spring boot 请求 https 服务

布满荆棘的人生 2022-05-19 03:04 175阅读 0赞

上一篇，LZ测试了 rest 服务 http的，这里我们看一下https怎么配置  
这里讲2种方式，自己也是百度找的，也不知道哪个是原创了  
第一种参考https://www.jianshu.com/p/fd86b5b74301

## 第一种 ##

pom.xml文件加入

<dependency>
    		<groupId>org.apache.httpcomponents</groupId>
    		<artifactId>httpclient</artifactId>
    		<version>4.5.3</version>
    </dependency>

定义一个config，注入RestTemplate

import org.apache.http.conn.ssl.SSLConnectionSocketFactory;
    import org.apache.http.impl.client.CloseableHttpClient;
    import org.apache.http.impl.client.HttpClients;
    import org.apache.http.ssl.TrustStrategy;
    import org.springframework.context.annotation.Bean;
    import org.springframework.context.annotation.Configuration;
    import org.springframework.http.client.HttpComponentsClientHttpRequestFactory;
    import org.springframework.web.client.RestTemplate;
    
    import javax.net.ssl.SSLContext;
    import java.security.KeyManagementException;
    import java.security.KeyStoreException;
    import java.security.NoSuchAlgorithmException;
    import java.security.cert.X509Certificate;
    
    
    @Configuration
    public class Config {
    
        @Bean
        public RestTemplate restTemplate() throws KeyStoreException, NoSuchAlgorithmException, KeyManagementException {
            TrustStrategy acceptingTrustStrategy = (X509Certificate[] chain, String authType) -> true;
    
            SSLContext sslContext = org.apache.http.ssl.SSLContexts.custom()
                    .loadTrustMaterial(null, acceptingTrustStrategy)
                    .build();
    
            SSLConnectionSocketFactory csf = new SSLConnectionSocketFactory(sslContext);
    
            CloseableHttpClient httpClient = HttpClients.custom()
                    .setSSLSocketFactory(csf)
                    .build();
    
            HttpComponentsClientHttpRequestFactory requestFactory =
                    new HttpComponentsClientHttpRequestFactory();
    
            requestFactory.setHttpClient(httpClient);
            RestTemplate restTemplate = new RestTemplate(requestFactory);
            return restTemplate;
        }
    }

但是这种方式，lz测试的时候（远程服务器），通过远程服务器的ip地址访问是失败的，有的又说可以，但是域名是可以的

@GetMapping("/rest")
        public String rest(){
            String forObject = restTemplate.getForObject("https://域名地址/cxf/oss/token", String.class);
            return forObject;
        }

## 第二种 ##

不要上面的httpclient，加了的去掉，要不然会出问题  
在项目启动的时候，执行，底下这段代码，导入jar注意，底下贴出来了

import javax.net.ssl.*;
    import java.security.KeyManagementException;
    import java.security.NoSuchAlgorithmException;
    import java.security.cert.X509Certificate;
    
    private static void disableSslVerification() {
    		try
    		{
    			// Create a trust manager that does not validate certificate chains
    			TrustManager[] trustAllCerts = new TrustManager[] {new X509TrustManager() {
    				public java.security.cert.X509Certificate[] getAcceptedIssuers() {
    					return null;
    				}
    				public void checkClientTrusted(X509Certificate[] certs, String authType) {
    				}
    				public void checkServerTrusted(X509Certificate[] certs, String authType) {
    				}
    			  }
    			};
    
    			// Install the all-trusting trust manager
    			SSLContext sc = SSLContext.getInstance("SSL");
    			sc.init(null, trustAllCerts, new java.security.SecureRandom());
    			HttpsURLConnection.setDefaultSSLSocketFactory(sc.getSocketFactory());
    
    			// Create all-trusting host name verifier
    			HostnameVerifier allHostsValid = new HostnameVerifier() {
    				public boolean verify(String hostname, SSLSession session) {
    					return true;
    				}
    			};
    
    			// Install the all-trusting host verifier
    			HttpsURLConnection.setDefaultHostnameVerifier(allHostsValid);
    		} catch (NoSuchAlgorithmException e) {
    			e.printStackTrace();
    		} catch (KeyManagementException e) {
    			e.printStackTrace();
    		}
    	}

这种方式，ip和域名都是成功的