在使用Web Service的时候,在很多情况下会要求我们发布ssl的web service,此时如果web service是作为一个war包部署在tomcat之类的web容器中的时候,我们可以通过修改tomcat的配置来比较容易的部署发布成ssl的 web service的,当对于独立运行的程序来书,此时发布web service是需要一些操作的,下面看看在CXF中怎样发布并调用SSL的Web Service。
1. 首先是一个pojo的实体类
- package com.googlecode.garbagecan.cxfstudy.ssl;
- public class User {
- private String id;
- private String name;
- private String password;
- public String getId() {
- return id;
- }
- public void setId(String id) {
- this.id = id;
- }
- public String getName() {
- return name;
- }
- public void setName(String name) {
- this.name = name;
- }
- public String getPassword() {
- return password;
- }
- public void setPassword(String password) {
- this.password = password;
- }
- }
2. 下面是Web Service的接口和实现类,这两个类和前面文章中介绍的没什么区别
- package com.googlecode.garbagecan.cxfstudy.ssl;
- import java.util.List;
- import javax.jws.WebMethod;
- import javax.jws.WebResult;
- import javax.jws.WebService;
- @WebService
- public interface UserService {
- @WebMethod
- @WebResult List<User> list();
- }
- package com.googlecode.garbagecan.cxfstudy.ssl;
- import java.util.ArrayList;
- import java.util.List;
- public class UserServiceImpl implements UserService {
- public List<User> list() {
- List<User> users = new ArrayList<User>();
- for (int i = 0; i < 10; i++) {
- User user = new User();
- user.setId("" + i);
- user.setName("user_" + i);
- user.setPassword("password_" + i);
- users.add(user);
- }
- return users;
- }
- }
3. 下面看看Server端代码
- package com.googlecode.garbagecan.cxfstudy.ssl;
- import java.io.File;
- import java.io.FileInputStream;
- import java.security.KeyStore;
- import javax.net.ssl.KeyManager;
- import javax.net.ssl.KeyManagerFactory;
- import javax.net.ssl.TrustManager;
- import javax.net.ssl.TrustManagerFactory;
- import org.apache.cxf.configuration.jsse.TLSServerParameters;
- import org.apache.cxf.configuration.security.ClientAuthentication;
- import org.apache.cxf.configuration.security.FiltersType;
- import org.apache.cxf.endpoint.Server;
- import org.apache.cxf.jaxws.JaxWsServerFactoryBean;
- import org.apache.cxf.transport.http_jetty.JettyHTTPServerEngineFactory;
- public class MyServer {
- private static final int port = 12345;
- private static final String address = "https://0.0.0.0:"+port+"/ws/ssl/userService";
- public static void main(String[] args) throws Exception {
- System.out.println("Starting Server");
- configureSSLOnTheServer();
- JaxWsServerFactoryBean factoryBean = new JaxWsServerFactoryBean();
- factoryBean.setServiceClass(UserServiceImpl.class);
- factoryBean.setAddress(address);
- Server server = factoryBean.create();
- String endpoint = server.getEndpoint().getEndpointInfo().getAddress();
- System.out.println("Server started at " + endpoint);
- }
- public static void configureSSLOnTheServer() {
- File file = new File(MyServer.class.getResource("/com/googlecode/garbagecan/cxfstudy/ssl/test.jks").getFile());
- try {
- TLSServerParameters tlsParams = new TLSServerParameters();
- KeyStore keyStore = KeyStore.getInstance("JKS");
- String password = "mypassword";
- String storePassword = "mypassword";
- keyStore.load(new FileInputStream(file), storePassword.toCharArray());
- KeyManagerFactory keyFactory = KeyManagerFactory.getInstance(KeyManagerFactory.getDefaultAlgorithm());
- keyFactory.init(keyStore, password.toCharArray());
- KeyManager[] keyManagers = keyFactory.getKeyManagers();
- tlsParams.setKeyManagers(keyManagers);
- keyStore.load(new FileInputStream(file), storePassword.toCharArray());
- TrustManagerFactory trustFactory = TrustManagerFactory.getInstance(TrustManagerFactory.getDefaultAlgorithm());
- trustFactory.init(keyStore);
- TrustManager[] trustManagers = trustFactory.getTrustManagers();
- tlsParams.setTrustManagers(trustManagers);
- FiltersType filtersTypes = new FiltersType();
- filtersTypes.getInclude().add(".*_EXPORT_.*");
- filtersTypes.getInclude().add(".*_EXPORT1024_.*");
- filtersTypes.getInclude().add(".*_WITH_DES_.*");
- filtersTypes.getInclude().add(".*_WITH_NULL_.*");
- filtersTypes.getExclude().add(".*_DH_anon_.*");
- tlsParams.setCipherSuitesFilter(filtersTypes);
- ClientAuthentication ca = new ClientAuthentication();
- ca.setRequired(true);
- ca.setWant(true);
- tlsParams.setClientAuthentication(ca);
- JettyHTTPServerEngineFactory factory = new JettyHTTPServerEngineFactory();
- factory.setTLSServerParametersForPort(port, tlsParams);
- } catch (Exception e) {
- e.printStackTrace();
- }
- }
- }
4. 下面看看Client端代码
- package com.googlecode.garbagecan.cxfstudy.ssl;
- import java.io.File;
- import java.io.FileInputStream;
- import java.security.KeyStore;
- import javax.net.ssl.KeyManager;
- import javax.net.ssl.KeyManagerFactory;
- import javax.net.ssl.TrustManager;
- import javax.net.ssl.TrustManagerFactory;
- import org.apache.cxf.configuration.jsse.TLSClientParameters;
- import org.apache.cxf.configuration.security.FiltersType;
- import org.apache.cxf.endpoint.Client;
- import org.apache.cxf.frontend.ClientProxy;
- import org.apache.cxf.jaxws.JaxWsProxyFactoryBean;
- import org.apache.cxf.transport.http.HTTPConduit;
- public class MyClient {
- private static final String address = "https://localhost:12345/ws/ssl/userService";
- public static void main(String[] args) throws Exception {
- JaxWsProxyFactoryBean factoryBean = new JaxWsProxyFactoryBean();
- factoryBean.setAddress(address);
- factoryBean.setServiceClass(UserService.class);
- Object obj = factoryBean.create();
- UserService userService = (UserService) obj;
- configureSSLOnTheClient(userService);
- System.out.println(userService.list());
- }
- private static void configureSSLOnTheClient(Object obj) {
- File file = new File(MyServer.class.getResource("/com/googlecode/garbagecan/cxfstudy/ssl/test.jks").getFile());
- Client client = ClientProxy.getClient(obj);
- HTTPConduit httpConduit = (HTTPConduit) client.getConduit();
- try {
- TLSClientParameters tlsParams = new TLSClientParameters();
- tlsParams.setDisableCNCheck(true);
- KeyStore keyStore = KeyStore.getInstance("JKS");
- String password = "mypassword";
- String storePassword = "mypassword";
- keyStore.load(new FileInputStream(file), storePassword.toCharArray());
- TrustManagerFactory trustFactory = TrustManagerFactory.getInstance(TrustManagerFactory.getDefaultAlgorithm());
- trustFactory.init(keyStore);
- TrustManager[] trustManagers = trustFactory.getTrustManagers();
- tlsParams.setTrustManagers(trustManagers);
- keyStore.load(new FileInputStream(file), storePassword.toCharArray());
- KeyManagerFactory keyFactory = KeyManagerFactory.getInstance(KeyManagerFactory.getDefaultAlgorithm());
- keyFactory.init(keyStore, password.toCharArray());
- KeyManager[] keyManagers = keyFactory.getKeyManagers();
- tlsParams.setKeyManagers(keyManagers);
- FiltersType filtersTypes = new FiltersType();
- filtersTypes.getInclude().add(".*_EXPORT_.*");
- filtersTypes.getInclude().add(".*_EXPORT1024_.*");
- filtersTypes.getInclude().add(".*_WITH_DES_.*");
- filtersTypes.getInclude().add(".*_WITH_NULL_.*");
- filtersTypes.getExclude().add(".*_DH_anon_.*");
- tlsParams.setCipherSuitesFilter(filtersTypes);
- httpConduit.setTlsClientParameters(tlsParams);
- } catch (Exception e) {
- e.printStackTrace();
- }
- }
- }
5. 我们需要手动生成jks文件,并将其放在maven工程resources的/com/googlecode/garbagecan/cxfstudy/ssl/目录下,下面是手动生成时使用的命令
- keytool -genkey -alias test -keyalg RSA -keypass mypassword -storepass mypassword -dname "CN=, OU=, O=, L=, ST=, C=" -validity 3650 -keystore test.jks
6. 最后我们可以通过启动MyServer和MyClient来验证我们的测试。
相关推荐
Apache CXF Web Service Development
Apache CXF Web Service Development 源码
实战Web Service with CXF.ppt 博文链接:https://frankiehuang.iteye.com/blog/155333
实战Web Service 之 CXF 实战Web Service 之 CXF
Apache CXF = Celtix + XFire,Apache CXF 的前身叫 Apache ...WSDL 优先(WSDL First)来轻松地实现 Web Services 的发布和使用。Apache CXF已经是一个正式的Apache顶级项目。 Apache CXF 是一个开源的 Services 框架
详细的从入门到精通, 手把手的教你做WEB SERVICE 该资源借花献佛,是一个高手写的,我在这里借花献佛,推广推广,让大家多一个学习的机会,吃水不忘挖井人,轻大家也谢谢写该文档的高手
Apache CXF 框架是一个比较有前途的开源 Web Services 框架,也是构建 SOA 架构应用的利器。本书采用案例源码和解说形式全面...最后,本书还描述了 Apache CXF 的工具、配置、调试、日志、部署和发布等使用的相关内容。
基于SSL验证的Apache CXF客户端设计 1,服务器端Tomcat配置SSL支持 2,服务器端Web Service接口设计 3,客户端访问设计,包括代码和配置文件 详情请看博客:...
Apache CXF是一个开放源码的Web服务框架,提供了一个易于使用,用于开发Web Services标准为基础的编程模型。本书主要介绍Apache CXF在构建SOA架构各个方面的应用说明和编程案例。覆盖以下内容:基于JAX-WS规范和CXF...
Apache CXF Web Service Development.pdf
Apache CXF Apache CXF Apache CXF Apache CXF Apache CXF Apache CXF Apache CXF Apache CXF Apache CXF
apache cxf 3.1.8 java web service 开源框架