避过SSL的方法和使用SSL的方法

最新推荐文章于 2025-05-15 08:38:57 发布

原创最新推荐文章于 2025-05-15 08:38:57 发布 · 986 阅读

0 ·

CC 4.0 BY-SA版权

文章标签：

#ssl #java

java 专栏收录该内容

31 篇文章

订阅专栏

本文提供了一种绕过SSL验证的方法，并展示了如何通过信任存储来正确使用SSL连接。这两种方法都涉及到创建自定义的HttpClient实例，用以实现特定的安全配置。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

避过SSL的方法：

private synchronized static HttpClient getNewHttpClient() {
if (httpClient != null) {
return httpClient;
} else {
try {
KeyStore trustStore = KeyStore.getInstance(KeyStore.getDefaultType());
trustStore.load(null, null);

SSLSocketFactory sf = new MySSLSocketFactory(trustStore);
sf.setHostnameVerifier(SSLSocketFactory.ALLOW_ALL_HOSTNAME_VERIFIER);

HttpParams params = new BasicHttpParams();
HttpProtocolParams.setVersion(params, HttpVersion.HTTP_1_1);
HttpProtocolParams.setContentCharset(params, HTTP.UTF_8);

SchemeRegistry registry = new SchemeRegistry();
registry.register(new Scheme("http", PlainSocketFactory.getSocketFactory(), 80));
registry.register(new Scheme("https", sf, 443));

ClientConnectionManager ccm = new PoolingClientConnectionManager(registry);

httpClient = new DefaultHttpClient(ccm, params);

return httpClient;
} catch (Exception e) {
throw new RuntimeException("init secure client failed", e);
}
}
}

使用SSL的方法：

private synchronized static HttpClient getNewHttpClient() {
if (httpClient != null) {
return httpClient;
} else {
try {
KeyStore trustStore = KeyStore.getInstance(KeyStore.getDefaultType());
InputStream instream = Thread.currentThread().getContextClassLoader().getResourceAsStream("vtms.keystore");
try {
trustStore.load(instream, "**********".toCharArray()); // **********代表登录用户名
} finally {
instream.close();
}

SSLSocketFactory sf = new SSLSocketFactory(trustStore);

HttpParams params = new BasicHttpParams();
HttpProtocolParams.setVersion(params, HttpVersion.HTTP_1_1);
HttpProtocolParams.setContentCharset(params, HTTP.UTF_8);

SchemeRegistry registry = new SchemeRegistry();
registry.register(new Scheme("http", PlainSocketFactory.getSocketFactory(), 80));
registry.register(new Scheme("https", sf, 443));

ClientConnectionManager ccm = new PoolingClientConnectionManager(registry);

httpClient = new DefaultHttpClient(ccm, params);

return httpClient;
} catch (Exception e) {
throw new RuntimeException("init secure client failed", e);
}
}
}