HTTPS CAS

package com.lch.httpclient;

import java.io.IOException;

import org.apache.commons.httpclient.Cookie;
import org.apache.commons.httpclient.Header;
import org.apache.commons.httpclient.HttpClient;
import org.apache.commons.httpclient.HttpException;
import org.apache.commons.httpclient.HttpMethod;
import org.apache.commons.httpclient.HttpStatus;
import org.apache.commons.httpclient.NameValuePair;
import org.apache.commons.httpclient.methods.GetMethod;
import org.apache.commons.httpclient.methods.PostMethod;
import org.apache.commons.httpclient.params.DefaultHttpParams;
import org.apache.commons.httpclient.params.HttpMethodParams;
import org.apache.commons.httpclient.protocol.Protocol;

public class DominoLogin {
	public static void main(String[] args) throws HttpException, IOException {
		
		Protocol myhttps = new Protocol("https", new MySecureProtocolSocketFactory (), 443);
		Protocol.registerProtocol("https", myhttps);
		
		HttpClient client = new HttpClient();
		client.getHostConfiguration().setHost("127.0.0.1", 8443, myhttps);

		// HttpMethod method = getGetMethod();
		HttpMethod method = getPostMethod();
		//method.addRequestHeader("Content-Type","text/html; charset=gb2312");
		method.getParams().setContentCharset("utf-8");// 设置字符编码
		
		
//		method.addRequestHeader("(Request-Line)", "POST /cas/login;jsessionid=29BF7E8BBDDB367B845F574EA11DFE0F HTTP/1.1");
//		method.addRequestHeader("Accept", "image/gif, image/jpeg, image/pjpeg, image/pjpeg, application/x-shockwave-flash, application/QVOD, application/QVOD, application/msword, application/vnd.ms-excel, application/vnd.ms-powerpoint, */*");
//		method.addRequestHeader("Accept-Encoding", "gzip, deflate");
//		method.addRequestHeader("Accept-Language", "zh-cn");
//		method.addRequestHeader("Cache-Control", "no-cache");
//		method.addRequestHeader("Connection", "Keep-Alive");
//		method.addRequestHeader("Content-Length", "151");
//		method.addRequestHeader("Content-Type", "application/x-www-form-urlencoded");
//		method.addRequestHeader("Cookie", "JSESSIONID=29BF7E8BBDDB367B845F574EA11DFE0F");
//		method.addRequestHeader("Host", "localhost:8443");
//		method.addRequestHeader("Referer", "https://localhost:8443/cas/login");
//		method.addRequestHeader("User-Agent", "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; GTB6.5)");
		DefaultHttpParams.getDefaultParams().setBooleanParameter(HttpMethodParams.SINGLE_COOKIE_HEADER, true);

		int statuscode = client.executeMethod(method);
		System.out.println(method.getStatusLine());
		
		if((statuscode == HttpStatus.SC_MOVED_TEMPORARILY) ||
		   (statuscode == HttpStatus.SC_MOVED_PERMANENTLY) ||
		   (statuscode == HttpStatus.SC_SEE_OTHER)||
		   (statuscode == HttpStatus.SC_TEMPORARY_REDIRECT)){
			System.out.println(statuscode);
			Header header = method.getResponseHeader("location");
			System.out.println(header);
			if(header != null){
				String newuri = header.getValue();
				if((newuri != null) || (!newuri.equals(""))){
					newuri = "/";
					
					GetMethod redirect = new GetMethod(newuri);
					
					client.executeMethod(redirect);
					
					System.out.println("Redirect: " + redirect.getStatusLine().toString() );
					System.out.println("***************************");
					System.out.println(redirect.getResponseBodyAsString());
					redirect.releaseConnection();
				}else{
					System.out.println("Invalid redirect");
				}
			}
		}
		
		method.setRequestHeader("charset", "utf-8");
		// String response = new
		// String(method.getResponseBodyAsString().getBytes("UTF-8"));
		String response = method.getResponseBodyAsString();
		System.out.println(response);
		
		System.out.println("*********************************************");
		Cookie[] cookies = client.getState().getCookies();
		client.getState().addCookies(cookies);
		for(int i=0;i <cookies.length;i++)  
		{  
		  System.out.print(cookies[i].toString());  
		}   
		
		method.releaseConnection();
	}

	private static HttpMethod getPostMethod() {
		PostMethod post = new PostMethod("/cas/login");
		NameValuePair username = new NameValuePair("username", "admin");
		NameValuePair password = new NameValuePair("password", "admin");
		NameValuePair lt = new NameValuePair("lt", "_cD3B3A7E7-A323-F1FB-340B-18A914EE256D_k1CCD75E1-36E0-C3EC-B56A-21B0AB07C99E");
		NameValuePair _eventId = new NameValuePair("_eventId", "submit");
		NameValuePair locale = new NameValuePair("locale", "zh_CN");
		NameValuePair jsessionid = new NameValuePair("jsessionid", "C9E3DF7018D7D5FF2384A7F990C552A9");
		NameValuePair warn = new NameValuePair("warn", "true");
		
		
		
		
		post.setRequestBody(new NameValuePair[] { username, password, lt, _eventId, locale, jsessionid, warn});
		return post;
	}

//	private static HttpMethod getGetMethod() {
//		return new GetMethod("/search.asp?action=mobile&mobile=1368359");
//	}
}

package com.lch.httpclient;

import java.io.IOException;
import java.net.InetAddress;
import java.net.InetSocketAddress;
import java.net.Socket;
import java.net.SocketAddress;
import java.net.UnknownHostException;
import java.security.KeyManagementException;
import java.security.NoSuchAlgorithmException;
import java.security.cert.CertificateException;
import java.security.cert.X509Certificate;

import javax.net.SocketFactory;
import javax.net.ssl.SSLContext;
import javax.net.ssl.TrustManager;
import javax.net.ssl.X509TrustManager;

import org.apache.commons.httpclient.ConnectTimeoutException;
import org.apache.commons.httpclient.params.HttpConnectionParams;
import org.apache.commons.httpclient.protocol.SecureProtocolSocketFactory;

public class MySecureProtocolSocketFactory implements SecureProtocolSocketFactory {
    static{
        System.out.println(">>>>in MySecureProtocolSocketFactory>>");
    }
    private SSLContext sslcontext = null;
    
    private SSLContext createSSLContext() {
        SSLContext sslcontext=null;
        try {
            sslcontext = SSLContext.getInstance("SSL");
            sslcontext.init(null, new TrustManager[]{new TrustAnyTrustManager()}, new java.security.SecureRandom());
        } catch (NoSuchAlgorithmException e) {
            e.printStackTrace();
        } catch (KeyManagementException e) {
            e.printStackTrace();
        }
        return sslcontext;
    }
    
    private SSLContext getSSLContext() {
        if (this.sslcontext == null) {
            this.sslcontext = createSSLContext();
        }
        return this.sslcontext;
    }
    
    public Socket createSocket(Socket socket, String host, int port, boolean autoClose)
            throws IOException, UnknownHostException {
        return getSSLContext().getSocketFactory().createSocket(
                socket,
                host,
                port,
                autoClose
            );
    }

    public Socket createSocket(String host, int port) throws IOException,
            UnknownHostException {
        return getSSLContext().getSocketFactory().createSocket(
                host,
                port
            );
    }
    
    
    public Socket createSocket(String host, int port, InetAddress clientHost, int clientPort)
            throws IOException, UnknownHostException {
        return getSSLContext().getSocketFactory().createSocket(host, port, clientHost, clientPort);
    }

    public Socket createSocket(String host, int port, InetAddress localAddress,
            int localPort, HttpConnectionParams params) throws IOException,
            UnknownHostException, ConnectTimeoutException {
        if (params == null) {
            throw new IllegalArgumentException("Parameters may not be null");
        }
        int timeout = params.getConnectionTimeout();
        SocketFactory socketfactory = getSSLContext().getSocketFactory();
        if (timeout == 0) {
            return socketfactory.createSocket(host, port, localAddress, localPort);
        } else {
            Socket socket = socketfactory.createSocket();
            SocketAddress localaddr = new InetSocketAddress(localAddress, localPort);
            SocketAddress remoteaddr = new InetSocketAddress(host, port);
            socket.bind(localaddr);
            socket.connect(remoteaddr, timeout);
            return socket;
        }
    }
    
    //自定义私有类
    private static class TrustAnyTrustManager implements X509TrustManager {
       
        public void checkClientTrusted(X509Certificate[] chain, String authType) throws CertificateException {
        }
   
        public void checkServerTrusted(X509Certificate[] chain, String authType) throws CertificateException {
        }
   
        public X509Certificate[] getAcceptedIssuers() {
            return new X509Certificate[]{};
        }
    }
    

}

package com.lch.test;

import java.io.IOException;

import org.apache.commons.httpclient.Header;
import org.apache.commons.httpclient.HttpClient;
import org.apache.commons.httpclient.HttpException;
import org.apache.commons.httpclient.HttpMethod;
import org.apache.commons.httpclient.HttpStatus;
import org.apache.commons.httpclient.NameValuePair;
import org.apache.commons.httpclient.methods.GetMethod;
import org.apache.commons.httpclient.methods.PostMethod;

public class DominoLT {

	public static void main(String[] args) throws HttpException, IOException {
		HttpClient client = new HttpClient();
		client.getHostConfiguration().setHost("******", 808, "http");
		
		//HttpMethod method = getGetMethod();
		HttpMethod method = getPostMethod();
		method.getParams().setContentCharset("GB2312");
		
		int statuscode = client.executeMethod(method);
		System.out.println(method.getStatusLine());
		method.setRequestHeader("charset", "gb2312");
		//String response = new String(method.getResponseBodyAsString().getBytes("UTF-8"));
		String response = method.getResponseBodyAsString();
		System.out.println(response);
		
		if((statuscode == HttpStatus.SC_MOVED_TEMPORARILY) ||
		   (statuscode == HttpStatus.SC_MOVED_PERMANENTLY) ||
		   (statuscode == HttpStatus.SC_SEE_OTHER)||
		   (statuscode == HttpStatus.SC_TEMPORARY_REDIRECT)){
			
			System.out.println(statuscode);
			Header header = method.getResponseHeader("location");
			System.out.println(header);
			String newuri = header.getValue();
			PostMethod redirect = new PostMethod(newuri);
			client.executeMethod(redirect);
			System.out.println("Redirect: " + redirect.getStatusLine().toString() );
			System.out.println("************0***************");
			System.out.println(redirect.getResponseBodyAsString());
			System.out.println("************1***************");
			
			PostMethod Red = new PostMethod("http://*******/cxoanew/index.nsf/SForm01?OpenForm");
			client.executeMethod(Red);
			System.out.println(Red.getResponseBodyAsString());
			System.out.println("************2***************");
			redirect.releaseConnection();
		}
		
		method.releaseConnection();
	}

	private static HttpMethod getPostMethod() {
		PostMethod post = new PostMethod("/names.nsf?Login");
		
		NameValuePair username = new NameValuePair("username","****");
		NameValuePair password = new NameValuePair("password","****");
		
		post.setRequestBody(new NameValuePair[] {username, password});
		return post;
	}

	private static HttpMethod getGetMethod() {
		return new GetMethod("/names.nsf?Login?username=*****&password=****");
	}
}

评论

1 楼 xfei6868 2011-03-23  

项目配置了cas，登录后，有时候有些提交或者查询仍然会去cas验证一下。
这时候验证回来会跟一个cas的串，但是如果是post提交，post的数据就没了。