在Android上实现SSL握手（客户端需要密钥和证书），实现服务器和客户端之间Socket交互

Android的私钥和信任证书的格式必须是BKS格式的，通过配置本地JDK，让keytool可以生成BKS格式的私钥和信任证书,java本身没有BouncyCastle密库

服务端：
Java代码

public class SSLServer {  
  
    private static final int SERVER_PORT = 50030;  
    private static final String SERVER_KEY_PASSWORD = "123456";  
    private static final String SERVER_AGREEMENT = "TLS";//使用协议  
    private static final String SERVER_KEY_MANAGER = "SunX509";//密钥管理器  
    private static final String SERVER_KEY_KEYSTORE = "JKS";//密库，这里用的是Java自带密库  
    private static final String SERVER_KEYSTORE_PATH = "src/data/kserver.keystore";//密库路径  
    private SSLServerSocket serverSocket;  
  
    public static void main(String[] args) {  
        SSLServer server = new SSLServer();  
        server.init();  
        server.start();  
    }  
  
    //由于该程序不是演示Socket监听，所以简单采用单线程形式，并且仅仅接受客户端的消息，并且返回客户端指定消息  
    public void start() {  
        if (serverSocket == null) {  
            System.out.println("ERROR");  
            return;  
        }  
        while (true) {  
            try {  
                System.out.println("Server Side......");  
                Socket s = serverSocket.accept();  
                InputStream input = s.getInputStream();  
                OutputStream output = s.getOutputStream();  
  
                BufferedInputStream bis = new BufferedInputStream(input);  
                BufferedOutputStream bos = new BufferedOutputStream(output);  
  
                byte[] buffer = new byte[20];  
                bis.read(buffer);  
                System.out.println(new String(buffer));  
  
                bos.write("This is Server".getBytes());  
                bos.flush();  
  
                s.close();  
            } catch (Exception e) {  
                System.out.println(e);  
            }  
        }  
    }  
      
    public void init() {  
        try {  
            //取得SSLContext  
            SSLContext ctx = SSLContext.getInstance(SERVER_AGREEMENT);  
            //取得SunX509私钥管理器  
            KeyManagerFactory kmf = KeyManagerFactory.getInstance(SERVER_KEY_MANAGER);  
            //取得JKS密库实例  
            KeyStore ks = KeyStore.getInstance(SERVER_KEY_KEYSTORE);  
            //加载服务端私钥  
            ks.load(new FileInputStream(SERVER_KEYSTORE_PATH), SERVER_KEY_PASSWORD.toCharArray());  
            //初始化  
            kmf.init(ks, SERVER_KEY_PASSWORD.toCharArray());  
            //初始化SSLContext  
            ctx.init(kmf.getKeyManagers(),null, null);  
            //通过SSLContext取得ServerSocketFactory，创建ServerSocket  
            serverSocket = (SSLServerSocket) ctx.getServerSocketFactory().createServerSocket(SERVER_PORT);  
        } catch (Exception e) {  
            System.out.println(e);  
        }  
    }  
}  

客户端：
Java代码

public class MySSLSocket extends Activity {  
    private static final int SERVER_PORT = 50030;//端口号  
    private static final String SERVER_IP = "218.206.176.146";//连接IP  
    private static final String CLIENT_KET_PASSWORD = "123456";//私钥密码  
    private static final String CLIENT_TRUST_PASSWORD = "123456";//信任证书密码  
    private static final String CLIENT_AGREEMENT = "TLS";//使用协议  
    private static final String CLIENT_KEY_MANAGER = "X509";//密钥管理器  
    private static final String CLIENT_TRUST_MANAGER = "X509";//  
    private static final String CLIENT_KEY_KEYSTORE = "BKS";//密库，这里用的是BouncyCastle密库  
    private static final String CLIENT_TRUST_KEYSTORE = "BKS";//  
    private static final String ENCONDING = "utf-8";//字符集  
    private SSLSocket Client_sslSocket;  
    private Log tag;  
    private TextView tv;  
    private Button btn;  
    private Button btn2;  
    private Button btn3;  
    private EditText et;  
      
    /** Called when the activity is first created. */  
    @Override  
    public void onCreate(Bundle savedInstanceState) {  
        super.onCreate(savedInstanceState);  
        setContentView(R.layout.main);  
        tv = (TextView) findViewById(R.id.TextView01);  
        et = (EditText) findViewById(R.id.EditText01);  
        btn = (Button) findViewById(R.id.Button01);  
        btn2 = (Button) findViewById(R.id.Button02);  
        btn3 = (Button) findViewById(R.id.Button03);  
          
        btn.setOnClickListener(new Button.OnClickListener(){  
            @Override  
            public void onClick(View arg0) {  
                if(null != Client_sslSocket){  
                    getOut(Client_sslSocket, et.getText().toString());  
                    getIn(Client_sslSocket);  
                    et.setText("");  
                }  
            }  
        });  
        btn2.setOnClickListener(new Button.OnClickListener(){  
            @Override  
            public void onClick(View arg0) {  
                try {  
                    Client_sslSocket.close();  
                    Client_sslSocket = null;  
                } catch (IOException e) {  
                    e.printStackTrace();  
                }  
            }  
        });  
        btn3.setOnClickListener(new View.OnClickListener(){  
            @Override  
            public void onClick(View arg0) {  
                init();  
                getIn(Client_sslSocket);  
            }  
        });  
    }  
      
    public void init() {  
        try {  
            //取得SSL的SSLContext实例  
            SSLContext sslContext = SSLContext.getInstance(CLIENT_AGREEMENT);  
            //取得KeyManagerFactory和TrustManagerFactory的X509密钥管理器实例  
            KeyManagerFactory keyManager = KeyManagerFactory.getInstance(CLIENT_KEY_MANAGER);  
            TrustManagerFactory trustManager = TrustManagerFactory.getInstance(CLIENT_TRUST_MANAGER);  
            //取得BKS密库实例  
            KeyStore kks= KeyStore.getInstance(CLIENT_KEY_KEYSTORE);  
            KeyStore tks = KeyStore.getInstance(CLIENT_TRUST_KEYSTORE);  
            //加客户端载证书和私钥,通过读取资源文件的方式读取密钥和信任证书  
            kks.load(getBaseContext()  
                    .getResources()  
                    .openRawResource(R.drawable.kclient),CLIENT_KET_PASSWORD.toCharArray());  
            tks.load(getBaseContext()  
                    .getResources()  
                    .openRawResource(R.drawable.lt_client),CLIENT_TRUST_PASSWORD.toCharArray());  
            //初始化密钥管理器  
            keyManager.init(kks,CLIENT_KET_PASSWORD.toCharArray());  
            trustManager.init(tks);  
            //初始化SSLContext  
            sslContext.init(keyManager.getKeyManagers(),trustManager.getTrustManagers(),null);  
            //生成SSLSocket  
            Client_sslSocket = (SSLSocket) sslContext.getSocketFactory().createSocket(SERVER_IP,SERVER_PORT);  
        } catch (Exception e) {  
            tag.e("MySSLSocket",e.getMessage());  
        }  
    }  
          
    public void getOut(SSLSocket socket,String message){  
        PrintWriter out;  
        try {  
            out = new PrintWriter(  
                    new BufferedWriter(  
                            new OutputStreamWriter(  
                                    socket.getOutputStream()  
                                    )  
                            ),true);  
            out.println(message);  
        } catch (IOException e) {  
            e.printStackTrace();  
        }  
    }  
      
    public void getIn(SSLSocket socket){  
        BufferedReader in = null;  
        String str = null;  
        try {  
            in = new BufferedReader(  
                    new InputStreamReader(  
                            socket.getInputStream()));  
            str = new String(in.readLine().getBytes(),ENCONDING);  
        } catch (UnsupportedEncodingException e) {  
            e.printStackTrace();  
        } catch (IOException e) {  
            e.printStackTrace();  
        }  
        new AlertDialog  
        .Builder(MySSLSocket.this)  
        .setTitle("服务器消息")  
        .setNegativeButton("确定", null)  
        .setIcon(android.R.drawable.ic_menu_agenda)  
        .setMessage(str)  
        .show();  
    }  
}