在Java NetBeans上使用证书进行双向SSL身份验证

Question

我已经使用openSSL为客户端和服务器创建了密钥和证书。 这两个证书均由同一CA签名，因此客户端和服务器可以相互信任。 现在，我需要在程序中使用这些证书，以实现双向身份验证，但是我不知道如何在当前代码中“导入”它们。 到目前为止，这是我所做的。

服务器端

import java.io.*;
import java.io.*;
import javax.net.ssl.SSLServerSocket;
import javax.net.ssl.SSLServerSocketFactory;
import javax.net.ssl.SSLSocket;
import static java.lang.System.*;

public class SSlServer {
    public static void main(String[] args) {
        SSLSocket sslsocket=null;
        try 
        {
            SSLServerSocketFactory sslserversocketfactory =(SSLServerSocketFactory) SSLServerSocketFactory.getDefault();
            SSLServerSocket sslserversocket =(SSLServerSocket) sslserversocketfactory.createServerSocket(5555);


        while (true)
        {
            sslsocket = (SSLSocket) sslserversocket.accept();
            BufferedReader in = new BufferedReader(new InputStreamReader(sslsocket.getInputStream()));
            BufferedWriter out = new BufferedWriter(new OutputStreamWriter(sslsocket.getOutputStream()));

           /* other stuff being done here */
           /*............................*/

        }
    } catch (IOException ex) {
        System.out.println("Error in socket");
    } finally 
    {
        if (sslsocket != null)
        {
            try {
                in.close();
                out.close();
                sslsocket.close();
            } catch (IOException ex) {
                System.out.println("Exception in close");
            }
        }
    }
}

客户端

import java.io.*;
import java.net.UnknownHostException;
import java.util.Scanner;
import java.util.logging.Level;
import java.util.logging.Logger;
import javax.swing.JOptionPane;
import javax.net.ssl.SSLSocket;
import javax.net.ssl.SSLSocketFactory;

public class SSlClient {

    public static void main(String[] args) {
        try {
            SSLSocketFactory sslsocketfactory = (SSLSocketFactory) SSLSocketFactory.getDefault();
            SSLSocket sslsocket = (SSLSocket) sslsocketfactory.createSocket("localhost", 5555);



        /* other stuff being done here */
       /*............................*/

      sslsocket.close();

    } catch (UnknownHostException ex) {
        Logger.getLogger(SSlClient.class.getName()).log(Level.SEVERE, null, ex);
    } catch (IOException ex) {
        Logger.getLogger(SSlClient.class.getName()).log(Level.SEVERE, null, ex);
    }
}

}