okhttp3 支持 https的坑

最新推荐文章于 2024-11-27 12:28:54 发布

原创最新推荐文章于 2024-11-27 12:28:54 发布 · 2.6k 阅读

1 ·

CC 4.0 BY-SA版权

文章标签：

#java

java 专栏收录该内容

29 篇文章

订阅专栏

本文讲述了如何解决在迁移到HTTPS时遇到的java.io.IOException和SSL相关问题，介绍了使用SSLUtils创建SSLSocketFactory和TrustManager，以及针对JDK9+的兼容策略，确保在项目中OkHttp 4.2.0版本下稳定支持HTTPS连接。

最开始由于第三方切换为https了，会出现

java.io.IOException: Hostname was not verified

所以要支持https了，这里碰到个okhttp3的坑，项目中okhttp的版本为4.2.0

<dependency>
    <groupId>com.squareup.okhttp3</groupId>
    <artifactId>okhttp</artifactId>
    <version>4.2.0</version>
</dependency>

另一个是版本兼容问题，如下错误

Caused by: java.lang.UnsupportedOperationException: clientBuilder.sslSocketFactory(SSLSocketFactory) not supported on JDK 9+

修复方案，增加一个SSLSocketClientUtils

public class SSLUtils{
 
    //获取SSLSocketFactory
    public static SSLSocketFactory getSSLSocketFactory() {
        try {
            SSLContext sslContext = SSLContext.getInstance("SSL");
            sslContext.init(null, getTrustManager(), new SecureRandom());
            return sslContext.getSocketFactory();
        } catch (Exception e) {
            throw new RuntimeException(e);
        }
    }
 
    //获取TrustManager
    private static TrustManager[] getTrustManager() {
        return new TrustManager[]{
                new X509TrustManager() {
                    @Override
                    public void checkClientTrusted(X509Certificate[] chain, String authType) {
                    }
 
                    @Override
                    public void checkServerTrusted(X509Certificate[] chain, String authType) {
                    }
 
                    @Override
                    public X509Certificate[] getAcceptedIssuers() {
                        return new X509Certificate[]{};
                    }
                }
        };
    }
 
    //获取HostnameVerifier
    public static HostnameVerifier getHostnameVerifier() {
        return (s, sslSession) -> true;
    }
 
    public static X509TrustManager getX509TrustManager() {
        X509TrustManager trustManager = null;
        try {
            TrustManagerFactory trustManagerFactory = TrustManagerFactory.getInstance(TrustManagerFactory.getDefaultAlgorithm());
            trustManagerFactory.init((KeyStore) null);
            TrustManager[] trustManagers = trustManagerFactory.getTrustManagers();
            if (trustManagers.length != 1 || !(trustManagers[0] instanceof X509TrustManager)) {
                throw new IllegalStateException("Unexpected default trust managers:" + Arrays.toString(trustManagers));
            }
            trustManager = (X509TrustManager) trustManagers[0];
        } catch (Exception e) {
            e.printStackTrace();
        }
 
        return trustManager;
    }

}

调用的地方


 final OkHttpClient okHttpClient = new OkHttpClient.Builder()
            .readTimeout(60, TimeUnit.SECONDS)
            .connectTimeout(60, TimeUnit.SECONDS)
            .sslSocketFactory(SSLUtils.getSSLSocketFactory(), SSLUtils.getX509TrustManager())
            .hostnameVerifier(SSLUtils.getHostnameVerifier())