Creating an SSL Server Socket
An SSL server socket requires certificates that it will send to
clients for authentication. The certificates must be contained in a
keystore whose location must be explicitly specified (there is no
default). Following the example we describe how to create and specify
a keystore for the SSL server socket to use.
Specify the keystore of certificates using the javax.net.ssl.keyStore system property:
For testing purposes, you can create a keystore with a self-signed
certificate, using the keytool command:
try {
int port = 443;
ServerSocketFactory ssocketFactory = SSLServerSocketFactory.getDefault();
ServerSocket ssocket = ssocketFactory.createServerSocket(port);
// Listen for connections
Socket socket = ssocket.accept();
// Create streams to securely send and receive data to the client
InputStream in = socket.getInputStream();
OutputStream out = socket.getOutputStream();
// Read from in and write to out...
// Close the socket
in.close();
out.close();
} catch(IOException e) {
}
> java -Djavax.net.ssl.keyStore=mySrvKeystore -Djavax.net.ssl.keyStorePassword=123456 MyServer
> keytool -keystore mySrvKeystore -keypasswd 123456 -genkey -keyalg RSA -alias mycert
Post a comment