OKHttp3忽略Https证书

最新推荐文章于 2025-07-21 16:27:26 发布

原创最新推荐文章于 2025-07-21 16:27:26 发布 · 2.5k 阅读

2 ·

CC 4.0 BY-SA版权

java小技巧专栏收录该内容

21 篇文章

订阅专栏

本文介绍了一个使用OkHttp的客户端类ComHttpClient的实现细节，包括连接池设置、超时配置及忽略HTTPS证书验证的过程。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

public class ComHttpClient {

    protected OkHttpClient client;

    public ComHttpClient() {
        init();
    }

    private static int READ_TIMEOUT = 30000;
    private static int CONNECT_TIMEOUT = 30000;
    private static int CONNECTION_POOL_MAX_IDEL = 20;
    private static int CONNECTION_POOL_KEEP_ALIVE = 20;

    // 忽略Https证书
    public void init() {
        ConnectionPool connectionPool = new ConnectionPool(CONNECTION_POOL_MAX_IDEL, CONNECTION_POOL_KEEP_ALIVE, TimeUnit.MINUTES);
        TrustAllManager trustAllManager = new TrustAllManager();
        this.client = new OkHttpClient().newBuilder()
                .connectionPool(connectionPool)
                .connectTimeout(CONNECT_TIMEOUT, TimeUnit.MILLISECONDS)
                .readTimeout(READ_TIMEOUT, TimeUnit.MILLISECONDS)
                .sslSocketFactory(createTrustAllSSLFactory(trustAllManager), trustAllManager)
                .hostnameVerifier(createTrustAllHostnameVerifier())
                .retryOnConnectionFailure(true).build();
    }

    protected SSLSocketFactory createTrustAllSSLFactory(TrustAllManager trustAllManager) {
        SSLSocketFactory ssfFactory = null;
        try {
            SSLContext sc = SSLContext.getInstance("TLS");
            sc.init(null, new TrustManager[]{trustAllManager}, new SecureRandom());
            ssfFactory = sc.getSocketFactory();
        } catch (Exception ignored) {
            ignored.printStackTrace();
        }

        return ssfFactory;
    }

    //获取HostnameVerifier 
    protected HostnameVerifier createTrustAllHostnameVerifier() {
        return new HostnameVerifier() {
            @Override
            public boolean verify(String hostname, SSLSession session) {
                return true;
            }
        };
     }

}

import javax.net.ssl.X509TrustManager;
import java.security.cert.CertificateException;
import java.security.cert.X509Certificate;

public class TrustAllManager implements X509TrustManager {
    @Override
    public void checkClientTrusted(X509Certificate[] chain, String authType) throws CertificateException {
    }

    @Override
    public void checkServerTrusted(X509Certificate[] chain, String authType) throws CertificateException {
    }

    @Override
    public X509Certificate[] getAcceptedIssuers() {
        return new X509Certificate[0];
    }
}