java restTemplate调用三方接口，三方ssl证书过期，跳过校验

最新推荐文章于 2025-04-23 17:49:57 发布

原创最新推荐文章于 2025-04-23 17:49:57 发布 · 1.3k 阅读

4 ·

CC 4.0 BY-SA版权

文章标签：

#java #ssl #开发语言

java 同时被 2 个专栏收录

7 篇文章

订阅专栏

restTemplate

1 篇文章

订阅专栏

当使用RestTemplate调用三方服务时，如果遇到证书过期的问题，可以通过配置自定义的SSLContext和TrustStrategy来跳过证书校验。在启动类中注入RestTemplate的Bean，设置SSLConnectionSocketFactory并启用NoopHostnameVerifier，从而实现不验证证书的HTTP请求。这种方法在证书出现问题时可以临时解决调用问题，但并不推荐用于生产环境。

部署运行你感兴趣的模型镜像

使用 restTemplate 调用三方三方证书过期，跳过证书校验

事例代码：

/**
     * post请求
     */
    public <T> T getRestTemplate(Object json, String url, Class<T> tClass) {
        log.info("开始调用远程服务");
        log.info("url:{}", url);
        log.info("json:{}", json);
        log.info("[对接]开始");
        String date = DateUtil.format(new Date(), DateUtil.DATE_TIME);
        log.info("[对接]时间：{}", date);
        HttpHeaders headers = new HttpHeaders();
        MediaType type = MediaType.parseMediaType("application/json; charset=UTF-8");
        headers.setContentType(type);
        headers.add("Accept", MediaType.APPLICATION_JSON.toString());
        HttpEntity<String> formEntity = new HttpEntity<>(json.toString(), headers);
        T body = restTemplate.postForEntity(url, formEntity, tClass).getBody();
        log.info("[对接接口返回],json:{}", body);
        return body;
    }

如上代码，三方证书过期会报错解决如下

启动类中注入bean 跳过校验就好了

 @Bean
    RestTemplate restTemplate() throws NoSuchAlgorithmException, KeyStoreException, KeyManagementException {
        TrustStrategy acceptingTrustStrategy = (cert, authType) -> true;
        SSLContext sslContext = SSLContexts.custom().loadTrustMaterial(null, acceptingTrustStrategy).build();
        SSLConnectionSocketFactory sslsf = new SSLConnectionSocketFactory(sslContext, NoopHostnameVerifier.INSTANCE);

        Registry<ConnectionSocketFactory> socketFactoryRegistry = RegistryBuilder.<ConnectionSocketFactory>create()
                .register("https", sslsf).register("http", new PlainConnectionSocketFactory()).build();
        BasicHttpClientConnectionManager connectionManager = new BasicHttpClientConnectionManager(
                socketFactoryRegistry);
        CloseableHttpClient httpClient = HttpClients.custom().setSSLSocketFactory(sslsf)
                .setConnectionManager(connectionManager).build();
        HttpComponentsClientHttpRequestFactory requestFactory = new HttpComponentsClientHttpRequestFactory(httpClient);
        requestFactory.setConnectTimeout(10000);
        requestFactory.setReadTimeout(10000);
        return new RestTemplate(requestFactory);
    }

您可能感兴趣的与本文相关的镜像