sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath

最新推荐文章于 2025-06-18 17:07:17 发布

原创最新推荐文章于 2025-06-18 17:07:17 发布 · 1.9k 阅读

0 ·

CC 4.0 BY-SA版权

文章标签：

#java #ssl

java技术专栏收录该内容

10 篇文章

订阅专栏

本文提供了一种通过Java代码实现忽略HTTPS服务器证书验证的方法。通过创建一个信任所有证书的TrustManager和HostnameVerifier，可以绕过对服务器证书的信任检查，从而解决因证书不受信任而导致的连接失败问题。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

解决sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

客户端无法信任服务器证书的问题, 忽略掉对服务器的验证

public void test3() throws NoSuchAlgorithmException, KeyManagementException, IOException
{
URL url = new URL("https://ts.com:8443/ttt/sss.html");
HostnameVerifier verifier = new HostnameVerifier()
{

@Override
public boolean verify(String paramString, SSLSession paramSSLSession)
{
return true;
}
};

TrustManager[] trustAllCerts = new TrustManager[1];
TrustManager tm = new miTM();
trustAllCerts[0] = tm;
SSLContext sc = SSLContext.getInstance("SSL");
sc.init(null, trustAllCerts, null);
HttpsURLConnection.setDefaultSSLSocketFactory(sc.getSocketFactory());
HttpsURLConnection.setDefaultHostnameVerifier(verifier);
URLConnection connection = url.openConnection();

BufferedReader reader = new BufferedReader(new InputStreamReader(connection.getInputStream(), "utf-8"));
String line = null;
while ((line = reader.readLine()) != null)
{
System.out.println(line);
}
reader.close();

}

import java.security.cert.CertificateException;
import java.security.cert.X509Certificate;

import javax.net.ssl.TrustManager;
import javax.net.ssl.X509TrustManager;

class miTM implements TrustManager, X509TrustManager
{

public X509Certificate[] getAcceptedIssuers()
{
return null;
}

public boolean isServerTrusted(X509Certificate[] certs)
{
return true;
}

public boolean isClientTrusted(X509Certificate[] certs)
{
return true;
}

public void checkServerTrusted(X509Certificate[] certs, String authType) throws CertificateException
{
return;
}

public void checkClientTrusted(X509Certificate[] certs, String authType) throws CertificateException
{
return;
}
}