java访问非经过信任证书https的方法

港控/mmm° 2022-04-15 23:55 223阅读 0赞

由于项目需要，需要调用第三方的API接口，为了简单方便与快速开发，便采用了httpClient来进行调用。

<dependency>
        <groupId>org.apache.httpcomponents</groupId>
        <artifactId>httpclient</artifactId>
        <version>4.5.6</version>
    </dependency>

但在第三方的一个HTTPS的接口时，IDE中报了如下错误。

**javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target**

**解决办法：**

将httpClient中关于证书认证的实现机制注释掉，即不对任何https的证书进行校验。代码如下：

import org.apache.http.config.Registry;
    import org.apache.http.config.RegistryBuilder;
    import org.apache.http.conn.socket.ConnectionSocketFactory;
    import org.apache.http.conn.socket.PlainConnectionSocketFactory;
    import org.apache.http.conn.ssl.NoopHostnameVerifier;
    import org.apache.http.conn.ssl.SSLConnectionSocketFactory;
    import org.apache.http.impl.client.CloseableHttpClient;
    import org.apache.http.impl.client.HttpClients;
    import org.apache.http.impl.conn.PoolingHttpClientConnectionManager;
    
    import javax.net.ssl.SSLContext;
    import javax.net.ssl.TrustManager;
    import javax.net.ssl.X509TrustManager;
    import java.security.KeyManagementException;
    import java.security.NoSuchAlgorithmException;
    import java.security.cert.X509Certificate;
    
    /**
     * 信任https证书
     *
     * @author puhaiyang
     * @date 2018/11/14
     */
    public class SslUtil {
        public static CloseableHttpClient SslHttpClientBuild() {
            Registry<ConnectionSocketFactory> socketFactoryRegistry = RegistryBuilder.<ConnectionSocketFactory>create()
                    .register("http", PlainConnectionSocketFactory.INSTANCE)
                    .register("https", trustAllHttpsCertificates())
                    .build();
            //创建ConnectionManager，添加Connection配置信息
            PoolingHttpClientConnectionManager connectionManager = new PoolingHttpClientConnectionManager(socketFactoryRegistry);
            CloseableHttpClient httpClient = HttpClients.custom().setConnectionManager(connectionManager).build();
            return httpClient;
        }
    
        /**
         * 信任所有证书
         */
        private static SSLConnectionSocketFactory trustAllHttpsCertificates() {
            SSLConnectionSocketFactory socketFactory = null;
            TrustManager[] trustAllCerts = new TrustManager[1];
            TrustManager tm = new miTM();
            trustAllCerts[0] = tm;
            SSLContext sc = null;
            try {
                sc = SSLContext.getInstance("TLS");//sc = SSLContext.getInstance("TLS")
                sc.init(null, trustAllCerts, null);
                socketFactory = new SSLConnectionSocketFactory(sc, NoopHostnameVerifier.INSTANCE);
                //HttpsURLConnection.setDefaultSSLSocketFactory(sc.getSocketFactory());
            } catch (NoSuchAlgorithmException e) {
                e.printStackTrace();
            } catch (KeyManagementException e) {
                e.printStackTrace();
            }
            return socketFactory;
        }
    
        static class miTM implements TrustManager, X509TrustManager {
    
            public X509Certificate[] getAcceptedIssuers() {
                return null;
            }
    
            public void checkServerTrusted(X509Certificate[] certs, String authType) {
                //don't check
            }
    
            public void checkClientTrusted(X509Certificate[] certs, String authType) {
                //don't check
            }
        }
    }

然后将以前的httpClient生成的代码用上写刚刚写的这个来进行生成就可以了！

// 创建httpClient对象
    //        CloseableHttpClient httpClient = HttpClients.createDefault();
            CloseableHttpClient httpClient = SslUtil.SslHttpClientBuild();