Https authentication

Skal du bare bruge HTTPS eller skal du bare bruge BASIC authentication eller
skal du bruge begge dele ?

Err, det ved jeg ikke helt, vil skyde på https.

Jeg forsøger at forbinde til denne side:
https://telelink.dk/dabtop.html

Det er begge dele.

Ok perfekt. Har du en god tutorial jeg kan læse, eller lign?

Næh, men jeg kan da prøve at se om jeg kan lave et eksempel.

Det kunne være helt perfekt!  Tusind tak!

HTTP med BASIC authentication:

import java.net.*;
import java.io.*;

public class HttpGetAuth {
    public static void main(String[] args) {
        try {
            Authenticator.setDefault(new MyAuthenticator());
            URL url = new URL("http://www.xxxx.dk/prot2.html");
            HttpURLConnection con = (HttpURLConnection) url.openConnection();
            if (con.getResponseCode() == HttpURLConnection.HTTP_OK) {
                InputStream is = con.getInputStream();
                OutputStream os = new FileOutputStream("C:\\z.z");
                byte[] b = new byte[1000];
                int n;
                while ((n = is.read(b)) >= 0) {
                    os.write(b, 0, n);
                }
                os.close();
                is.close();
            }
            con.disconnect();
        } catch (MalformedURLException e) {
            e.printStackTrace();
        } catch (FileNotFoundException e) {
            e.printStackTrace();
        } catch (IOException e) {
            e.printStackTrace();
        }
    }
}

class MyAuthenticator extends Authenticator {
    protected PasswordAuthentication getPasswordAuthentication() {
        return new PasswordAuthentication("xxxx", "xxxx".toCharArray());
    }
}

HTTPS:

import java.net.*;
import java.io.*;
import java.security.*;
import java.security.cert.*;

import javax.net.ssl.*;

public class HttpsGet {
    public static void main(String[] args) {
        try {
            SSLContext sslctx = SSLContext.getInstance("SSL");
            sslctx.init(null, new X509TrustManager[] { new MyTrustManager() }, null);
            HttpsURLConnection.setDefaultSSLSocketFactory(sslctx.getSocketFactory());
            //HttpsURLConnection.setDefaultHostnameVerifier(new MyHostnameVerifier());
            URL url = new URL("https://www.xxxx.dk/");
            HttpsURLConnection con = (HttpsURLConnection) url.openConnection();
            if (con.getResponseCode() == HttpsURLConnection.HTTP_OK) {
                InputStream is = con.getInputStream();
                OutputStream os = new FileOutputStream("C:\\z.z");
                byte[] b = new byte[1000];
                int n;
                while ((n = is.read(b)) >= 0) {
                    os.write(b, 0, n);
                }
                os.close();
                is.close();
            }
            con.disconnect();
        } catch (NoSuchAlgorithmException e) {
            e.printStackTrace();
        } catch (KeyManagementException e) {
            e.printStackTrace();
        } catch (MalformedURLException e) {
            e.printStackTrace();
        } catch (FileNotFoundException e) {
            e.printStackTrace();
        } catch (IOException e) {
            e.printStackTrace();
        }
    }
}

class MyTrustManager implements X509TrustManager
{
    public void checkClientTrusted(X509Certificate[] chain, String authType) {
    }
    public void checkServerTrusted(X509Certificate[] chain, String authType) {
    }
    public X509Certificate[] getAcceptedIssuers() {
        return null;
    }
}

//class MyHostnameVerifier implements HostnameVerifier {
//    public boolean verify(String urlHostName, SSLSession session) {
//        return true;
//    }
//}

HTTPS med BASIC authentication:

import java.net.*;
import java.io.*;
import java.security.*;
import java.security.cert.*;

import javax.net.ssl.*;

public class HttpsGetAuth {
    public static void main(String[] args) {
        try {
            SSLContext sslctx = SSLContext.getInstance("SSL");
            sslctx.init(null, new X509TrustManager[] { new MyTrustManager() }, null);
            HttpsURLConnection.setDefaultSSLSocketFactory(sslctx.getSocketFactory());
            //HttpsURLConnection.setDefaultHostnameVerifier(new MyHostnameVerifier());
              Authenticator.setDefault(new MyAuthenticator());
            URL url = new URL("https://www.xxxx.dk/prot4.html");
            HttpsURLConnection con = (HttpsURLConnection) url.openConnection();
            if (con.getResponseCode() == HttpsURLConnection.HTTP_OK) {
                InputStream is = con.getInputStream();
                OutputStream os = new FileOutputStream("C:\\z.z");
                byte[] b = new byte[1000];
                int n;
                while ((n = is.read(b)) >= 0) {
                    os.write(b, 0, n);
                }
                os.close();
                is.close();
            }
            con.disconnect();
        } catch (NoSuchAlgorithmException e) {
            e.printStackTrace();
        } catch (KeyManagementException e) {
            e.printStackTrace();
        } catch (MalformedURLException e) {
            e.printStackTrace();
        } catch (FileNotFoundException e) {
            e.printStackTrace();
        } catch (IOException e) {
            e.printStackTrace();
        }
    }
}

class MyTrustManager implements X509TrustManager
{
    public void checkClientTrusted(X509Certificate[] chain, String authType) {
    }
    public void checkServerTrusted(X509Certificate[] chain, String authType) {
    }
    public X509Certificate[] getAcceptedIssuers() {
        return null;
    }
}

//class MyHostnameVerifier implements HostnameVerifier {
//    public boolean verify(String urlHostName, SSLSession session) {
//        return true;
//    }
//}

class MyAuthenticator extends Authenticator {
    protected PasswordAuthentication getPasswordAuthentication() {
        return new PasswordAuthentication("xxxx", "xxxx".toCharArray());
    }
}

svar

(og du er meget velkommen til at give lidt ekstra point - det var ikke helt nemt med HTTPS)

Tusind tak!

Det var meget pænt - jeg takker også.