Begging for help. SSLSocket client/server

Question

Hello Everyone,
At my wits end and behind my project plan. I need to secure my server.
I have generated a keystore
Exported certificate into CER file
Imported this certicate into the JAVA_HOME/lib/security/cacerts file.
I have my JBoss secured on port 8443.
Here is m client code
import java.io.InputStream;
import java.io.OutputStream;
import java.io.InputStreamReader;
import java.io.OutputStreamWriter;
import java.io.BufferedReader;
import java.io.BufferedWriter;
import java.io.IOException;
import javax.net.ssl.SSLSocket;
import javax.net.ssl.SSLSocketFactory;
public
class EchoClient
public
static
void
main(String [] arstring)
try
SSLSocketFactory sslsocketfactory = (SSLSocketFactory)SSLSocketFactory.getDefault();
SSLSocket sslsocket = (SSLSocket)sslsocketfactory.createSocket("172.16.220.178:8443", 9999);
InputStream inputstream = System.in;
InputStreamReader inputstreamreader = new InputStreamReader(inputstream);
BufferedReader bufferedreader = new BufferedReader(inputstreamreader);
OutputStream outputstream = sslsocket.getOutputStream();
OutputStreamWriter outputstreamwriter = new OutputStreamWriter(outputstream);
BufferedWriter bufferedwriter = new BufferedWriter(outputstreamwriter);
String string = null;
while ((string = bufferedreader.readLine()) != null)
bufferedwriter.write(string + '\n');
bufferedwriter.flush();
catch (Exception exception)
exception.printStackTrace();
and here is my server code
import java.io.InputStream;
import java.io.OutputStream;
import java.io.InputStreamReader;
import java.io.OutputStreamWriter;
import java.io.BufferedReader;
import java.io.BufferedWriter;
import java.io.IOException;
import javax.net.ssl.SSLSocket;
import javax.net.ssl.SSLSocketFactory;
public
class EchoClient
public
static
void
main(String [] arstring)
try
SSLSocketFactory sslsocketfactory = (SSLSocketFactory)SSLSocketFactory.getDefault();
SSLSocket sslsocket = (SSLSocket)sslsocketfactory.createSocket("172.16.220.178:8443", 9999);
InputStream inputstream = System.in;
InputStreamReader inputstreamreader = new InputStreamReader(inputstream);
BufferedReader bufferedreader = new BufferedReader(inputstreamreader);
OutputStream outputstream = sslsocket.getOutputStream();
OutputStreamWriter outputstreamwriter = new OutputStreamWriter(outputstream);
BufferedWriter bufferedwriter = new BufferedWriter(outputstreamwriter);
String string = null;
while ((string = bufferedreader.readLine()) != null)
bufferedwriter.write(string + '\n');
bufferedwriter.flush();
catch (Exception exception)
exception.printStackTrace();
How can I get this client/server talking using my own keystore. ????
I only need my server to be secured. I dont need any client authentication or anything. I just need my client to connect using Sockets to a secure server.
Thanks.
Desperate Joyce

Answer 1

Ok, you can't secure a server, you can only sercure the connection between them. That means either the client needs who it is talking to or the server needs to know who it is talking to. You can have a ssl connection where nobody knows who they are talking to as well if you want. I'll go through it for server authentication by client. If you need it the other way around the same principle holds. Give me an hour and I'll put up the code for a connection without auth.
Ok, if you need to authenticate the server.
In the client you will need to have a keystore for trusted certificates (i.e. cacerts)
You will need a trustmanager to decide whether or not to trust the server.
And using both of these you need to create as ssl context.
On the server, you will need a keystore containing its X509 certificates
A keymanager to manage these certificate and again an SSL context.
Then start the handshake. The client will connect to the server using an SSL Socket.
On the starthandshake() method, the server will sent the client its X509 certificates from its
keystore. The clients trust manager will then try to create a certificate chain from these certificates
back to one of its trusted certificates (stored in its trusted keystore).
Client should look a little like this:
SSLContext ctx;
     TrustManagerFactory tmf;
     KeyStore ks;
     char[] passphrase = "passphrase".toCharArray();
     System.out.println("set up context, keystore and trustManagerFactory");
     ctx = SSLContext.getInstance("SSL");
     tmf = TrustManagerFactory.getInstance("SunX509");
     ks = KeyStore.getInstance("JKS");
                     System.out.println("set context to ssl, tmf to X509 and keystore to JKS");
     ks.load(new FileInputStream("testkeys"), passphrase);
     System.out.println("loading testkeys using passphrase");
     tmf.init(ks);
     System.out.println("initialise keystore using passphrase");
     ctx.init(null, tmf.getTrustManagers(), null);
     System.out.println("initialise the key manager");
     SSLSocketFactory factory = ctx.getSocketFactory();
     System.out.println("got socket factory, now trying to create socket");
                      SSLSocket socket = (SSLSocket)factory.createSocket(serverAddress, port);
                     System.out.println("starting handshake");
     socket.addHandshakeCompletedListener(new HandshakeCompletedListener()
                           public void     handshakeCompleted(HandshakeCompletedEvent event)
               System.out.println("Handshake finished!");
               System.out.println("\t CipherSuite:" +
               event.getCipherSuite());
               System.out.println("\t SessionId " +
               event.getSession());
               System.out.println("\t PeerHost " +
               event.getSession().getPeerHost());
     socket.startHandshake();
     System.out.println("SSL Socket Connected");
     catch (Exception e)
          System.out.println("error along the way somewhere :" + e.getMessage());
                          e.printStackTrace();
    }The Server will look a little like this:
//=================================================================================
SSLServerSocketFactory ssf = null;
try
                     SSLContext ctx;
     KeyManagerFactory kmf;
     KeyStore ks;
     char[] passphrase = "passphrase".toCharArray();
                     System.out.println("set up context, keystore and keymanagerfactory");
     ctx = SSLContext.getInstance("SSL");
     kmf = KeyManagerFactory.getInstance("SunX509");
     ks = KeyStore.getInstance("JKS");
     System.out.println("set context to ssl, kmf to X509 and keystore to JKS");
     ks.load(new FileInputStream("testkeys"), passphrase);
     System.out.println("loading testkeys using passphrase");
     kmf.init(ks, passphrase);
     System.out.println("initialise keystore using passphrase");
     ctx.init(kmf.getKeyManagers(), null, null);
     System.out.println("initialise the key manager");
     ssf = ctx.getServerSocketFactory();
     System.out.println("got the server socket factory for that context");
catch (Exception ex)
     System.out.println("Error along the way somewhere : " + ex.getMessage());
     ex.printStackTrace();
try
     SSLServerSocket ss = (SSLServerSocket) ssf.createServerSocket(port);
     System.out.println("created ssl server socket for port " + port);
     myServer serve = new myServer(ss);
catch(IOException e)
           System.out.println(e.getMessage());
             e.printStackTrace();
             System.exit(1);
}where myServer is this:
import java.net.*;
import javax.net.*;
import javax.net.ssl.*;
public class myServer implements Runnable {
private ServerSocket server = null;
public myServer(SSLServerSocket ss)
                     System.out.println("Created myServer instance with server socket");
     server = ss;
     newListener();
    private void newListener()
     System.out.println("Created new listener");
         (new Thread(this)).start();
    public void run()
     System.out.println("Listening for connections");
         Socket socket;
         try
          System.out.println("Trying to accept connection");
                                 socket = server.accept();
                              System.out.println("Accepted Connection, starting handshake");
                              ((SSLSocket)socket).addHandshakeCompletedListener(new HandshakeCompletedListener()
               public void     handshakeCompleted(HandshakeCompletedEvent event)
                    System.out.println("Handshake finished!");
                    System.out.println("\t CipherSuite:" +
                    event.getCipherSuite());
                    System.out.println("\t SessionId " +
                    event.getSession());
                    System.out.println("\t PeerHost " +
                    event.getSession().getPeerHost());
                              ((SSLSocket)socket).startHandshake();
         catch (IOException e)
             System.out.println("Class Server died: " + e.getMessage());
             e.printStackTrace();
             return;
         newListener();
}Most of this code came from the sun website, just a couple of tweaks for it to do what I wanted it to.