netty socket ssl信任所有证书

[蒲锦_up]

客户端发起跟服务端的连接。

创建Ctx，不使用证书，默认信任所有。

public class SslContextFactory {

    private static final SSLContext SERVER_CONTEXT;

    static {
        try {
            KeyManager[] keyManagers = new KeyManager[]{};
            KeyManager keyManager = new KeyManager() {

            };
            keyManagers[0] = keyManager;
            TrustManager[] trustAllCerts = new TrustManager[]{};
            TrustManager tm = new TrustManager() {
            };
            trustAllCerts[0] = tm;

            SSLContext sc = SSLContext.getInstance("TLS");
            sc.init(keyManagers, trustAllCerts, null);
            SERVER_CONTEXT = sc;
        } catch (Exception e) {
            throw new Error("Failed to initialize the client-side SSLContext", e);
        }
    }

    public static SSLContext getServerContext() {
        return SERVER_CONTEXT;
    }
}

在ChannelInitializer中导入证书信息。

   @Override
                protected void initChannel(SocketChannel ch) throws Exception {
//                    SSLContext clientContext = SSLContext.getDefault();
                    SSLContext clientContext = SslContextFactory.getServerContext();
                    //SSLEngine engine = clientContext.createSSLEngine();
                    SSLEngine engine = clientContext.createSSLEngine(socketAddress, socketPort);
                    engine.setUseClientMode(true);
                    engine.setNeedClientAuth(false);
                    ch.pipeline().addLast(new SslHandler(engine));

试了很久，还是没有连接失败了。哪位大神指点下啊 谢谢！