javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building

最新推荐文章于 2025-06-18 17:07:17 发布

置顶 huxiangen

最新推荐文章于 2025-06-18 17:07:17 发布

阅读量2.6k

点赞数 4

CC 4.0 BY-SA版权

分类专栏：软件开发 java开发文章标签： PKIX SSLHandshakeException https

本文链接：https://blog.youkuaiyun.com/huxiangen/article/details/79896798

java开发同时被 2 个专栏收录

36 篇文章

订阅专栏

软件开发

21 篇文章

订阅专栏

本文介绍了一种解决HTTP访问转HTTPS时出现的问题的方法。通过创建MySecureProtocolSocketFactory和MyX509TrustManager两个类来信任所有证书，解决了因证书问题导致的连接失败。适用于需要与第三方进行HTTPS通讯的场景。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

出现这种问题是http访问转https对接第三方导致，在网上查了很多资料，最后找到了解决的办法，在这分享给大家：

1.首先创建一个MySecureProtocolSocketFactory 类

import java.io.IOException;  
import java.net.InetAddress;  
import java.net.Socket;  
import java.net.UnknownHostException;  
  
import javax.net.ssl.SSLContext;  
import javax.net.ssl.TrustManager;  
  
import org.apache.commons.httpclient.ConnectTimeoutException;  
import org.apache.commons.httpclient.HttpClientError;  
import org.apache.commons.httpclient.params.HttpConnectionParams;  
import org.apache.commons.httpclient.protocol.ControllerThreadSocketFactory;  
import org.apache.commons.httpclient.protocol.SecureProtocolSocketFactory;  
  
public class MySecureProtocolSocketFactory implements  
        SecureProtocolSocketFactory {  
  
    private SSLContext sslContext = null;  
  
    /** 
     * Constructor for MySecureProtocolSocketFactory. 
     */  
    public MySecureProtocolSocketFactory() {  
    }  
  
    /** 
     *  
     * @return 
     */  
    private static SSLContext createEasySSLContext() {  
        try {  
            SSLContext context = SSLContext.getInstance("SSL");  
            context.init(null, new TrustManager[] { new MyX509TrustManager() },  
                    null);  
            return context;  
        } catch (Exception e) {  
            throw new HttpClientError(e.toString());  
        }  
    }  
  
    /** 
     *  
     * @return 
     */  
    private SSLContext getSSLContext() {  
        if (this.sslContext == null) {  
            this.sslContext = createEasySSLContext();  
        }  
        return this.sslContext;  
    }  
  
    /* 
     * (non-Javadoc) 
     *  
     * @see org.apache.commons.httpclient.protocol.ProtocolSocketFactory#createSocket(java.lang.String, 
     *      int, java.net.InetAddress, int) 
     */  
    public Socket createSocket(String host, int port, InetAddress clientHost,  
            int clientPort) throws IOException, UnknownHostException {  
  
        return getSSLContext().getSocketFactory().createSocket(host, port,  
                clientHost, clientPort);  
    }  
  
    /* 
     * (non-Javadoc) 
     *  
     * @see org.apache.commons.httpclient.protocol.ProtocolSocketFactory#createSocket(java.lang.String, 
     *      int, java.net.InetAddress, int, 
     *      org.apache.commons.httpclient.params.HttpConnectionParams) 
     */  
    public Socket createSocket(final String host, final int port,  
            final InetAddress localAddress, final int localPort,  
            final HttpConnectionParams params) throws IOException,  
            UnknownHostException, ConnectTimeoutException {  
        if (params == null) {  
            throw new IllegalArgumentException("Parameters may not be null");  
        }  
        int timeout = params.getConnectionTimeout();  
        if (timeout == 0) {  
            return createSocket(host, port, localAddress, localPort);  
        } else {              
            return ControllerThreadSocketFactory.createSocket(this, host, port,  
                    localAddress, localPort, timeout);  
        }  
    }  
  
    /* 
     * (non-Javadoc) 
     *  
     * @see SecureProtocolSocketFactory#createSocket(java.lang.String,int) 
     */  
    public Socket createSocket(String host, int port) throws IOException,  
            UnknownHostException {  
        return getSSLContext().getSocketFactory().createSocket(host, port);  
    }  
  
    /* 
     * (non-Javadoc) 
     *  
     * @see SecureProtocolSocketFactory#createSocket(java.net.Socket,java.lang.String,int,boolean) 
     */  
    public Socket createSocket(Socket socket, String host, int port,  
            boolean autoClose) throws IOException, UnknownHostException {  
        return getSSLContext().getSocketFactory().createSocket(socket, host,  
                port, autoClose);  
    }  
}

2.MyX509TrustManager类

import java.security.cert.CertificateException;  
import java.security.cert.X509Certificate;  
  
import javax.net.ssl.X509TrustManager;  
  
public class MyX509TrustManager implements X509TrustManager {  
  
    /* (non-Javadoc) 
     * @see javax.net.ssl.X509TrustManager#checkClientTrusted(java.security.cert.X509Certificate[], java.lang.String) 
     */  
    public void checkClientTrusted(X509Certificate[] arg0, String arg1)  
        throws CertificateException {  
  
    }  
  
    /* (non-Javadoc) 
     * @see javax.net.ssl.X509TrustManager#checkServerTrusted(java.security.cert.X509Certificate[], java.lang.String) 
     */  
    public void checkServerTrusted(X509Certificate[] arg0, String arg1)  
        throws CertificateException {  
  
    }  
  
    /* (non-Javadoc) 
     * @see javax.net.ssl.X509TrustManager#getAcceptedIssuers() 
     */  
    public X509Certificate[] getAcceptedIssuers() {  
        return null;  
    }  
  
}

3.在初始化httpclient实例前加上两行:

ProtocolSocketFactory fcty = new MySecureProtocolSocketFactory();  
		Protocol.registerProtocol("https", new Protocol("https", fcty, 443));

至此基本就能解决上面的问题了，祝你工作顺利，有什么疑问大家可以评论留言！！！！