JAVA与C++进行sslsocket通信，JAVA做服务端或客户端_java中ssl socket通讯,能否使用cer的证书-CSDN博客

本文链接：https://blog.csdn.net/md_shmily92/article/details/50449042

本文介绍如何使用JAVA作为服务端或客户端，通过读取pem格式的证书和秘钥实现SSLSocket通信。该方法适用于与C++进行跨平台通信。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

一、JAVA做服务端，读取pem格式的证书和秘钥

<span style="font-size:18px;">public class SocketServer extends Thread{
	private static final int SERVER_PORT = 10002; 

	private SSLServerSocket serverSocket;
	
	public SocketServer() {
		// Initialize SSLServer
		try {
			//Load KeyStore And TrustKeyStore
			Security.addProvider(new org.bouncycastle.jce.provider.BouncyCastleProvider());
			//保存服务端的私钥
			KeyStore keyStore = KeyStore.getInstance("JKS");
			keyStore.load(null, null);
//			// 读入服务端证书  
			PEMReader cacertfile = new PEMReader(new InputStreamReader(
					new FileInputStream("d:/cacert.pem")));
			X509Certificate cacert = (X509Certificate) cacertfile.readObject();
			Certificate[] certChain = new Certificate[1];  
			certChain[0] = cacert; 
			cacertfile.close();
	       // 读入私钥  
			PEMReader kr = new PEMReader(new InputStreamReader(new FileInputStream("d:/privkey.pem")));
			KeyPair key = (KeyPair) kr.readObject();
            kr.close();
            // 导入服务端端私钥和证书
            keyStore.setKeyEntry("serverkey", key.getPrivate(), new char[]{}, certChain );
            keyStore.setCertificateEntry("servercert", cacert);  
			//Initialize KeyStore Factory   创建用于管理JKS密钥库的X.509密钥管理器
            KeyManagerFactory keyManagerFactory = KeyManagerFactory.getInstance("SunX509");			
			keyManagerFactory.init(keyStore, "