HttpClient绕开HTTPS的ssl证书

怼烎@ 2021-11-16 06:14 416阅读 0赞

## pom.xml：  ##

<dependency>
                <groupId>org.apache.httpcomponents</groupId>
                <artifactId>httpclient</artifactId>
                <version>4.5.5</version>
            </dependency>

## 代码段：  ##

### 1：未绕过证书验证的代码： ###

@GetMapping("captureFace")
        public void captureFace() throws IOException {
            CloseableHttpClient httpClient = HttpClientBuilder.create().build();
            // 创建Get请求
            HttpGet httpGet = new HttpGet("https://117.143.xxx.xxx/");
            // 响应模型
            CloseableHttpResponse response = null;
            // 由客户端执行(发送)Get请求
            try {
                response = httpClient.execute(httpGet);
            } catch (IOException e) {
                e.printStackTrace();
            }
            // 从响应模型中获取响应实体
                HttpEntity responseEntity = response.getEntity();
                System.out.println("响应状态为:" + response.getStatusLine());
                if (responseEntity != null) {
                    System.out.println("响应内容长度为:" + responseEntity.getContentLength());
                    System.out.println("响应内容为:" + EntityUtils.toString(responseEntity));
                }
    
        }

###  请求发送后，报错：无法找到所请求目标的有效证书路径 ###

javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
    	at sun.security.ssl.Alerts.getSSLException(Alerts.java:192)
    	at sun.security.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1946)
    	at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:316)
    	at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:310)
    	at sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1639)
    	at sun.security.ssl.ClientHandshaker.processMessage(ClientHandshaker.java:223)
    	at sun.security.ssl.Handshaker.processLoop(Handshaker.java:1037)
    	at sun.security.ssl.Handshaker.process_record(Handshaker.java:965)
    	at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:1064)
    	at sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1367)
    	at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1395)
    	at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1379)
    	..................

## 解决： ##

###    绕开ssl证书，代码段如下： ###

@GetMapping("captureFace")
        public void captureFace() throws IOException, KeyManagementException, NoSuchAlgorithmException {
            String body = "";
            //采用绕过验证的方式处理https请求
            SSLContext sslcontext = createIgnoreVerifySSL();
            //设置协议http和https对应的处理socket链接工厂的对象
            Registry<ConnectionSocketFactory> socketFactoryRegistry = RegistryBuilder.<ConnectionSocketFactory>create()
                    .register("http", PlainConnectionSocketFactory.INSTANCE)
                    .register("https", new SSLConnectionSocketFactory(sslcontext))
                    .build();
            PoolingHttpClientConnectionManager connManager = new PoolingHttpClientConnectionManager(socketFactoryRegistry);
            HttpClients.custom().setConnectionManager(connManager);
            //创建自定义的httpclient对象
            CloseableHttpClient client = HttpClients.custom().setConnectionManager(connManager).build();
            try{
                //创建post方式请求对象
                HttpGet httpGet = new HttpGet("https://117.143.xxx.xxx/");
                //指定报文头Content-type、User-Agent
               /* httpGet.setHeader("Content-type", "application/x-www-form-urlencoded");
                httpGet.setHeader("User-Agent", "Mozilla/5.0 (Windows NT 6.1; rv:6.0.2) Gecko/20100101 Firefox/6.0.2");*/
                //执行请求操作，并拿到结果（同步阻塞）
                CloseableHttpResponse response = client.execute(httpGet);
                //获取结果实体
                HttpEntity entity = response.getEntity();
                if (entity != null) {
                    //按指定编码转换结果实体为String类型
                    body = EntityUtils.toString(entity, "UTF-8");
                }
                EntityUtils.consume(entity);
                //释放链接
                response.close();
                System.out.println("body:" + body);
            }finally{
                client.close();
            }
        }
    
    
    
        /**
         * 绕过验证
         *
         * @return
         * @throws NoSuchAlgorithmException
         * @throws KeyManagementException
         */
        public static SSLContext createIgnoreVerifySSL() throws NoSuchAlgorithmException, KeyManagementException {
         //   SSLContext sc = SSLContext.getInstance("SSLv3");
            SSLContext sc = SSLContext.getInstance("TLS");
            // 实现一个X509TrustManager接口，用于绕过验证，不用修改里面的方法
            X509TrustManager trustManager = new X509TrustManager() {
                @Override
                public void checkClientTrusted(
                        java.security.cert.X509Certificate[] paramArrayOfX509Certificate,
                        String paramString) {
                }
                @Override
                public void checkServerTrusted(
                        java.security.cert.X509Certificate[] paramArrayOfX509Certificate,
                        String paramString) {
                }
                @Override
                public java.security.cert.X509Certificate[] getAcceptedIssuers() {
                    return null;
                }
            };
            sc.init(null, new TrustManager[] { trustManager }, null);
            return sc;
        }

### 成功截图： ###

![20190731092930581.png][]

[20190731092930581.png]: /images/20211116/185c0624d3454640b6dade0332c94336.png