使用IP调用https的webservice问题

最新推荐文章于 2022-07-08 14:42:30 发布

梓沂

最新推荐文章于 2022-07-08 14:42:30 发布

阅读量964

点赞数

文章标签： java https

www.acgist.com/article/393.html

使用IP调用https的webservice问题

2017年02月08日

错误信息：

 
         Caused by: javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: No subject alternative names present 
        
         at sun.security.ssl.Alerts.getSSLException(Alerts.java: 
         192 
         ) 
        
         at sun.security.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java: 
         1949 
         ) 
        
         at sun.security.ssl.Handshaker.fatalSE(Handshaker.java: 
         302 
         ) 
        
         at sun.security.ssl.Handshaker.fatalSE(Handshaker.java: 
         296 
         ) 
        
         at sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java: 
         1509 
         ) 
        
         at sun.security.ssl.ClientHandshaker.processMessage(ClientHandshaker.java: 
         216 
         ) 
        
         at sun.security.ssl.Handshaker.processLoop(Handshaker.java: 
         979 
         ) 
        
         at sun.security.ssl.Handshaker.process_record(Handshaker.java: 
         914 
         ) 
        
         at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java: 
         1062 
         ) 
        
         at sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java: 
         1375 
         ) 
        
         at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java: 
         1403 
         ) 
        
         at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java: 
         1387 
         ) 
        
         at sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java: 
         559 
         ) 
        
         at sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java: 
         185 
         ) 
        
         at sun.net.www.protocol.http.HttpURLConnection.getOutputStream0(HttpURLConnection.java: 
         1283 
         ) 
        
         at sun.net.www.protocol.http.HttpURLConnection.getOutputStream(HttpURLConnection.java: 
         1258 
         ) 
        
         at sun.net.www.protocol.https.HttpsURLConnectionImpl.getOutputStream(HttpsURLConnectionImpl.java: 
         250 
         ) 
        
         at com.sun.xml.internal.ws.transport.http.client.HttpClientTransport.getOutput(HttpClientTransport.java: 
         104 
         ) 
        
         ...  
         39  
         more 
        
         Caused by: java.security.cert.CertificateException: No subject alternative names present 
        
         at sun.security.util.HostnameChecker.matchIP(HostnameChecker.java: 
         144 
         ) 
        
         at sun.security.util.HostnameChecker.match(HostnameChecker.java: 
         93 
         ) 
        
         at sun.security.ssl.X509TrustManagerImpl.checkIdentity(X509TrustManagerImpl.java: 
         455 
         ) 
        
         at sun.security.ssl.X509TrustManagerImpl.checkIdentity(X509TrustManagerImpl.java: 
         436 
         ) 
        
         at sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java: 
         200 
         ) 
        
         at sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java: 
         124 
         ) 
        
         at sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java: 
         1491 
         ) 
        
         ...  
         52  
         more

http请求错误：

 
         javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: No subject alternative names matching IP address xxx.xxx.xxx.xxx found 
        
         at com.sun.net.ssl.internal.ssl.Alerts.getSSLException(Alerts.java: 
         174 
         ) 
        
         at com.sun.net.ssl.internal.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java: 
         1747 
         ) 
        
         at com.sun.net.ssl.internal.ssl.Handshaker.fatalSE(Handshaker.java: 
         241 
         ) 
        
         at com.sun.net.ssl.internal.ssl.Handshaker.fatalSE(Handshaker.java: 
         235 
         )

后来发现不能使用IP调用https的webservice接口，解决办法：

1.使用域名访问

2.忽略SSL证书，代码如下：

 
         package  
         com.sojson.www.zhanzhang.utils; 
        
         import  
         java.security.cert.CertificateException; 
        
         import  
         java.security.cert.X509Certificate; 
        
         import  
         javax.net.ssl.HostnameVerifier; 
        
         import  
         javax.net.ssl.HttpsURLConnection; 
        
         import  
         javax.net.ssl.SSLContext; 
        
         import  
         javax.net.ssl.SSLSession; 
        
         import  
         javax.net.ssl.TrustManager; 
        
         import  
         javax.net.ssl.X509TrustManager; 
        
         public  
         class  
         SslUtils { 
        
         private  
         static  
         void  
         trustAllHttpsCertificates()  
         throws  
         Exception { 
        
         TrustManager[] trustAllCerts =  
         new  
         TrustManager[ 
         1 
         ]; 
        
         TrustManager tm =  
         new  
         miTM(); 
        
         trustAllCerts[ 
         0 
         ] = tm; 
        
         SSLContext sc = SSLContext.getInstance( 
         "SSL" 
         ); 
        
         sc.init( 
         null 
         , trustAllCerts,  
         null 
         ); 
        
         HttpsURLConnection.setDefaultSSLSocketFactory(sc.getSocketFactory()); 
        
         } 
        
         static  
         class  
         miTM  
         implements  
         TrustManager,X509TrustManager { 
        
         public  
         X509Certificate[] getAcceptedIssuers() { 
        
         return  
         null 
         ; 
        
         } 
        
         public  
         boolean  
         isServerTrusted(X509Certificate[] certs) { 
        
         return  
         true 
         ; 
        
         } 
        
         public  
         boolean  
         isClientTrusted(X509Certificate[] certs) { 
        
         return  
         true 
         ; 
        
         } 
        
         public  
         void  
         checkServerTrusted(X509Certificate[] certs, String authType) 
        
         throws  
         CertificateException { 
        
         return 
         ; 
        
         } 
        
         public  
         void  
         checkClientTrusted(X509Certificate[] certs, String authType) 
        
         throws  
         CertificateException { 
        
         return 
         ; 
        
         } 
        
         } 
        
         /** 
        
         * 忽略HTTPS请求的SSL证书，必须在openConnection之前调用 
        
         * @throws Exception 
        
         */ 
        
         public  
         static  
         void  
         ignoreSsl()  
         throws  
         Exception{ 
        
         HostnameVerifier hv =  
         new  
         HostnameVerifier() { 
        
         public  
         boolean  
         verify(String urlHostName, SSLSession session) { 
        
         return  
         true 
         ; 
        
         } 
        
         }; 
        
         trustAllHttpsCertificates(); 
        
         HttpsURLConnection.setDefaultHostnameVerifier(hv); 
        
         } 
        
         }