FilesExpand file tree

 master

/

TwoWaySSLServerExample.java

Copy path

Blame

More file actions

Blame

More file actions

Latest commit

 

History

History

History

78 lines (65 loc) · 3.06 KB

 master

/

TwoWaySSLServerExample.java

Copy path

Top

File metadata and controls

• Code
• Blame

78 lines (65 loc) · 3.06 KB

Raw

Copy raw file

Download raw file

Open symbols panel

Edit and raw actions

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47

48

49

50

51

52

53

54

55

56

57

58

59

60

61

62

63

64

65

66

67

68

69

70

71

72

73

74

75

76

77

78

/*

* Copyright (c) 2010-2019 Nathan Rajlich

*

* Permission is hereby granted, free of charge, to any person

* obtaining a copy of this software and associated documentation

* files (the "Software"), to deal in the Software without

* restriction, including without limitation the rights to use,

* copy, modify, merge, publish, distribute, sublicense, and/or sell

* copies of the Software, and to permit persons to whom the

* Software is furnished to do so, subject to the following

* conditions:

*

* The above copyright notice and this permission notice shall be

* included in all copies or substantial portions of the Software.

*

* THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,

* EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES

* OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND

* NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT

* HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,

* WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING

* FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR

* OTHER DEALINGS IN THE SOFTWARE.

*/

import org.java_websocket.server.SSLParametersWebSocketServerFactory;

import javax.net.ssl.KeyManagerFactory;

import javax.net.ssl.SSLContext;

import javax.net.ssl.SSLParameters;

import javax.net.ssl.TrustManagerFactory;

import java.io.File;

import java.io.FileInputStream;

import java.security.KeyStore;

/**

* Copy of SSLServerExample except we use @link SSLEngineWebSocketServerFactory to customize clientMode/ClientAuth to force client to present a cert.

* Example of Two-way ssl/MutualAuthentication/ClientAuthentication

*/

public class TwoWaySSLServerExample {

/*

* Keystore with certificate created like so (in JKS format):

*

*keytool -genkey -keyalg RSA -validity 3650 -keystore "keystore.jks" -storepass "storepassword" -keypass "keypassword" -alias "default" -dname "CN=127.0.0.1, OU=MyOrgUnit, O=MyOrg, L=MyCity, S=MyRegion, C=MyCountry"

*/

public static void main( String[] args ) throws Exception {

ChatServer chatserver = new ChatServer( 8887 ); // Firefox does allow multible ssl connection only via port 443 //tested on FF16

// load up the key store

String STORETYPE = "JKS";

String KEYSTORE = "keystore.jks";

String STOREPASSWORD = "storepassword";

String KEYPASSWORD = "keypassword";

KeyStore ks = KeyStore.getInstance( STORETYPE );

File kf = new File( KEYSTORE );

ks.load( new FileInputStream( kf ), STOREPASSWORD.toCharArray() );

KeyManagerFactory kmf = KeyManagerFactory.getInstance( "SunX509" );

kmf.init( ks, KEYPASSWORD.toCharArray() );

TrustManagerFactory tmf = TrustManagerFactory.getInstance( "SunX509" );

tmf.init( ks );

SSLContext sslContext = SSLContext.getInstance( "TLS" );

sslContext.init( kmf.getKeyManagers(), tmf.getTrustManagers(), null );

SSLParameters sslParameters = new SSLParameters();

// This is all we need

sslParameters.setNeedClientAuth(true);

chatserver.setWebSocketFactory( new SSLParametersWebSocketServerFactory(sslContext, sslParameters));

chatserver.start();

}

}