问题：避免HttpClient的”javax.net.ssl.SSLPeerUnverifiedException: peer not authenticated”异常

最新推荐文章于 2024-01-29 06:32:27 发布

转载最新推荐文章于 2024-01-29 06:32:27 发布 · 570 阅读

CC 4.0 BY-SA版权

原文链接：http://www.cnblogs.com/shipengzhi/archive/2012/08/22/2650953.html 或 https://blog.youkuaiyun.com/ASD1415926/article/details/12341187

java 专栏收录该内容

12 篇文章

订阅专栏

本文详细介绍了一种在Java环境中处理HTTPS请求时，如何通过自定义信任管理器来绕过SSL证书验证的方法，这对于测试环境或者自签名证书的场景特别有用。文章提供了具体的代码实现，包括创建一个接受所有证书的X509TrustManager，初始化SSLContext，注册自定义的SSLSocketFactory到SchemeRegistry，以及使用ThreadSafeClientConnManager和DefaultHttpClient进行HTTPS请求。

	package com.neusoft.talentbase.zj.dingding.util;
	import java.security.cert.CertificateException;
	import java.security.cert.X509Certificate;y
	import javax.net.ssl.SSLContext;
	import javax.net.ssl.TrustManager;
	import javax.net.ssl.X509TrustManager;
	import org.apache.http.conn.scheme.Scheme;
	import org.apache.http.conn.scheme.SchemeRegistry;
	import org.apache.http.conn.ssl.SSLSocketFactory;
	import org.apache.http.impl.client.DefaultHttpClient;
	import org.apache.http.impl.conn.tsccm.ThreadSafeClientConnManager;
	
	@SuppressWarnings("deprecation")
	public class WebClientDevWrapper {
		public static org.apache.http.client.HttpClient wrapClient(org.apache.http.client.HttpClient base) {
	        try {
	            SSLContext ctx = SSLContext.getInstance("TLS");
	            X509TrustManager tm = new X509TrustManager() {
	                public X509Certificate[] getAcceptedIssuers() {
	                    return null;
	                }
	                public void checkClientTrusted(X509Certificate[] arg0, String arg1) throws CertificateException {}
	                public void checkServerTrusted(X509Certificate[] arg0, String arg1) throws CertificateException {}
	            };
	            ctx.init(null, new TrustManager[] { tm }, null);
	            SSLSocketFactory ssf = new SSLSocketFactory(ctx, SSLSocketFactory.ALLOW_ALL_HOSTNAME_VERIFIER);
	            SchemeRegistry registry = new SchemeRegistry();
	            registry.register(new Scheme("https", 443, ssf));
	            ThreadSafeClientConnManager mgr = new ThreadSafeClientConnManager(registry);
	            return new DefaultHttpClient(mgr, base.getParams());
	        } catch (Exception ex) {
	            ex.printStackTrace();
	            return null;
	        }
	    }
	}
	
	=========================================================================================
	
	public HttpClient4() {
	//需要先声明，不然会报空指针
	        this.client = new DefaultHttpClient();
	//调用方法
	        this.client = WebClientDevWrapper.wrapClient(client);
}