`
jiewo
  • 浏览: 47386 次
  • 性别: Icon_minigender_1
  • 来自: 上海
社区版块
存档分类
最新评论

CXF客户端使用https加密配置

    博客分类:
  • java
阅读更多
<!--配置请求超时时间  -->
	<http-conf:conduit name="*.http-conduit">
		<http-conf:client ConnectionTimeout="5000"
			ReceiveTimeout="10000" />
	</http-conf:conduit>
	<!-- 普通客户端 -->
	<jaxws:client id="ServicePortType" serviceClass="com.api.ServicePortType"
		address="https://192.168.54.32:8443/services/api">
		<jaxws:inInterceptors>
			<bean class="org.apache.cxf.interceptor.LoggingInInterceptor"></bean>
		</jaxws:inInterceptors>
		<jaxws:outInterceptors>
			<bean class="org.apache.cxf.interceptor.LoggingOutInterceptor"></bean>
		</jaxws:outInterceptors>
	</jaxws:client>

	<http-conf:conduit name="https://192.168.54.32:8443/services/.*">
		<http-conf:tlsClientParameters
			disableCNCheck="true">
			<sec:keyManagers keyPassword="123456">
				<sec:keyStore type="JKS" password="123456"
					file="D:/work/webclient/src/keystore/a.jks" />
			</sec:keyManagers>
			<sec:trustManagers>
				<sec:keyStore type="JKS" password="123456"
					file="D:/work/webclient/src/keystore/a.jks" />
			</sec:trustManagers>
			<sec:cipherSuitesFilter>
				<sec:include>.*_EXPORT_.*</sec:include>
				<sec:include>.*_EXPORT1024_.*</sec:include>
				<sec:include>.*_WITH_DES_.*</sec:include>
				<sec:include>.*_WITH_AES_.*</sec:include>
				<sec:include>.*_WITH_NULL_.*</sec:include>
				<sec:exclude>.*_DH_anon_.*</sec:exclude>
			</sec:cipherSuitesFilter>
		</http-conf:tlsClientParameters>
		<!-- 开启用户密码,需要增加如下配置 密码生产规则  -->
		<http-conf:authorization>
			<sec:UserName>s</sec:UserName>
			<sec:Password>s</sec:Password>
			<sec:AuthorizationType>Basic</sec:AuthorizationType>
		</http-conf:authorization>
		<http-conf:client AutoRedirect="true" Connection="close" />		
	</http-conf:conduit>

 请注意证书路径问题,或者直接将证书导入仓库中。

分享到:
评论

相关推荐

Global site tag (gtag.js) - Google Analytics