Java中通过PKCS12证书实现OkHttp客户端认证的POST请求

import java.io.FileInputStream;
import java.security.KeyStore;
import java.security.SecureRandom;
import javax.net.ssl.KeyManagerFactory;
import javax.net.ssl.SSLContext;
import javax.net.ssl.TrustManager;
import javax.net.ssl.TrustManagerFactory;
import javax.net.ssl.X509TrustManager;
import okhttp3.OkHttpClient;
import okhttp3.Request;
import okhttp3.RequestBody;
import okhttp3.MediaType;
import okhttp3.Response;
import java.util.Arrays;

public class OkHttpClientCertAuth {

    public static void main(String[] args) {
        String p12FilePath = "C:/tls.p12"; // 替换为您的证书文件路径
        String p12Password = "password"; // 替换为您的证书密码
        String targetUrl = "https://your.secure.server/api/post"; // 替换为您的目标URL
        String postBody = "{\"key\":\"value\"}"; // 替换为您的POST请求体

        try {
            // 1. 加载PKCS12证书
            KeyStore ks = KeyStore.getInstance("PKCS12");
            try (FileInputStream fis = new FileInputStream(p12FilePath)) {
                ks.load(fis, p12Password.toCharArray());
            }

            // 2. 初始化KeyManagerFactory
            KeyManagerFactory kmf = KeyManagerFactory.getInstance(KeyManagerFactory.getDefaultAlgorithm());
            kmf.init(ks, p12Password.toCharArray());

            // 3. 初始化SSLContext用于客户端认证
            SSLContext sslContext = SSLContext.getInstance("TLS");
            sslContext.init(kmf.getKeyManagers(), null, new SecureRandom()); // 第一个参数是KeyManagers，第二个参数是TrustManagers，第三个是SecureRandom

            // 4. 获取默认的X509TrustManager用于服务器信任验证
            TrustManagerFactory trustManagerFactory = TrustManagerFactory.getInstance(TrustManagerFactory.getDefaultAlgorithm());
            trustManagerFactory.init((KeyStore) null); // 使用默认的信任库
            TrustManager[] trustManagers = trustManagerFactory.getTrustManagers();

            if (trustManagers.length != 1 || !(trustManagers[0] instanceof X509TrustManager)) {
                throw new IllegalStateException("Unexpected default trust managers:" + Arrays.toString(trustManagers));
            }
            X509TrustManager trustManager = (X509TrustManager) trustManagers[0];

            // 5. 配置OkHttpClient
            OkHttpClient client = new OkHttpClient.Builder()
                    .sslSocketFactory(sslContext.getSocketFactory(), trustManager)
                    .build();

            // 6. 构建并发送POST请求
            MediaType JSON = MediaType.get("application/json; charset=utf-8");
            RequestBody body = RequestBody.create(postBody, JSON);
            Request request = new Request.Builder()
                    .url(targetUrl)
                    .post(body)
                    .build();

            try (Response response = client.newCall(request).execute()) {
                if (!response.isSuccessful()) {
                    throw new RuntimeException("请求失败: " + response.code() + " " + response.message());
                }
                System.out.println("响应成功: " + response.body().string());
            }

        } catch (Exception e) {
            System.err.println("发生错误: " + e.getMessage());
            e.printStackTrace();
        }
    }
}