java发送https忽略证书

最新推荐文章于 2025-10-27 16:28:40 发布

原创最新推荐文章于 2025-10-27 16:28:40 发布 · 1.5k 阅读

2 ·

CC 4.0 BY-SA版权

文章标签：

#java #https #http

总结专栏收录该内容

2 篇文章

订阅专栏

这段代码展示了如何在Java中创建一个信任所有主机的SSL上下文，禁用了证书验证，允许不安全的连接。这在开发和测试环境中可能有用，但在生产环境中这样做会极大地增加安全风险。

private static void trustAllHosts() {
        // Create a trust manager that does not validate certificate chains
        TrustManager[] trustAllCerts = new TrustManager[] { new X509TrustManager() {
            public java.security.cert.X509Certificate[] getAcceptedIssuers() {
                return new java.security.cert.X509Certificate[] {};
            }
 
            public void checkClientTrusted(X509Certificate[] chain, String authType) {
            }
 
            public void checkServerTrusted(X509Certificate[] chain, String authType) {
            }
        } };
        // Install the all-trusting trust manager
        try {
            SSLContext sc = SSLContext.getInstance("TLS");
            sc.init(null, trustAllCerts, new java.security.SecureRandom());
            HttpsURLConnection.setDefaultSSLSocketFactory(sc.getSocketFactory());
        } catch (Exception e) {
            e.printStackTrace();
        }
    }