java 忽略https 不安全与此站点的连接不安全

本文链接：https://blog.youkuaiyun.com/u014161595/article/details/131017342

该代码示例展示了如何创建一个自定义的X509TrustManager，不执行任何证书检查，并设置HTTPS连接忽略域名验证。这用于允许不安全的连接，但在生产环境中应谨慎使用，因为这会降低安全性。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

MyX509TrustManager myTrustManager = new MyX509TrustManager();
            TrustManager[] trustManagers = new TrustManager[]{myTrustManager};
            SSLContext sslContext = SSLContext.getInstance("TLS");
            sslContext.init(null, trustManagers, null);

            // 获取 HostnameVerifier 对象，忽略域名校验错误
            HostnameVerifier hostnameVerifier = (s, sslSession) -> true;

            URL url = new URL(fileStorage.getFileUrl());
            URLConnection urlConnection = url.openConnection();
            if (urlConnection instanceof HttpsURLConnection) {
                ((HttpsURLConnection) urlConnection).setSSLSocketFactory(sslContext.getSocketFactory());
                HttpsURLConnection.setDefaultHostnameVerifier(hostnameVerifier);
            }
            InputStream chartFileInputStream = urlConnection.getInputStream();

package cn.thuniwhir.ydmh.support.security;

import javax.net.ssl.X509TrustManager;
import java.security.cert.CertificateException;
import java.security.cert.X509Certificate;

public class MyX509TrustManager implements X509TrustManager {
    public void checkClientTrusted(X509Certificate[] chain, String authType) throws CertificateException {
    }

    public void checkServerTrusted(X509Certificate[] chain, String authType) throws CertificateException {
    }

    public X509Certificate[] getAcceptedIssuers() {
        return new X509Certificate[0];
    }
}