在TLS1.2上创建ActiveMQ连接

我们不得不删除SSLV3支持。 所以我们改变了activemq配置。 我们添加了transportConnector并设置enabledProtocol =’TLS1.1，TLS1.2’。 所以它应该支持TLS1.1或TLS1.2但我不知道如何在创建连接时指定协议。 现在它给了我错误SSLV2Hello被禁用。 所以我的问题是如何在创建连接时给出协议列表。 我试过它SSLSocket但无法通过。 有人可以给我一些线索..

String keyStorePath = "abc.ks"; String keyStorePassword = "XYZ"; String trustStore = "cks.ts"; java.lang.System.setProperty("javax.net.ssl.keyStore", keyStorePath); java.lang.System.setProperty("javax.net.ssl.keyStorePassword", keyStorePassword); java.lang.System.setProperty("javax.net.ssl.trustStore", trustStore); String connectionURL = 'URL?initialReconnectDelay=10&maxReconnectDelay=10&maxReconnectAttempts=2&jms.watchTopicAdvisories=false&wireFormat.maxInactivityDuration=3600000'; ConnectionFactory factory = new ActiveMQSslConnectionFactory(connectionURL); Connection connection = factory.createConnection(user, pwd); 

Answer 1

最后它对我有用。

 String keyStorePassword = "123456"; String configPath = "C:\\ssl\\"; String keyStorePath = configPath + "client.ks"; KeyStore ks = KeyStore.getInstance("jks"); String trustStore = configPath + "trust.ts"; java.lang.System.setProperty("javax.net.ssl.trustStore", trustStore); java.lang.System.setProperty("javax.net.ssl.trustStorePassword", keyStorePassword); InputStream ksIs = new FileInputStream(keyStorePath); try { ks.load(ksIs, keyStorePassword.toCharArray()); } finally { if (ksIs != null) { ksIs.close(); } } KeyManagerFactory kmf = KeyManagerFactory.getInstance(KeyManagerFactory.getDefaultAlgorithm()); kmf.init(ks, keyStorePassword.toCharArray()); TrustManager[] trustAllCerts = new TrustManager[] { new X509TrustManager() { public void checkClientTrusted(java.security.cert.X509Certificate[] certs, String authType) { } public void checkServerTrusted(java.security.cert.X509Certificate[] certs, String authType) { } public java.security.cert.X509Certificate[] getAcceptedIssuers() { return null; } } }; final SSLContext sslContext = SSLContext.getInstance("TLSv1.2"); ConnectionFactory factory = new ActiveMQSslConnectionFactory(URL); sslContext.init(kmf.getKeyManagers(), trustAllCerts, new SecureRandom()); SslContext context = new SslContext(); context.setSSLContext(sslContext); SslContext.setCurrentSslContext(context); Connection connection = factory.createConnection(loginName, pwd); connection.start(); Session session = connection.createSession(false, Session.AUTO_ACKNOWLEDGE); MessageProducer nonPersistentProducer = session.createProducer(null); session.close(); connection.close();