Java 6 or 7 HTTPS get post with TLSv1.2

Question

I have problem to connect on https get/post using tlsv1.2 via java.

Somebody have a guide or some examples that work? I imported by keytool private and public key setted by password on keystore. I used a SSLSocketFactory but I got only errors https (not handshake). I added parameters in jvm -Dhttps.protocols="TLSv1.2" to enable only version 1.2 of TLS. But nothing ...

An example please or a guide from import certificate to implements the class and using SSLSocketFactory.

Thanks a lot for your help...

I haven't handshake error...I get connection closed by peer http error 403 — SkyBlackHawk, Jul 18 '16 at 08:19

score 1 · Answer 1 · answered Jul 18 '16 at 08:52

1

Java 6 does NOT support tls1.2 link, if used java 6 you cannot enable TLS1.2.

answered Jul 18 '16 at 08:52

Đô Nguyễn

47
9

score 0 · Answer 2 · answered Jul 18 '16 at 08:33

I hope this will work

InputStream is = new FileInputStream("cert.crt");

CertificateFactory cf = CertificateFactory.getInstance("X.509");
X509Certificate caCert = (X509Certificate)cf.generateCertificate(is);

TrustManagerFactory tmf = TrustManagerFactory
    .getInstance(TrustManagerFactory.getDefaultAlgorithm());
KeyStore ks = KeyStore.getInstance(KeyStore.getDefaultType());
ks.load(null); // You don't need the KeyStore instance to come from a file.
ks.setCertificateEntry("caCert", caCert);

tmf.init(ks);

SSLContext sslContext = SSLContext.getInstance("TLS");
sslContext.init(null, tmf.getTrustManagers(), null);

And to create SocketFactory

SSLConnectionSocketFactory sslsf = new SSLConnectionSocketFactory(sslcontext, new String[] { "TLSv1.2" }, null,
            SSLConnectionSocketFactory.ALLOW_ALL_HOSTNAME_VERIFIER);

score 0 · Answer 3 · edited May 23 '17 at 12:08

I had the same problem and finally build my own "TLSConnectionFactory" based on BouncyCasttle Provider. The code is shared here

So, after you can use this TLSConnectionFactory this simple and quick way:

     String httpsURL =  xxxxxxxxxx
    URL myurl = new URL(httpsURL);      
    HttpsURLConnection  con = (HttpsURLConnection )myurl.openConnection();
    con.setSSLSocketFactory(new TSLSocketConnectionFactory());   
    InputStream ins = con.getInputStream();

Java 6 or 7 HTTPS get post with TLSv1.2

3 Answers3