如何强制JavaMailSenderImpl使用TLS1.2？（java强行）

25-03-01 14

这篇文章主要围绕如何强制JavaMailSenderImpl使用TLS1.2？和java强行展开，旨在为您提供一份详细的参考资料。我们将全面介绍如何强制JavaMailSenderImpl使用TLS1

这篇文章主要围绕如何强制JavaMailSenderImpl使用TLS1.2？和java强行展开，旨在为您提供一份详细的参考资料。我们将全面介绍如何强制JavaMailSenderImpl使用TLS1.2？的优缺点，解答java强行的相关问题，同时也会为您带来com.amazonaws.services.simpleemail.AmazonSimpleEmailServiceClientBuilder的实例源码、com.amazonaws.services.simpleemail.AmazonSimpleEmailServiceClient的实例源码、com.amazonaws.services.simpleemail.AmazonSimpleEmailService的实例源码、JavaMailSenderImpl的实用方法。

本文目录一览：

如何强制JavaMailSenderImpl使用TLS1.2？（java强行）
com.amazonaws.services.simpleemail.AmazonSimpleEmailServiceClientBuilder的实例源码
com.amazonaws.services.simpleemail.AmazonSimpleEmailServiceClient的实例源码
com.amazonaws.services.simpleemail.AmazonSimpleEmailService的实例源码
JavaMailSenderImpl

如何强制JavaMailSenderImpl使用TLS1.2？（java强行）

有一个在Tomcat上运行的JDK7应用程序，它具有以下环境设置：

-Dhttps.protocols=TLSv1.1,TLSv1.2

上面的设置可确保在进行API调用等操作时通过HTTPS连接时不使用TLS 1.0。

我们还使用org.springframework.mail.javamail。 JavaMailSenderImpl
类发送外发SMTP电子邮件，并使用以下道具：

 mail.smtp.auth=false;mail.smtp.socketFactory.port=2525;mail.smtp.socketFactory.fallback=true;mail.smtp.starttls.enable=true

问题是，当升级到TLS1.2时，与SMTP电子邮件服务器的连接失败。

javax.net.ssl.SSLHandshakeException：握手期间远程主机关闭连接

是否有设置或代码更改会强制使用TLS1.2协议？

我做了一些搜索，看来这些环境设置仅适用于applet和Web客户端，不适用于服务器端应用程序

-Ddeployment.security.SSLv2Hello=false -Ddeployment.security.SSLv3=false -Ddeployment.security.TLSv1=false

答案1

小编典典

这是寻找下一个家伙的解决方法：

mail.smtp.starttls.enable=true;mail.smtp.ssl.protocols=TLSv1.2;

com.amazonaws.services.simpleemail.AmazonSimpleEmailServiceClientBuilder的实例源码

项目：gcplot 文件：SESMailProvider.java

@Override
void makeSend(String to,String subject,String msg) {
    String accessKey = config.readString(ConfigProperty.SES_ACCESS_KEY);
    String secretKey = config.readString(ConfigProperty.SES_SECRET_KEY);
    if (!Strings.isNullOrEmpty(accessKey)) {
        Destination destination = new Destination().withToAddresses(to);
        Content subj = new Content().withData(subject);
        Content textBody = new Content().withData(msg);
        Body body = new Body().withHtml(textBody);

        Message message = new Message().withSubject(subj).withBody(body);
        SendEmailRequest req = new SendEmailRequest().withSource(config.readString(ConfigProperty.EMAIL_DEFAULT_FROM_NAME)
                + " <" + config.readString(ConfigProperty.EMAIL_DEFAULT_FROM) + ">")
                .withDestination(destination).withMessage(message);

        AmazonSimpleEmailService client = AmazonSimpleEmailServiceClientBuilder.standard()
                .withRegion(config.readString(ConfigProperty.SES_REGION))
                .withCredentials(new AWsstaticCredentialsProvider(new BasicAWSCredentials(accessKey,secretKey)))
                .build();
        try {
            client.sendEmail(req);
        } finally {
            client.shutdown();
        }
    } else {
        throw new IllegalStateException("SES Mail provider wasn't configured well.");
    }
}

项目：kaif 文件：AwsSesMailAgent.java

@postconstruct
public void afterPropertiesSet() {
  AWSCredentials awsSesCredentials = new BasicAWSCredentials(mailProperties.getAwsAccessKey(),mailProperties.getAwsSecretKey());
  this.client = AmazonSimpleEmailServiceClientBuilder.standard()
      .withRegion(Regions.US_EAST_1)
      .withCredentials(new AWsstaticCredentialsProvider(awsSesCredentials))
      .build();
  logger.info("mail agent ready,sender:"
      + mailProperties.getAwsSenderAddress()
      + ",access key:"
      + awsSesCredentials.getAWSAccessKeyId());
}

项目：wildfly-camel 文件：SESUtils.java

public static AmazonSimpleEmailServiceClient createEmailClient() {
    BasicCredentialsProvider credentials = BasicCredentialsProvider.standard();
    AmazonSimpleEmailServiceClient client = !credentials.isValid() ? null : (AmazonSimpleEmailServiceClient)
            AmazonSimpleEmailServiceClientBuilder.standard()
            .withCredentials(credentials)
            .withRegion("eu-west-1")
            .build();
    return client;
}

项目：smart-security-camera 文件：SesSendNotificationHandler.java

@Override
public Parameters handleRequest(Parameters parameters,Context context) {

    context.getLogger().log("Input Function [" + context.getFunctionName() + "],Parameters [" + parameters + "]");

    try {

        // Create an empty Mime message and start populating it
        Session session = Session.getDefaultInstance(new Properties());
        MimeMessage message = new MimeMessage(session);
        message.setSubject(EMAIL_SUBJECT,"UTF-8");
        message.setFrom(new InternetAddress(System.getenv("EMAIL_FROM")));
        message.setReplyTo(new Address[] { new InternetAddress(System.getenv("EMAIL_FROM")) });
        message.setRecipients(Message.RecipientType.TO,InternetAddress.parse(System.getenv("EMAIL_RECIPIENT")));

        MimeBodyPart wrap = new MimeBodyPart();
        MimeMultipart cover = new MimeMultipart("alternative");
        MimeBodyPart html = new MimeBodyPart();
        cover.addBodyPart(html);
        wrap.setContent(cover);
        MimeMultipart content = new MimeMultipart("related");
        message.setContent(content);
        content.addBodyPart(wrap);

        // Create an S3 URL reference to the snapshot that will be attached to this email
        URL attachmentURL = createSignedURL(parameters.getS3Bucket(),parameters.getS3Key());

        StringBuilder sb = new StringBuilder();
        String id = UUID.randomUUID().toString();
        sb.append("<img src=\"cid:");
        sb.append(id);
        sb.append("\" alt=\"ATTACHMENT\"/>\n");

        // Add the attachment as a part of the message body
        MimeBodyPart attachment = new MimeBodyPart();
        DataSource fds = new URLDataSource(attachmentURL);
        attachment.setDataHandler(new DataHandler(fds));

        attachment.setContentID("<" + id + ">");
        attachment.setdisposition(BodyPart.ATTACHMENT);

        attachment.setFileName(fds.getName());
        content.addBodyPart(attachment);

        // Pretty print the Rekognition Labels as part of the Emails HTML content
        String prettyPrintLabels = parameters.getRekognitionLabels().toString();
        prettyPrintLabels = prettyPrintLabels.replace("{","").replace("}","");
        prettyPrintLabels = prettyPrintLabels.replace(",","<br>");            
        html.setContent("<html><body><h2>Uploaded Filename : " + parameters.getS3Key().replace("upload/","") + 
                        "</h2><p><b>Detected Labels/Confidence</b><br><br>" + prettyPrintLabels + "</p>"+sb+"</body></html>","text/html");

        // Convert the JavaMail message into a raw email request for sending via SES
        ByteArrayOutputStream outputStream = new ByteArrayOutputStream();
        message.writeto(outputStream);
        RawMessage rawMessage = new RawMessage(ByteBuffer.wrap(outputStream.toByteArray()));
        SendRawEmailRequest rawEmailRequest = new SendRawEmailRequest(rawMessage);

        // Send the email using the AWS SES Service
        AmazonSimpleEmailService client = AmazonSimpleEmailServiceClientBuilder.defaultClient();
        client.sendRawEmail(rawEmailRequest);

    } catch (MessagingException | IOException e) {
        // Convert Checked Exceptions to RuntimeExceptions to ensure that
        // they get picked up by the Step Function infrastructure
        throw new AmazonServiceException("Error in ["+context.getFunctionName()+"]",e);
    }

    context.getLogger().log("Output Function [" + context.getFunctionName() + "],Parameters [" + parameters + "]");

    return parameters;
}

项目：para 文件：AWSEmailer.java

/**
 * No-args constructor.
 */
public AWSEmailer() {
    sesclient = AmazonSimpleEmailServiceClientBuilder.standard().withCredentials(new AWsstaticCredentialsProvider(
            new BasicAWSCredentials(Config.AWS_ACCESSKEY,Config.AWS_SECRETKEY))).
            withRegion(Config.AWS_REGION).build();
}

com.amazonaws.services.simpleemail.AmazonSimpleEmailServiceClient的实例源码

项目：oneops 文件：EmailService.java

/**
 * Inits the.
 */
public void init() {
    if (this.awsAccessKey == null) {
        this.awsAccessKey = System.getenv("AWS_ACCESS_KEY");
        if (this.awsAccessKey == null) {
            this.awsAccessKey = System.getProperty("com.oneops.aws.accesskey");
        }
    }

    if (this.awsSecretKey == null) {
        this.awsSecretKey = System.getenv("AWS_SECRET_KEY");
        if (this.awsSecretKey == null) {
            this.awsSecretKey = System.getProperty("com.oneops.aws.secretkey");
        }
    }

    emailClient = new AmazonSimpleEmailServiceClient(
            new BasicAWSCredentials(awsAccessKey,awsSecretKey));
}

项目：kodokojo 文件：SesEmailSender.java

private void sendSimpleMail(List<String> to,List<String> cc,List<String> ci,String object,String content,boolean htmlContent) {

        Destination destination = new Destination().withToAddresses(to).withBccAddresses(ci).withCcAddresses(cc);
        Content subject = new Content().withData(object);
        Content bodyContent = new Content().withData(content);
        Body body;
        if (htmlContent) {
            body = new Body().withHtml(bodyContent);
        } else {
            body = new Body().withText(bodyContent);
        }
        Message message = new Message().withSubject(subject).withBody(body);
        SendEmailRequest request = new SendEmailRequest().withSource(from).withDestination(destination).withMessage(message);
        try {
            AmazonSimpleEmailServiceClient client = new AmazonSimpleEmailServiceClient();
            client.setRegion(region);
            client.sendEmail(request);
        } catch (Exception e) {
            LOGGER.error("Unable to send email to {} with subject '{}'",StringUtils.join(to,","),subject,e);
        }
    }