1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
| package com.memorynotfound.httpclient;
import org.apache.http.HttpResponseInterceptor;
import org.apache.http.client.methods.HttpGet;
import org.apache.http.client.utils.DateUtils;
import org.apache.http.conn.ManagedHttpClientConnection;
import org.apache.http.impl.client.CloseableHttpClient;
import org.apache.http.impl.client.HttpClients;
import org.apache.http.protocol.BasicHttpContext;
import org.apache.http.protocol.HttpContext;
import org.apache.http.protocol.HttpCoreContext;
import javax.net.ssl.SSLSession;
import java.io.IOException;
import java.security.cert.Certificate;
import java.security.cert.X509Certificate;
/**
* This example demonstrates how to obtain server certificates {@link X509Certificate}.
*/
public class HttpClientGetServerCertificate {
public static final String PEER_CERTIFICATES = "PEER_CERTIFICATES";
public static void main(String... args) throws IOException {
// create http response certificate interceptor
HttpResponseInterceptor certificateInterceptor = (httpResponse, context) -> {
ManagedHttpClientConnection routedConnection = (ManagedHttpClientConnection)context.getAttribute(HttpCoreContext.HTTP_CONNECTION);
SSLSession sslSession = routedConnection.getSSLSession();
if (sslSession != null) {
// get the server certificates from the {@Link SSLSession}
Certificate[] certificates = sslSession.getPeerCertificates();
// add the certificates to the context, where we can later grab it from
context.setAttribute(PEER_CERTIFICATES, certificates);
}
};
// create closable http client and assign the certificate interceptor
CloseableHttpClient httpClient = HttpClients
.custom()
.addInterceptorLast(certificateInterceptor)
.build();
try {
// make HTTP GET request to resource server
HttpGet httpget = new HttpGet("https://google.com");
System.out.println("Executing request " + httpget.getRequestLine());
// create http context where the certificate will be added
HttpContext context = new BasicHttpContext();
httpClient.execute(httpget, context);
// obtain the server certificates from the context
Certificate[] peerCertificates = (Certificate[])context.getAttribute(PEER_CERTIFICATES);
// loop over certificates and print meta-data
for (Certificate certificate : peerCertificates){
X509Certificate real = (X509Certificate) certificate;
System.out.println("----------------------------------------");
System.out.println("Type: " + real.getType());
System.out.println("Signing Algorithm: " + real.getSigAlgName());
System.out.println("IssuerDN Principal: " + real.getIssuerX500Principal());
System.out.println("SubjectDN Principal: " + real.getSubjectX500Principal());
System.out.println("Not After: " + DateUtils.formatDate(real.getNotAfter(), "dd-MM-yyyy"));
System.out.println("Not Before: " + DateUtils.formatDate(real.getNotBefore(), "dd-MM-yyyy"));
}
} finally {
// close httpclient
httpClient.close();
}
}
}
|