled protocols if requested */
|
||||
if (listEnabledProtocols) {
|
||||
SSLSocket sk = (SSLSocket)sf.createSocket();
|
||||
String[] prtolists = sk.getEnabledProtocols();
|
||||
for (String str : prtolists) {
|
||||
System.out.println("\t" + str);
|
||||
}
|
||||
return;
|
||||
}
|
||||
|
||||
URL url;
|
||||
HttpsURLConnection con;
|
||||
|
||||
/* HTTPS connection */
|
||||
try {
|
||||
url = new URL(host);
|
||||
con = (HttpsURLConnection)url.openConnection();
|
||||
con.setSSLSocketFactory(sf);
|
||||
con.setRequestMethod("GET");
|
||||
ret = con.getResponseCode();
|
||||
if (ret == HttpURLConnection.HTTP_OK) {
|
||||
showPeer(con);
|
||||
|
||||
System.out.println("\nReturn from GET =\n" + con.getResponseMessage());
|
||||
}
|
||||
else {
|
||||
System.out.println("Unable to connect to " + host + " GET response was " + ret);
|
||||
}
|
||||
} catch (MalformedURLException e) {
|
||||
System.out.println("Error creating URL");
|
||||
e.printStackTrace();
|
||||
} catch (IOException e) {
|
||||
System.out.println("Error opening connection to " + host);
|
||||
e.printStackTrace();
|
||||
}
|
||||
|
||||
}
|
||||
|
||||
|
||||
private void showPeer(HttpsURLConnection con) throws SSLPeerUnverifiedException {
|
||||
System.out.println("Connected to URL " + con.getURL());
|
||||
System.out.println("Using cipher suite " + con.getCipherSuite());
|
||||
System.out.println("Last modified " + con.getIfModifiedSince());
|
||||
Certificate[] certs = con.getServerCertificates();
|
||||
System.out.println("Peer certificate : " + certs[0].toString());
|
||||
|
||||
System.out.println("Peer principal name : " + con.getPeerPrincipal().getName());
|
||||
}
|
||||
|
||||
public static void main(String[] args) {
|
||||
WolfSSL.loadLibrary();
|
||||
Security.addProvider(new WolfSSLProvider());
|
||||
|
||||
URLClient client = new URLClient();
|
||||
try {
|
||||
client.run(args);
|
||||
} catch (Exception ex) {
|
||||
ex.printStackTrace();
|
||||
}
|
||||
}
|
||||
|
||||
private void printUsage() {
|
||||
System.out.println("Java wolfJSSE example client usage:");
|
||||
System.out.println("-?\t\tHelp, print this usage");
|
||||
System.out.println("-h <host>\tHost to connect to, default 127.0.0.1");
|
||||
System.out.println("-p <num>\tPort to connect to, default 11111");
|
||||
System.out.println("-v <num>\tSSL version [0-4], SSLv3(0) - " +
|
||||
"TLS1.3(4)), default 3 : use 'd' for downgrade");
|
||||
System.out.println("-l <str>\tComma seperated cipher list");
|
||||
System.out.println("-e\t\tGet all supported cipher suites");
|
||||
System.out.println("-getp\t\tGet enabled protocols");
|
||||
System.out.println("-setp <protocols> \tSet enabled protocols " +
|
||||
"e.g \"TLSv1.1 TLSv1.2\"");
|
||||
System.out.println("-c <file>:<password>\tCertificate/key JKS,\t\tdefault " +
|
||||
"../provider/rsa.jks:wolfSSL test");
|
||||
System.out.println("-A <file>:<password>\tCertificate/key CA JKS file,\tdefault " +
|
||||
"../provider/cacerts.jks:wolfSSL test");
|
||||
System.exit(1);
|
||||
}
|
||||
}
|
||||
|
||||
Loading…
Reference in New Issue