minioClient 绕过证书访问

最新推荐文章于 2025-02-13 23:28:13 发布

S梦天涯S

最新推荐文章于 2025-02-13 23:28:13 发布

阅读量1.3k

点赞数 1

文章标签： java

本文链接：https://blog.youkuaiyun.com/weixin_42548604/article/details/125721671

版权

该博客展示了如何在Java中配置Minio客户端，使用OkHttpClient信任所有SSL证书，以实现与Minio服务器的不安全连接。通过设置自定义的TrustManager和HostnameVerifier，允许忽略证书验证，以达到连接目的。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

@Component
@Data
@Configuration
public class MinioConfig {

    @Value("${accessKey}")
    private String accessKey;
    @Value("${secretKey}")
    private String accessSecret;
    @Value("${endpoint}")
    private String endpoint;
    /**
     * 桶名称
     */
    private String bucketName = "XXXX";

    private OkHttpClient okHttpClient;

    @Bean(name = {"okHttpClient"})
    public OkHttpClient getUnsafeOkHttpClient() throws KeyManagementException {
        try {
            final TrustManager[] trustAllCerts = new TrustManager[]{
                    new X509TrustManager() {
                        @Override
                        public void checkClientTrusted(X509Certificate[] x509Certificates, String s) throws CertificateException {

                        }

                        @Override
                        public void checkServerTrusted(X509Certificate[] x509Certificates, String s) throws CertificateException {

                        }

                        @Override
                        public X509Certificate[] getAcceptedIssuers() {
                            return new X509Certificate[]{};
                        }
                    }
            };

            X509TrustManager x509TrustManager = (X509TrustManager) trustAllCerts[0];
            final SSLContext sslContext = SSLContext.getInstance("SSL");
            sslContext.init(null, trustAllCerts, new SecureRandom());
            final SSLSocketFactory sslSocketFactory = sslContext.getSocketFactory();
            OkHttpClient.Builder builder = new OkHttpClient.Builder();
            builder.sslSocketFactory(sslSocketFactory, x509TrustManager);


            builder.hostnameVerifier(new HostnameVerifier() {
                @Override
                public boolean verify(String s, SSLSession sslSession) {
                    return true;
                }
            });
            return builder.build();

        } catch (NoSuchAlgorithmException e) {
            e.printStackTrace();
        }
        return null;
    }

    @Bean(name = {"minioClient"})
    public MinioClient minioClient() throws KeyManagementException {
        return MinioClient
                .builder()
                .httpClient(getUnsafeOkHttpClient())
                .endpoint(endpoint)
                .credentials(accessKey, accessSecret)
                .build();
    }
}