import com.novell.ldap.LDAPJSSESecureSocketFactory; //导入依赖的package包/类
@Test
public void testConnectSuccess() throws Exception {
	KeyStore tks = KeyStore.getInstance(KeyStore.getDefaultType());
	tks.load(new FileInputStream(System.getenv("PROJ_DIR")
			+ "/test/TlsServer/conf/server.jks"), "start123".toCharArray());
	TrustManagerFactory tmf = TrustManagerFactory
			.getInstance(TrustManagerFactory.getDefaultAlgorithm());
	tmf.init(tks);

	KeyStore iks = KeyStore.getInstance(KeyStore.getDefaultType());
	iks.load(new FileInputStream(System.getenv("PROJ_DIR")
			+ "/test/TlsServer/conf/client.jks"), "start123".toCharArray());

	KeyManagerFactory kmf = 
			  KeyManagerFactory.getInstance(KeyManagerFactory.getDefaultAlgorithm());
			kmf.init(iks, "start123".toCharArray());
			SSLContext ctx = SSLContext.getInstance("TLS");
			ctx.init(kmf.getKeyManagers(), tmf.getTrustManagers(), null);
			SocketFactory factory = ctx.getSocketFactory();
	
	LDAPConnection ldap = new LDAPConnection(new LDAPJSSESecureSocketFactory((SSLSocketFactory) factory));
	ldap.connect("127.0.0.1", 10636);
	
	LDAPSearchResults res = ldap.search("", 0, "(objectClass=*)", new String[] {"namingContexts","clientCertSubject"},false);
	res.hasMore();
	LDAPEntry entry = res.next();
	if (! entry.getAttribute("namingContexts").getStringValue().equalsIgnoreCase("o=mycompany,c=us")) {
		Assert.fail("Invalid namingContexts : '" + entry.getAttribute("namingContexts").getStringValue());
	}
	
	if (! entry.getAttribute("clientCertSubject").getStringValue().equalsIgnoreCase("CN=someuser, OU=dev, O=myvd-client, L=arlington, ST=virginia, C=us")) {
		Assert.fail("Invalid clientCertSubject : '" + entry.getAttribute("clientCertSubject").getStringValue());
	}
	
	ldap.disconnect();
}
 

import com.novell.ldap.LDAPJSSESecureSocketFactory; //导入依赖的package包/类
/**
 * Creates a new instance of LDAPConnection, configured as required to use
 * whichever encryption method is requested within guacamole.properties.
 *
 * @return
 *     A new LDAPConnection instance which has already been configured to
 *     use the encryption method requested within guacamole.properties.
 *
 * @throws GuacamoleException
 *     If an error occurs while parsing guacamole.properties, or if the
 *     requested encryption method is actually not implemented (a bug).
 */
private LDAPConnection createLDAPConnection() throws GuacamoleException {

    // Map encryption method to proper connection and socket factory
    EncryptionMethod encryptionMethod = confService.getEncryptionMethod();
    switch (encryptionMethod) {

        // Unencrypted LDAP connection
        case NONE:
            logger.debug("Connection to LDAP server without encryption.");
            return new LDAPConnection();

        // LDAP over SSL (LDAPS)
        case SSL:
            logger.debug("Connecting to LDAP server using SSL/TLS.");
            return new LDAPConnection(new LDAPJSSESecureSocketFactory());

        // LDAP + STARTTLS
        case STARTTLS:
            logger.debug("Connecting to LDAP server using STARTTLS.");
            return new LDAPConnection(new LDAPJSSEStartTLSFactory());

        // The encryption method, though known, is not actually
        // implemented. If encountered, this would be a bug.
        default:
            throw new GuacamoleUnsupportedException("Unimplemented encryption method: " + encryptionMethod);

    }

}
 

import com.novell.ldap.LDAPJSSESecureSocketFactory; //导入依赖的package包/类
/**
* Create the LDAP connection
* @return true if the connection was created.
* @throws Exception
*/
private boolean createLDAPConnection() {
   try{
    //Prapare for SSL
    if (useTLS)
    {
    	System.out.println(this.getClass().getName() + " - TLS setup");
    	SSLContext sslContext = createSSLContext("TLS");
    	
    	LDAPJSSESecureSocketFactory localLDAPJSSESecureSocketFactory = new LDAPJSSESecureSocketFactory(sslContext.getSocketFactory());
    	connection = new LDAPConnection(localLDAPJSSESecureSocketFactory);
    }else{
    	System.out.println(this.getClass().getName() + " - Non TLS");
    	connection = new LDAPConnection();
    }

    
	System.out.println(this.getClass().getName() + " - Connecting to "+host+":"+port + (useTLS?" using TLS":" in clear text"));
    connection.connect(this.host, this.port);
    if (useTLS && port == 389){
    	System.out.println(this.getClass().getName() + " - Starting TLS");
    	connection.startTLS();
    }
	System.out.println(this.getClass().getName() + " - Binding");
   	connection.bind(3, this.userName, this.password.getBytes("UTF8"));
	System.out.println(this.getClass().getName() + " - LDAP Connection done");
   	return true;
   }catch (Throwable e) {
   	e.printStackTrace();
   	Throwable cause = e.getCause();
   	final Throwable exception;
   	if (cause!= null){
   		exception=cause;
   	}else{
   		exception = e;
   	}
	PlatformUI.getWorkbench().getDisplay().asyncExec(new Runnable() {
		
		@Override
		public void run() {
	    	MessageBox messageBox = new MessageBox(PlatformUI.getWorkbench().getDisplay().getActiveShell(), SWT.ICON_ERROR);
	        messageBox.setMessage(exception.getClass().getName()+": "+exception.getMessage());
	         messageBox.open();
		}
	});

       return false;
}
   
 }