使用OkHttp实现PKCS12客户端证书认证的POST请求

import java.io.FileInputStream;
import java.io.IOException;
import java.security.KeyStore;
import java.security.KeyStoreException;
import java.security.NoSuchAlgorithmException;
import java.security.UnrecoverableKeyException;
import java.security.cert.CertificateException;
import javax.net.ssl.KeyManagerFactory;
import javax.net.ssl.SSLContext;
import javax.net.ssl.TrustManager;
import javax.net.ssl.TrustManagerFactory;
import javax.net.ssl.X509TrustManager;
import okhttp3.OkHttpClient;
import okhttp3.Request;
import okhttp3.RequestBody;
import okhttp3.MediaType;
import okhttp3.Response;
import java.util.Arrays;

public class CertificateAuthClient {

    private static final String PKCS12_PATH = "C:\tls.p12"; // 替换为您的.p12文件路径
    private static final String PKCS12_PASSWORD = "password"; // 替换为您的.p12文件密码
    private static final String TARGET_URL = "https://your.server.com/api/endpoint"; // 替换为您的目标URL

    public static void main(String[] args) {
        try {
            // 1. 加载PKCS12证书文件
            KeyStore keyStore = KeyStore.getInstance("PKCS12");
            try (FileInputStream fis = new FileInputStream(PKCS12_PATH)) {
                keyStore.load(fis, PKCS12_PASSWORD.toCharArray());
            }

            // 2. 初始化KeyManagerFactory
            KeyManagerFactory keyManagerFactory = KeyManagerFactory.getInstance(KeyManagerFactory.getDefaultAlgorithm());
            keyManagerFactory.init(keyStore, PKCS12_PASSWORD.toCharArray());

            // 3. 初始化SSLContext以支持客户端证书
            SSLContext sslContext = SSLContext.getInstance("TLS");
            // 第一个参数是KeyManagers (客户端证书), 第二个参数是TrustManagers (服务器证书), 第三个参数是安全随机数源
            sslContext.init(keyManagerFactory.getKeyManagers(), null, null);

            // 4. 获取默认的X509TrustManager用于验证服务器证书
            // 这一步是为了确保OkHttp能够信任服务器的证书，通常使用系统默认的信任库
            TrustManagerFactory trustManagerFactory = TrustManagerFactory.getInstance(TrustManagerFactory.getDefaultAlgorithm());
            trustManagerFactory.init((KeyStore) null); // 使用null表示使用系统默认的信任库
            TrustManager[] trustManagers = trustManagerFactory.getTrustManagers();
            if (trustManagers.length != 1 || !(trustManagers[0] instanceof X509TrustManager)) {
                throw new IllegalStateException("Unexpected default trust managers:" + Arrays.toString(trustManagers));
            }
            X509TrustManager x509TrustManager = (X509TrustManager) trustManagers[0];

            // 5. 构建OkHttpClient
            OkHttpClient client = new OkHttpClient.Builder()
                    .sslSocketFactory(sslContext.getSocketFactory(), x509TrustManager)
                    .build();

            // 6. 构造并发送POST请求
            MediaType JSON = MediaType.get("application/json; charset=utf-8");
            String jsonBody = "{"key": "value", "data": "example"}"; // 替换为您的POST请求体
            RequestBody body = RequestBody.create(jsonBody, JSON);

            Request request = new Request.Builder()
                    .url(TARGET_URL)
                    .post(body)
                    .build();

            try (Response response = client.newCall(request).execute()) {
                if (!response.isSuccessful()) {
                    throw new IOException("Unexpected code " + response);
                }
                System.out.println("Response Code: " + response.code());
                System.out.println("Response Body: " + response.body().string());
            }

        } catch (KeyStoreException | IOException | NoSuchAlgorithmException | CertificateException |
                 UnrecoverableKeyException | java.security.KeyManagementException e) {
            e.printStackTrace();
        }
    }
}