通过HttpClient调用接口时忽略SSL证书验证

最新推荐文章于 2024-02-22 09:36:03 发布

aicaiwei3

最新推荐文章于 2024-02-22 09:36:03 发布

阅读量3.6k

点赞数

CC 4.0 BY-SA版权

分类专栏： JAVA 文章标签： httpclient https SSL

本文链接：https://blog.youkuaiyun.com/aicaiwei3/article/details/37498671

JAVA 专栏收录该内容

6 篇文章

订阅专栏

在调用HTTPS接口时遇到SSLPeerUnverifiedException异常，解决方法是在HttpClient中自定义SSL上下文和主机名验证器，跳过SSL证书验证。提供了具体的Java代码示例来展示如何实现。

在项目过程中发现调用的接口地址为https形式的，一般用httpclient调用会抛出异常：Exception in thread "main" javax.net.ssl.SSLPeerUnverifiedException: peer not authenticated，经过查找资料发现时因为https会使用SSL数字证书验证，而服务端并没有提供相应的SSL数字证书，这就需要在调用时绕过校验，具体实现代码如下：

1.httpclient

public static void main(String[] args) throws HttpException, IOException {
HttpClient httpclient = new DefaultHttpClient();
httpclient = wrapClient(httpclient);
HttpPost httppost = new HttpPost(url);

StringEntity myEntity = new StringEntity(test(), "utf-8");

httppost.addHeader("Content-Type", "text/html;charset=utf-8");

httppost.setEntity(myEntity);
httppost.addHeader("Authorization","Bearer YWMtlZKThgG9EeSdfPG0cx2i0wAAAUcaGn61pdZR1lx5O8fYo0H8cwINV1NFExI");
HttpResponse response = httpclient.execute(httppost);
HttpEntity resEntity = response.getEntity();
InputStreamReader reader = new InputStreamReader(resEntity.getContent(), "utf-8");
char[] buff = new char[1024];
int length = 0;
while ((length = reader.read(buff)) != -1) {
System.out.println(new String(buff, 0, length));
}
httpclient.getConnectionManager().shutdown();
}

2.取消校验SSL

public static HttpClient wrapClient(HttpClient base) {
try {
SSLContext ctx = SSLContext.getInstance("TLS");
X509TrustManager tm = new X509TrustManager() {
public void checkClientTrusted(X509Certificate[] xcs,
String string) {
}

public void checkServerTrusted(X509Certificate[] xcs,
String string) {
}

public X509Certificate[] getAcceptedIssuers() {
return null;
}
};

X509HostnameVerifier hv = new X509HostnameVerifier(){

@Override
public boolean verify(String hostname, SSLSession session) {
// TODO Auto-generated method stub
return true;
}

@Override
public void verify(String arg0, SSLSocket arg1) throws IOException {
// TODO Auto-generated method stub

}

@Override
public void verify(String arg0, X509Certificate arg1)
throws SSLException {
// TODO Auto-generated method stub

}

@Override
public void verify(String arg0, String[] arg1, String[] arg2)
throws SSLException {
// TODO Auto-generated method stub

}

};
ctx.init(null, new TrustManager[] { tm }, null);
SSLSocketFactory ssf = new SSLSocketFactory(ctx,(X509HostnameVerifier) hv);

ClientConnectionManager ccm = base.getConnectionManager();
SchemeRegistry sr = ccm.getSchemeRegistry();
sr.register(new Scheme("https", 443, ssf));
return new DefaultHttpClient(ccm, base.getParams());
} catch (Exception ex) {
ex.printStackTrace();
return null;
}
}