如何使播放框架WS使用我的SSLContext

Question

我使用Play 2.3.7与Scala 2.11.4，Java 7.我想使用Play WS连接到HTTPS端点，需要客户端提交其证书。要做到这一点我创造我自己的SSL连接：

val sslContext = { 
    val keyStore = KeyStore.getInstance("pkcs12") 
    keyStore.load(new FileInputStream(clientKey), clientKeyPass.to[Array]) 
    val kmf = KeyManagerFactory.getInstance(KeyManagerFactory.getDefaultAlgorithm) 
    kmf.init(keyStore, clientKeyPass.to[Array]) 

    val trustStore = KeyStore.getInstance("jks") 
    trustStore.load(new FileInputStream(trustStoreFile), trustStorePass.to[Array]) 
    val tmf = TrustManagerFactory.getInstance(TrustManagerFactory.getDefaultAlgorithm) 
    tmf.init(trustStore) 

    val ctx = SSLContext.getInstance("TLSv1.2") 
    ctx.init(kmf.getKeyManagers, tmf.getTrustManagers, new SecureRandom()) 
    ctx 
    } 

我知道，那的SSLContext是有效的，因为我可以用URLConnection的成功使用它：

def urlConnection = Action { 
    val conn = new URL(url).openConnection() 
    conn.asInstanceOf[HttpsURLConnection].setSSLSocketFactory(sslContext.getSocketFactory) 
    conn.connect() 
    Ok(scala.io.Source.fromInputStream(conn.getInputStream).getLines().mkString("\n")) 
    } 

但是当我尝试以下两种方式之一我得到java.nio.channels.ClosedChannelException。

def ning = Action.async { 
    val builder = new AsyncHttpClientConfig.Builder() 
    builder.setSSLContext(sslContext) 
    val client = new NingWSClient(builder.build()) 
    client.url(url).get() map { _ => Ok("ok") } 
    } 

    def asyncHttpClient = Action { 
    val builder = new AsyncHttpClientConfig.Builder() 
    builder.setSSLContext(sslContext) 
    val httpClient = new AsyncHttpClient(builder.build()) 
    httpClient.prepareGet(url).execute().get(10, TimeUnit.SECONDS) 
    Ok("ok") 
    } 

我也得到了同样的异常的时候我会萨金特的建议后去使用NingAsyncHttpClientConfigBuilder与解析的配置（注意，该配置参考一模一样值，手工制作的SSLContext一样）。

def ningFromConfig = Action.async { 
    val config = play.api.Configuration(ConfigFactory.parseString(
     s""" 
      |ws.ssl { 
      | keyManager = { 
      | stores = [ 
      |  { type: "PKCS12", path: "$clientKey", password: "$clientKeyPass" } 
      | ] 
      | } 
      | trustManager = { 
      | stores = [ 
      |  { type: "JKS", path: "$trustStoreFile", password: "$trustStorePass" }, 
      | ] 
      | } 
      |} 
      |# Without this one I get InvalidAlgorithmParameterException: the trustAnchors parameter must be non-empty 
      |ws.ssl.disabledKeyAlgorithms="RSA keySize < 1024" 
     """.stripMargin)) 
    val parser = new DefaultWSConfigParser(config, play.api.Play.application.classloader) 
    val builder = new NingAsyncHttpClientConfigBuilder(parser.parse()) 
    val client = new NingWSClient(builder.build()) 
    client.url(url).get() map { _ => Ok("ok") } 
    } 

如何使其与播放WS工作？

Answer 1

，则应该使用application.conf客户端证书为https://www.playframework.com/documentation/2.3.x/KeyStores和https://www.playframework.com/documentation/2.3.x/ExampleSSLConfig定义 - 如果你需要使用一个自定义的配置，您应该直接使用的解析器：

https://github.com/playframework/playframework/blob/2.3.x/framework/src/play-ws/src/test/scala/play/api/libs/ws/DefaultWSConfigParserSpec.scala#L14

创建配置，那么宁建设者：

https://github.com/playframework/playframework/blob/2.3.x/framework/src/play-ws/src/test/scala/play/api/libs/ws/ning/NingAsyncHttpClientConfigBuilderSpec.scala#L33

，这将给你的AHCConfig对象，你可以在通过有实例英寸https://www.playframework.com/documentation/2.3.x/ScalaWS的“使用WSClient”部分。