解决 https 证书验证不通过的问题

最新推荐文章于 2024-03-20 19:33:00 发布

weixin_30758821

最新推荐文章于 2024-03-20 19:33:00 发布

阅读量908

点赞数

CC 4.0 BY-SA版权

文章标签： php java

原文链接：http://www.cnblogs.com/wade-luffy/p/6767925.html

本文介绍了一种在Java中禁用SSL证书验证的方法，通过重写TrustManager的checkClientTrusted和checkServerTrusted方法及HostnameVerifier的verify方法来实现。此方法会影响到整个Tomcat服务器内的证书验证。

解决的办法：忽略服务端和客户端的证书校验即可。java 提供的相关的类。

通过重写TrustManager的checkClientTrusted（检查客户端证书信任）和checkServerTrusted（检查服务端证书验证）。以及HostnameVerifier的verify（校验）方法即可取消对证书的所有验证。

import javax.net.ssl.*;
import java.io.IOException;
import java.net.URL;
import java.security.cert.CertificateException;
import java.security.cert.X509Certificate;
public class DisableSSLCertificate {
    private static final Logger LOGGER = LoggerFactory.getLogger(DisableSSLCertificateCheckUtil.class);
    private DisableSSLCertificate() {
    }
    public void disableChecks() {
        try {
            new URL("https://0.0.0.0/").getContent();
        } catch (IOException e) {
            // This invocation will always fail, but it will register the
            // default SSL provider to the URL class.
        }
        try {
            SSLContext sslc;
            sslc = SSLContext.getInstance("TLS");
            TrustManager[] trustManagerArray = {new X509TrustManager() {
                @Override
                public void checkClientTrusted(X509Certificate[] chain, String authType) throws CertificateException {
                }
                @Override
                public void checkServerTrusted(X509Certificate[] chain, String authType) throws CertificateException {
                }
                @Override
                public X509Certificate[] getAcceptedIssuers() {
                    return new X509Certificate[0];
                }
            }};
            sslc.init(null, trustManagerArray, null);
            HttpsURLConnection.setDefaultSSLSocketFactory(sslc.getSocketFactory());
            HttpsURLConnection.setDefaultHostnameVerifier(new HostnameVerifier() {
                @Override
                public boolean verify(String s, SSLSession sslSession) {
                    return true;
                }
            });
        } catch (Exception e) {
            LOGGER.error("error msg:{}", e);
            throw new IllegalArgumentException("证书校验异常！");
        }
    }
}