Spring boot2.0 入门(十一)-RestTemplate使用https访问

Love The Way You Lie 2023-07-18 02:55 12阅读 0赞

声明:此代码摘录自https://blog.csdn.net/wltsysterm/article/details/80977455  
如果执行以下代码会发生错误，那么有可能和服务端的TLS版本不匹配，添加上正确的版本TLSv1,TLSv1.2等。

org.springframework.web.client.ResourceAccessException: I/O error on GET request for "https://xxx": Received fatal alert: handshake_failure; nested exception is javax.net.ssl.SSLHandshakeException: Received fatal alert: handshake_failure

import java.io.IOException;
    import java.net.HttpURLConnection;
    import java.net.InetAddress;
    import java.net.Socket;
    import java.security.cert.X509Certificate;
    
    import javax.net.ssl.HostnameVerifier;
    import javax.net.ssl.HttpsURLConnection;
    import javax.net.ssl.SSLContext;
    import javax.net.ssl.SSLSession;
    import javax.net.ssl.SSLSocket;
    import javax.net.ssl.SSLSocketFactory;
    import javax.net.ssl.TrustManager;
    import javax.net.ssl.X509TrustManager;
    
    import org.springframework.http.client.SimpleClientHttpRequestFactory;
    
    public class HttpsClientRequestFactory extends SimpleClientHttpRequestFactory { 
    	
        @Override
        protected void prepareConnection(HttpURLConnection connection, String httpMethod) { 
            try { 
                if (!(connection instanceof HttpsURLConnection)) { 
                    throw new RuntimeException("An instance of HttpsURLConnection is expected");
                }
     
                HttpsURLConnection httpsConnection = (HttpsURLConnection) connection;
     
                TrustManager[] trustAllCerts = new TrustManager[]{ 
                        new X509TrustManager() { 
                            @Override
                            public X509Certificate[] getAcceptedIssuers() { 
                                return null;
                            }
                            @Override
                            public void checkClientTrusted(X509Certificate[] certs, String authType) { 
                            }
                            @Override
                            public void checkServerTrusted(X509Certificate[] certs, String authType) { 
                            }
     
                        }
                };
                SSLContext sslContext = SSLContext.getInstance("TLS");
                sslContext.init(null, trustAllCerts, new java.security.SecureRandom());
                httpsConnection.setSSLSocketFactory(new MyCustomSSLSocketFactory(sslContext.getSocketFactory()));
     
                httpsConnection.setHostnameVerifier(new HostnameVerifier() { 
                    @Override
                    public boolean verify(String s, SSLSession sslSession) { 
                        return true;
                    }
                });
     
                super.prepareConnection(httpsConnection, httpMethod);
            } catch (Exception e) { 
                e.printStackTrace();
            }
        }
     
        // SSLSocketFactory用于创建 SSLSockets
        private static class MyCustomSSLSocketFactory extends SSLSocketFactory { 
     
            private final SSLSocketFactory delegate;
     
            public MyCustomSSLSocketFactory(SSLSocketFactory delegate) { 
                this.delegate = delegate;
            }
     
            // 返回默认启用的密码套件。除非一个列表启用，对SSL连接的握手会使用这些密码套件。
            // 这些默认的服务的最低质量要求保密保护和服务器身份验证
            @Override
            public String[] getDefaultCipherSuites() { 
                return delegate.getDefaultCipherSuites();
            }
     
            // 返回的密码套件可用于SSL连接启用的名字
            @Override
            public String[] getSupportedCipherSuites() { 
                return delegate.getSupportedCipherSuites();
            }
     
     
            @Override
            public Socket createSocket(final Socket socket, final String host, final int port, 
            		final boolean autoClose) throws IOException { 
                final Socket underlyingSocket = delegate.createSocket(socket, host, port, autoClose);
                return overrideProtocol(underlyingSocket);
            }
     
     
            @Override
            public Socket createSocket(final String host, final int port) throws IOException { 
                final Socket underlyingSocket = delegate.createSocket(host, port);
                return overrideProtocol(underlyingSocket);
            }
     
            @Override
            public Socket createSocket(final String host, final int port, final InetAddress localAddress, 
            		final int localPort) throws
                    IOException { 
                final Socket underlyingSocket = delegate.createSocket(host, port, localAddress, localPort);
                return overrideProtocol(underlyingSocket);
            }
     
            @Override
            public Socket createSocket(final InetAddress host, final int port) throws IOException { 
                final Socket underlyingSocket = delegate.createSocket(host, port);
                return overrideProtocol(underlyingSocket);
            }
     
            @Override
            public Socket createSocket(final InetAddress host, final int port, final InetAddress localAddress, 
            		final int localPort) throws
                    IOException { 
                final Socket underlyingSocket = delegate.createSocket(host, port, localAddress, localPort);
                return overrideProtocol(underlyingSocket);
            }
     
            private Socket overrideProtocol(final Socket socket) { 
                if (!(socket instanceof SSLSocket)) { 
                    throw new RuntimeException("An instance of SSLSocket is expected");
                }
                ((SSLSocket) socket).setEnabledProtocols(new String[]{ "TLSv1.2"});
                return socket;
            }
        }
    }

**测试**

@Test
        public void testhttps()
        { 
        	HashMap<String, String> maps = new HashMap<>();
        	HttpHeaders headers = new HttpHeaders();
        	headers.setContentType(MediaType.APPLICATION_JSON_UTF8);
        	HttpEntity<Map> request = new HttpEntity<Map>(maps,headers);
        	RestTemplate rest = new RestTemplate(new HttpsClientRequestFactory());
    
        	String str = rest.getForObject("https://www.baidu.com", String.class, maps);
        	System.out.println(str);
        	assertTrue( true );
        }