关于一个项目中多个SSL冲突的解决办法

最新推荐文章于 2022-06-13 10:04:47 发布

转载最新推荐文章于 2022-06-13 10:04:47 发布 · 851 阅读

0 ·

CC 4.0 BY-SA版权

原文链接：https://my.oschina.net/myshop/blog/158690

文章标签：

#java #开发工具

本文深入探讨了编程领域中常见的误解——为什么在众多程序员中，只有少数能够晋升为架构师职位。通过剖析架构师的角色、所需技能及与普通程序员之间的差异，旨在帮助程序员理解并追求成为架构师的路径。

为什么80%的码农都做不了架构师？>>>

package com.spider.business;

import java.net.HttpURLConnection;
import java.net.URL;

import javax.net.ssl.HostnameVerifier;
import javax.net.ssl.HttpsURLConnection;
import javax.net.ssl.SSLSession;

//import org.apache.xerces.impl.dv.util.Base64;

/**
 * @author lyw
 */

public class Ssltest {

	public static void main(String[] args) throws Exception {
		new Ssltest().connect("http://www.baidu.com");
	}

	protected String connect(String strUrl) throws Exception {

		trustAllHttpsCertificates();
		HttpsURLConnection.setDefaultHostnameVerifier(hv);

		URL url = new URL(strUrl);
		HttpURLConnection urlConn = (HttpURLConnection) url.openConnection();
		System.out.println(urlConn);
		return strUrl;
	}

	HostnameVerifier hv = new HostnameVerifier() {
		public boolean verify(String urlHostName, SSLSession session) {
			System.out.println("Warning: URL Host: " + urlHostName + " vs. "
					+ session.getPeerHost());
			return true;
		}
	};

	public static void trustAllHttpsCertificates() throws Exception {

		// Create a trust manager that does not validate certificate chains:

		javax.net.ssl.TrustManager[] trustAllCerts = new javax.net.ssl.TrustManager[1];

		javax.net.ssl.TrustManager tm = new miTM();

		trustAllCerts[0] = tm;

		javax.net.ssl.SSLContext sc = javax.net.ssl.SSLContext
				.getInstance("SSL");

		sc.init(null, trustAllCerts, null);

		javax.net.ssl.HttpsURLConnection.setDefaultSSLSocketFactory(sc
				.getSocketFactory());

	}

	public static class miTM implements javax.net.ssl.TrustManager,
			javax.net.ssl.X509TrustManager {
		public java.security.cert.X509Certificate[] getAcceptedIssuers() {
			return null;
		}

		public boolean isServerTrusted(
				java.security.cert.X509Certificate[] certs) {
			return true;
		}

		public boolean isClientTrusted(
				java.security.cert.X509Certificate[] certs) {
			return true;
		}

		public void checkServerTrusted(
				java.security.cert.X509Certificate[] certs, String authType)
				throws java.security.cert.CertificateException {
			return;
		}

		public void checkClientTrusted(
				java.security.cert.X509Certificate[] certs, String authType)
				throws java.security.cert.CertificateException {
			return;
		}
	}

}

需要用的时候先执行Ssltest ssl = new Ssltest();
   ssl.trustAllHttpsCertificates();

转载于:https://my.oschina.net/myshop/blog/158690