https单双向验证环境的搭建参见：http://www.cnblogs.com/YDDMAX/p/5368404.html

一、单向握手

示例程序：

package com.ydd.study.hello.httpclient;

import java.io.File;

import java.io.IOException;

import java.security.KeyManagementException;

import java.security.KeyStoreException;

import java.security.NoSuchAlgorithmException;

import java.security.cert.CertificateException;

import javax.net.ssl.SSLContext;

import org.apache.http.HttpHost;

import org.apache.http.client.ClientProtocolException;

import org.apache.http.client.HttpClient;

import org.apache.http.client.config.RequestConfig;

import org.apache.http.client.methods.CloseableHttpResponse;

import org.apache.http.client.methods.HttpGet;

import org.apache.http.client.protocol.HttpClientContext;

import org.apache.http.config.Registry;

import org.apache.http.config.RegistryBuilder;

import org.apache.http.conn.routing.HttpRoute;

import org.apache.http.conn.socket.ConnectionSocketFactory;

import org.apache.http.conn.socket.PlainConnectionSocketFactory;

import org.apache.http.conn.ssl.SSLConnectionSocketFactory;

import org.apache.http.conn.ssl.TrustSelfSignedStrategy;

import org.apache.http.impl.client.CloseableHttpClient;

import org.apache.http.impl.client.HttpClients;

import org.apache.http.impl.conn.PoolingHttpClientConnectionManager;

import org.apache.http.ssl.SSLContexts;

import org.apache.http.util.EntityUtils;

public class OneTLSPool {

    public static CloseableHttpClient httpclient;

    // 获得池化得HttpClient

    static {

        // 设置truststore

        SSLContext sslcontext = null;

        try {

            sslcontext = SSLContexts

                    .custom()

                    .loadTrustMaterial(

                            new File("D://https//ca//cl.jks"),

                            "123456".toCharArray(),

                            new TrustSelfSignedStrategy()).build();

        } catch (Exception e) {

            // TODO Auto-generated catch block

            e.printStackTrace();

        }

        // 客户端支持TLSV1，TLSV2,TLSV3这三个版本

        SSLConnectionSocketFactory sslsf = new SSLConnectionSocketFactory(

                sslcontext, new String[] { "TLSv1", "TLSv2", "TLSv3" }, null,

                SSLConnectionSocketFactory.getDefaultHostnameVerifier());// 客户端验证服务器身份的策略

        // Create a registry of custom connection socket factories for supported

        // protocol schemes.

        Registry<ConnectionSocketFactory> socketFactoryRegistry = RegistryBuilder

                .<ConnectionSocketFactory> create()

                .register("http", PlainConnectionSocketFactory.INSTANCE)

                .register("https", new SSLConnectionSocketFactory(sslcontext))

                .build();

        PoolingHttpClientConnectionManager connManager = new PoolingHttpClientConnectionManager(

                socketFactoryRegistry);

        // Configure total max or per route limits for persistent connections

        // that can be kept in the pool or leased by the connection manager.

        connManager.setMaxTotal(100);

        connManager.setDefaultMaxPerRoute(10);

        // 个性化设置某个url的连接

        connManager.setMaxPerRoute(new HttpRoute(new HttpHost("www.y.com",

                80)), 20);

        httpclient = HttpClients.custom().setConnectionManager(connManager)

                .build();

    }

  /**

     * 单向验证且服务端的证书可信

     * @throws IOException

     * @throws ClientProtocolException

     */

    public static void oneWayAuthorizationAccepted() throws ClientProtocolException, IOException {

        // Execution context can be customized locally.

        HttpClientContext context = HttpClientContext.create();

        HttpGet httpget = new HttpGet("https://www.yunzhu.com:8443");

        // 设置请求的配置

        RequestConfig requestConfig = RequestConfig.custom()

                .setSocketTimeout(5000).setConnectTimeout(5000)

                .setConnectionRequestTimeout(5000).build();

        httpget.setConfig(requestConfig);

        System.out.println("executing request " + httpget.getURI());

        CloseableHttpResponse response = httpclient.execute(httpget, context);

        try {

            System.out.println("----------------------------------------");

            System.out.println(response.getStatusLine());

            System.out.println(EntityUtils.toString(response.getEntity()));

            System.out.println("----------------------------------------");

            // Once the request has been executed the local context can

            // be used to examine updated state and various objects affected

            // by the request execution.

            // Last executed request

            context.getRequest();

            // Execution route

            context.getHttpRoute();

            // Target auth state

            context.getTargetAuthState();

            // Proxy auth state

            context.getTargetAuthState();

            // Cookie origin

            context.getCookieOrigin();

            // Cookie spec used

            context.getCookieSpec();

            // User security token

            context.getUserToken();

        } catch (Exception e) {

            e.printStackTrace();

        }

    }

    public static void main(String[] a) throws KeyManagementException,

            NoSuchAlgorithmException, KeyStoreException, CertificateException,

            IOException {

        oneWayAuthorizationAccepted();

    }

}

1、用eclipse运行的时候报NoSuchAlgorithmException的错。将eclipse的JRE删除再重新导入本地的JRE就解决了。应该是缺失一些JDK的jar导致。

executing request https://www.yunzhu.com:8443

Exception in thread "main" javax.net.ssl.SSLKeyException: RSA premaster secret error

    at sun.security.ssl.RSAClientKeyExchange.<init>(Unknown Source)

    at sun.security.ssl.ClientHandshaker.serverHelloDone(Unknown Source)

    at sun.security.ssl.ClientHandshaker.processMessage(Unknown Source)

    at sun.security.ssl.Handshaker.processLoop(Unknown Source)

    at sun.security.ssl.Handshaker.process_record(Unknown Source)

    at sun.security.ssl.SSLSocketImpl.readRecord(Unknown Source)

    at sun.security.ssl.SSLSocketImpl.performInitialHandshake(Unknown Source)

    at sun.security.ssl.SSLSocketImpl.startHandshake(Unknown Source)

    at sun.security.ssl.SSLSocketImpl.startHandshake(Unknown Source)

    at org.apache.http.conn.ssl.SSLConnectionSocketFactory.createLayeredSocket(SSLConnectionSocketFactory.java:394)

    at org.apache.http.conn.ssl.SSLConnectionSocketFactory.connectSocket(SSLConnectionSocketFactory.java:353)

    at org.apache.http.impl.conn.DefaultHttpClientConnectionOperator.connect(DefaultHttpClientConnectionOperator.java:141)

    at org.apache.http.impl.conn.PoolingHttpClientConnectionManager.connect(PoolingHttpClientConnectionManager.java:353)

    at org.apache.http.impl.execchain.MainClientExec.establishRoute(MainClientExec.java:380)

    at org.apache.http.impl.execchain.MainClientExec.execute(MainClientExec.java:236)

    at org.apache.http.impl.execchain.ProtocolExec.execute(ProtocolExec.java:184)

    at org.apache.http.impl.execchain.RetryExec.execute(RetryExec.java:88)

    at org.apache.http.impl.execchain.RedirectExec.execute(RedirectExec.java:110)

    at org.apache.http.impl.client.InternalHttpClient.doExecute(InternalHttpClient.java:184)

    at org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:82)

    at com.ydd.study.hello.httpclient.OneTLSPool.oneWayAuthorizationAccepted(OneTLSPool.java:138)

    at com.ydd.study.hello.httpclient.OneTLSPool.main(OneTLSPool.java:172)

Caused by: java.security.NoSuchAlgorithmException: SunTlsRsaPremasterSecret KeyGenerator not available

    at javax.crypto.KeyGenerator.<init>(KeyGenerator.java:158)

    at javax.crypto.KeyGenerator.getInstance(KeyGenerator.java:207)

    at sun.security.ssl.JsseJce.getKeyGenerator(Unknown Source)

    ... 22 more

上面的程序使用JDK7将导致自己签名的证书验证失败，报的错误和下面的请求百度报的错相同。使用JDK6成功。这是JDK7的一个bug引起的：http://bugs.java.com/bugdatabase/view_bug.do?bug_id=7018897

针对于JDK7的这个bug需要使用下面的代码：

package com.ydd.study.hello.httpclient;

import java.io.File;

import java.io.FileInputStream;

import java.io.IOException;

import java.io.InputStream;

import java.security.KeyManagementException;

import java.security.KeyStore;

import java.security.KeyStoreException;

import java.security.NoSuchAlgorithmException;

import java.security.cert.CertificateException;

import java.security.cert.X509Certificate;

import javax.net.ssl.SSLContext;

import javax.net.ssl.TrustManager;

import javax.net.ssl.X509TrustManager;

import org.apache.http.HttpHost;

import org.apache.http.client.ClientProtocolException;

import org.apache.http.client.config.RequestConfig;

import org.apache.http.client.methods.CloseableHttpResponse;

import org.apache.http.client.methods.HttpGet;

import org.apache.http.client.protocol.HttpClientContext;

import org.apache.http.config.Registry;

import org.apache.http.config.RegistryBuilder;

import org.apache.http.conn.routing.HttpRoute;

import org.apache.http.conn.socket.ConnectionSocketFactory;

import org.apache.http.conn.socket.PlainConnectionSocketFactory;

import org.apache.http.conn.ssl.SSLConnectionSocketFactory;

import org.apache.http.conn.ssl.TrustSelfSignedStrategy;

import org.apache.http.impl.client.CloseableHttpClient;

import org.apache.http.impl.client.HttpClients;

import org.apache.http.impl.conn.PoolingHttpClientConnectionManager;

import org.apache.http.ssl.SSLContexts;

import org.apache.http.util.EntityUtils;

public class OneTLSPool {

    public static CloseableHttpClient httpclient;

    public static final String KEY_STORE_TRUST_PATH = "D://https//ca//cl.jks"; // truststore的路径

    public static final String KEY_STORE_TYPE_JKS = "jks"; // truststore的类型

    private static final String KEY_STORE_TRUST_PASSWORD = "123456"; // truststore的密码

    // 获得池化得HttpClient

    static {

        SSLContext sslcontext = null;

        try {

            // 设置truststore

            KeyStore trustStore = KeyStore.getInstance(KEY_STORE_TYPE_JKS);

            InputStream tsIn = new FileInputStream(new File(KEY_STORE_TRUST_PATH));

            try {

                trustStore.load(tsIn, KEY_STORE_TRUST_PASSWORD.toCharArray());

            } finally {

                try {

                    tsIn.close();

                } catch (Exception ignore) {

                }

            }

            sslcontext = SSLContexts.custom().loadTrustMaterial(trustStore, new TrustSelfSignedStrategy()).build();

            //解决jdk7的ssl的自签名会有问题的bug，如果不是jdk7，则下面的代码可以没有

            //bug地址：http://bugs.java.com/bugdatabase/view_bug.do?bug_id=7018897

            X509TrustManager xtm = new X509TrustManager(){   //创建TrustManager

                public void checkClientTrusted(X509Certificate[] chain, String authType) throws CertificateException {}

                public void checkServerTrusted(X509Certificate[] chain, String authType) throws CertificateException {}

                public X509Certificate[] getAcceptedIssuers() {

                    return null;   //return new java.security.cert.X509Certificate[0];

                }

            };

            sslcontext.init(null, new TrustManager[]{xtm}, null);

            //解决bug结束

        } catch (Exception e) {

            e.printStackTrace();

        }

        // 客户端支持TLSV1，TLSV2,TLSV3这三个版本

        SSLConnectionSocketFactory sslsf = new SSLConnectionSocketFactory(sslcontext,

                new String[] { "TLSv1", "TLSv2", "TLSv3" }, null,

                SSLConnectionSocketFactory.getDefaultHostnameVerifier());// 客户端验证服务器身份的策略

        // Create a registry of custom connection socket factories for supported

        // protocol schemes.

        Registry<ConnectionSocketFactory> socketFactoryRegistry = RegistryBuilder.<ConnectionSocketFactory> create()

                .register("http", PlainConnectionSocketFactory.INSTANCE)

                .register("https", new SSLConnectionSocketFactory(sslcontext)).build();

        PoolingHttpClientConnectionManager connManager = new PoolingHttpClientConnectionManager(socketFactoryRegistry);

        // Configure total max or per route limits for persistent connections

        // that can be kept in the pool or leased by the connection manager.

        connManager.setMaxTotal(100);

        connManager.setDefaultMaxPerRoute(10);

        // 个性化设置某个url的连接

        connManager.setMaxPerRoute(new HttpRoute(new HttpHost("www.y.com", 80)), 20);

        httpclient = HttpClients.custom().setConnectionManager(connManager).build();

    }

    /**

     * 单向验证且服务端的证书可信

     *

     * @throws IOException

     * @throws ClientProtocolException

     */

    public static void oneWayAuthorizationAccepted() throws ClientProtocolException, IOException {

        // Execution context can be customized locally.

        HttpClientContext context = HttpClientContext.create();

        HttpGet httpget = new HttpGet("https://www.yunzhu.com:8443");

        // 设置请求的配置

        RequestConfig requestConfig = RequestConfig.custom().setSocketTimeout(5000).setConnectTimeout(5000)

                .setConnectionRequestTimeout(5000).build();

        httpget.setConfig(requestConfig);

        System.out.println("executing request " + httpget.getURI());

        CloseableHttpResponse response = httpclient.execute(httpget, context);

        try {

            System.out.println("----------------------------------------");

            System.out.println(response.getStatusLine());

            System.out.println(EntityUtils.toString(response.getEntity()));

            System.out.println("----------------------------------------");

            // Once the request has been executed the local context can

            // be used to examine updated state and various objects affected

            // by the request execution.

            // Last executed request

            context.getRequest();

            // Execution route

            context.getHttpRoute();

            // Target auth state

            context.getTargetAuthState();

            // Proxy auth state

            context.getTargetAuthState();

            // Cookie origin

            context.getCookieOrigin();

            // Cookie spec used

            context.getCookieSpec();

            // User security token

            context.getUserToken();

        } catch (Exception e) {

            e.printStackTrace();

        }

    }

    public static void main(String[] a) throws KeyManagementException, NoSuchAlgorithmException, KeyStoreException,

            CertificateException, IOException {

        oneWayAuthorizationAccepted();

    }

}

下面是请求百度时因为client端没有信任百度的CA证书，所以单向不能验证成功

executing request https://www.baidu.com

Exception in thread "main" javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

    at sun.security.ssl.Alerts.getSSLException(Alerts.java:192)

    at sun.security.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1884)

    at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:276)

    at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:270)

    at sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1439)

    at sun.security.ssl.ClientHandshaker.processMessage(ClientHandshaker.java:209)

    at sun.security.ssl.Handshaker.processLoop(Handshaker.java:878)

    at sun.security.ssl.Handshaker.process_record(Handshaker.java:814)

    at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:1016)

    at sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1312)

    at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1339)

    at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1323)

    at org.apache.http.conn.ssl.SSLConnectionSocketFactory.createLayeredSocket(SSLConnectionSocketFactory.java:394)

    at org.apache.http.conn.ssl.SSLConnectionSocketFactory.connectSocket(SSLConnectionSocketFactory.java:353)

    at org.apache.http.impl.conn.DefaultHttpClientConnectionOperator.connect(DefaultHttpClientConnectionOperator.java:141)

    at org.apache.http.impl.conn.PoolingHttpClientConnectionManager.connect(PoolingHttpClientConnectionManager.java:353)

    at org.apache.http.impl.execchain.MainClientExec.establishRoute(MainClientExec.java:380)

    at org.apache.http.impl.execchain.MainClientExec.execute(MainClientExec.java:236)

    at org.apache.http.impl.execchain.ProtocolExec.execute(ProtocolExec.java:184)

    at org.apache.http.impl.execchain.RetryExec.execute(RetryExec.java:88)

    at org.apache.http.impl.execchain.RedirectExec.execute(RedirectExec.java:110)

    at org.apache.http.impl.client.InternalHttpClient.doExecute(InternalHttpClient.java:184)

    at org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:82)

    at com.ydd.study.hello.httpclient.OneTLSPool.oneWayAuthorizationDenied(OneTLSPool.java:91)

    at com.ydd.study.hello.httpclient.OneTLSPool.main(OneTLSPool.java:173)

Caused by: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

    at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:385)

    at sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:292)

    at sun.security.validator.Validator.validate(Validator.java:260)

    at sun.security.ssl.X509TrustManagerImpl.validate(X509TrustManagerImpl.java:326)

    at sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:231)

    at sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:107)

    at org.apache.http.ssl.SSLContextBuilder$TrustManagerDelegate.checkServerTrusted(SSLContextBuilder.java:298)

    at sun.security.ssl.AbstractTrustManagerWrapper.checkServerTrusted(SSLContextImpl.java:813)

    at sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1421)

    ... 20 more

Caused by: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

    at sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathBuilder.java:196)

    at java.security.cert.CertPathBuilder.build(CertPathBuilder.java:268)

    at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:380)

    ... 28 more

client信任了www.yunzhu.com:8443的CA证书，单项验证成功

executing request https://www.yunzhu.com:8443

----------------------------------------

HTTP/1.1 200 OK

<!DOCTYPE html>

<html lang="en">

   (tomcat主页的html内容)

</html>

----------------------------------------

二、双向握手

示例代码：

package com.ydd.study.hello.httpclient;

import java.io.File;

import java.io.FileInputStream;

import java.io.IOException;

import java.io.InputStream;

import java.security.KeyManagementException;

import java.security.KeyStore;

import java.security.KeyStoreException;

import java.security.NoSuchAlgorithmException;

import java.security.cert.CertificateException;

import javax.net.ssl.SSLContext;

import org.apache.http.HttpHost;

import org.apache.http.client.ClientProtocolException;

import org.apache.http.client.config.RequestConfig;

import org.apache.http.client.methods.CloseableHttpResponse;

import org.apache.http.client.methods.HttpGet;

import org.apache.http.client.protocol.HttpClientContext;

import org.apache.http.config.Registry;

import org.apache.http.config.RegistryBuilder;

import org.apache.http.conn.routing.HttpRoute;

import org.apache.http.conn.socket.ConnectionSocketFactory;

import org.apache.http.conn.socket.PlainConnectionSocketFactory;

import org.apache.http.conn.ssl.SSLConnectionSocketFactory;

import org.apache.http.conn.ssl.TrustSelfSignedStrategy;

import org.apache.http.impl.client.CloseableHttpClient;

import org.apache.http.impl.client.HttpClients;

import org.apache.http.impl.conn.PoolingHttpClientConnectionManager;

import org.apache.http.ssl.SSLContexts;

import org.apache.http.util.EntityUtils;

public class DoubleWayTlsPool {

    public static CloseableHttpClient httpclient;

    public static final String KEY_STORE_TRUST_PATH = "D://https//ca//cl.jks"; // truststore的路径

    public static final String KEY_STORE_TYPE_JKS = "jks"; // truststore的类型

    private static final String KEY_STORE_TRUST_PASSWORD = "123456"; // truststore的密码

    public static final String KEY_STORE_CLIENT_PATH="D://https//client//client.p12";

    public static final String KEY_STORE_TYPE_P12="PKCS12";

    private static final String KEY_STORE_PASSWORD="123456";

    // 获得池化得HttpClient

    static {

        SSLContext sslcontext = null;

        try {

            // 设置truststore

            KeyStore trustStore = KeyStore.getInstance(KEY_STORE_TYPE_JKS);

            KeyStore keyStore  = KeyStore.getInstance(KEY_STORE_TYPE_P12);

            InputStream ksIn = new FileInputStream(KEY_STORE_CLIENT_PATH);

            InputStream tsIn = new FileInputStream(new File(KEY_STORE_TRUST_PATH));

            try {

                 keyStore.load(ksIn, KEY_STORE_PASSWORD.toCharArray());

                trustStore.load(tsIn, KEY_STORE_TRUST_PASSWORD.toCharArray());

            } finally {

                try {

                    ksIn.close();

                    tsIn.close();

                } catch (Exception e) {

                    e.printStackTrace();

                }

            }

            sslcontext = SSLContexts.custom().loadTrustMaterial(trustStore, new TrustSelfSignedStrategy()).loadKeyMaterial(keyStore, KEY_STORE_PASSWORD.toCharArray()).build();

            //下面的代码可以动态的设置握手验证证书的策略，可以不用手工导入证书，而只要程序控制即可

            //bug地址：http://bugs.java.com/bugdatabase/view_bug.do?bug_id=7018897

        /*    X509TrustManager xtm = new X509TrustManager(){   //创建TrustManager

                public void checkClientTrusted(X509Certificate[] chain, String authType) throws CertificateException {}

                public void checkServerTrusted(X509Certificate[] chain, String authType) throws CertificateException {}

                public X509Certificate[] getAcceptedIssuers() {

                    return null;   //return new java.security.cert.X509Certificate[0];

                }

            };

            sslcontext.init(null, new TrustManager[]{xtm}, null);*/

            //解决bug结束

        } catch (Exception e) {

            e.printStackTrace();

        }

        // 客户端支持TLSV1，TLSV2,TLSV3这三个版本

        SSLConnectionSocketFactory sslsf = new SSLConnectionSocketFactory(sslcontext,

                new String[] { "TLSv1", "TLSv2", "TLSv3" }, null,

                SSLConnectionSocketFactory.getDefaultHostnameVerifier());// 客户端验证服务器身份的策略

        // Create a registry of custom connection socket factories for supported

        // protocol schemes.

        Registry<ConnectionSocketFactory> socketFactoryRegistry = RegistryBuilder.<ConnectionSocketFactory> create()

                .register("http", PlainConnectionSocketFactory.INSTANCE)

                .register("https", new SSLConnectionSocketFactory(sslcontext)).build();

        PoolingHttpClientConnectionManager connManager = new PoolingHttpClientConnectionManager(socketFactoryRegistry);

        // Configure total max or per route limits for persistent connections

        // that can be kept in the pool or leased by the connection manager.

        connManager.setMaxTotal(100);

        connManager.setDefaultMaxPerRoute(10);

        // 个性化设置某个url的连接

        connManager.setMaxPerRoute(new HttpRoute(new HttpHost("www.y.com", 80)), 20);

        httpclient = HttpClients.custom().setConnectionManager(connManager).build();

    }

    /**

     * 单向验证且服务端的证书可信

     *

     * @throws IOException

     * @throws ClientProtocolException

     */

    public static void doubleWayAuthorizationAccepted() throws ClientProtocolException, IOException {

        // Execution context can be customized locally.

        HttpClientContext context = HttpClientContext.create();

        HttpGet httpget = new HttpGet("https://www.yunzhu.com:8443");

        // 设置请求的配置

        RequestConfig requestConfig = RequestConfig.custom().setSocketTimeout(5000).setConnectTimeout(5000)

                .setConnectionRequestTimeout(5000).build();

        httpget.setConfig(requestConfig);

        System.out.println("executing request " + httpget.getURI());

        CloseableHttpResponse response = httpclient.execute(httpget, context);

        try {

            System.out.println("----------------------------------------");

            System.out.println(response.getStatusLine());

            System.out.println(EntityUtils.toString(response.getEntity()));

            System.out.println("----------------------------------------");

            // Once the request has been executed the local context can

            // be used to examine updated state and various objects affected

            // by the request execution.

            // Last executed request

            context.getRequest();

            // Execution route

            context.getHttpRoute();

            // Target auth state

            context.getTargetAuthState();

            // Proxy auth state

            context.getTargetAuthState();

            // Cookie origin

            context.getCookieOrigin();

            // Cookie spec used

            context.getCookieSpec();

            // User security token

            context.getUserToken();

        } catch (Exception e) {

            e.printStackTrace();

        }

    }

    public static void main(String[] a) throws KeyManagementException, NoSuchAlgorithmException, KeyStoreException,

            CertificateException, IOException {

        doubleWayAuthorizationAccepted();

    }

}

该程序在JDK6运行成功。

使用X509TrustManager可以动态的改变握手时验证证书的行为。可以利用这点来动态的导入证书，而不是需要手动的导入证书。 具体的用法参见下面的博客：

http://www.cnblogs.com/devinzhang/archive/2012/02/28/2371631.html

使用HttpClient连接池进行https单双向验证的更多相关文章

  1. HttpClient连接池的一些思考

    前言 使用apache的httpclient进行http的交互处理已经很长时间了,而httpclient实例则使用了http连接池,想必大家也没有关心过连接池的管理.事实上,通过分析httpclien ...

  2. HttpClient实战三：Spring整合HttpClient连接池

    简介 在微服务架构或者REST API项目中,使用Spring管理Bean是很常见的,在项目中HttpClient使用的一种最常见方式就是:使用Spring容器XML配置方式代替Java编码方式进行H ...

  3. springboot使用RestTemplate+httpclient连接池发送http消息

    简介 RestTemplate是spring支持的一个请求http rest服务的模板对象,性质上有点像jdbcTemplate RestTemplate底层还是使用的httpclient(org.a ...

  4. Http持久连接与HttpClient连接池

    一.背景 HTTP协议是无状态的协议,即每一次请求都是互相独立的.因此它的最初实现是,每一个http请求都会打开一个tcp socket连接,当交互完毕后会关闭这个连接. HTTP协议是全双工的协议, ...

  5. Http 持久连接与 HttpClient 连接池

    一.背景 HTTP协议是无状态的协议,即每一次请求都是互相独立的.因此它的最初实现是,每一个http请求都会打开一个tcp socket连接,当交互完毕后会关闭这个连接. HTTP协议是全双工的协议, ...

  6. HttpClient连接池

    HttpClient连接池,发现对于高并发的请求,效率提升很大.虽然知道是因为建立了长连接,导致请求效率提升,但是对于内部的原理还是不太清楚.后来在网上看到了HTTP协议的发展史,里面提到了一个属性C ...

  7. httpclient连接池在ES Restful API请求中的应用

    package com.wm.utils; import org.apache.http.impl.client.CloseableHttpClient; import org.apache.http ...

  8. HttpClient连接池的连接保持、超时和失效机制

    HTTP是一种无连接的事务协议,底层使用的还是TCP,连接池复用的就是TCP连接,目的就是在一个TCP连接上进行多次的HTTP请求从而提高性能.每次HTTP请求结束的时候,HttpClient会判断连 ...

  9. HttpClient连接池抛出大量ConnectionPoolTimeoutException: Timeout waiting for connection异常排查

    转自: http://blog.csdn.net/shootyou/article/details/6615051 今天解决了一个HttpClient的异常,汗啊,一个HttpClient使用稍有不慎 ...

随机推荐

  1. SQL入门语句之INSERT、UPDATE和DELETE

    一.SQL入门语句之INSERT insert语句的功能是向数据库的某个表中插入一个新的数据行 1.根据对应的字段插入相对应的值 insert into table_name(字段A, 字段B, 字段 ...

  2. python常用文件处理函数_1

    1.range()函数 函数原型:range(start,end,scan) 参数含义:start:计数从start开始.默认是从0开始的,如range()等价于range(0,5)  end:计数到 ...

  3. Quartz 之Quartz Cron表达式

    说到这个Quartz了,必不可少的就要说到我们的Triggger触发器,相信大家也都知道,我们在之前也说过了,Trigger又有两个子类,也就是两种方式,分别是:SimpleTrigger和CronT ...

  4. Hibernate的一级缓存

    Hibernate的一级缓存 什么是缓存:缓存将数据库/硬盘上文件中数据,放入到缓存中(就是内存中一块空间).当再次使用的使用,可以直接从内存中获取 缓存的好处:提升程序运行的效率.缓存技术是Hibe ...

  5. Linux学习笔记（4）-远程登录

    根据网上的那些说法,如Linux服务器假设在外地(新疆),和程序员工作的环境(北京)相距太远,那么每次出问题都要出差跑到现场去调试的话,那就太烦人了. 所以,人们开发出了一种远程登录的手段,可以让程序 ...

  6. Linux琐碎

    本周接触Linux的内容: 1.netstat -tanlp 显示监听的所有端口并且不解析端口为属于哪个进程 history | grep cmd 从命令历史中找到需要的命令 2. scp命令的使用: ...

  7. InstallShield Limited Edition制作安装文件

    由于InstallShield Limited Edition for Visual Studio的教程.资料太少,所以我今天才决定写这个文章,专门针对C#项目打包,包括打包集成Microsoft . ...

  8. CentOS利用inotify+rsync实现文件同步

    1.环境部署 inotify-master 10.10.6.208 inotify-slave 10.10.6.149 2.两台服务器都安装rsync yum install -y rsync 3.i ...

  9. DB2数据库参数建议（Linux）

    内核参数配置: kernel.shmall=<物理内存的90%,以页为单位> kernel.shmax=<实际的物理内存> kernel.shmmni= kernel.msgm ...

  10. jQuery常用插件

    jQuery UI插件简介: jQuery UI是以 jQuery 为基础的开源 JavaScript 网页用户界面代码库.包含底层用户交互.动画.特效和可更换主题的可视控件.我们可以直接用它来构建具 ...