用于后台通过HttpURLConnection访问绕过SSL认证

最新推荐文章于 2024-08-12 11:34:51 发布

zabaniya1886

最新推荐文章于 2024-08-12 11:34:51 发布

阅读量2k

点赞数 2

CC 4.0 BY-SA版权

分类专栏： Spring 文章标签： spring java https

本文链接：https://blog.csdn.net/a121212789/article/details/129662227

这篇博客介绍了如何在Java后端通过HttpURLConnection访问HTTPS网站时，绕过SSL证书认证。提供了一个实用的工具类供开发者直接引用。

如果不用httpclient而是用HttpURLConnection来进行访问https网站如何实现绕过SSL认证

本人写了一个工具类

import java.security.cert.CertificateException;
import java.security.cert.X509Certificate;

import javax.net.ssl.HostnameVerifier;
import javax.net.ssl.HttpsURLConnection;
import javax.net.ssl.SSLContext;
import javax.net.ssl.SSLSession;
import javax.net.ssl.TrustManager;
import javax.net.ssl.X509TrustManager;

/**
 * 用于HttpURLConnection方法
 */
public class SslUtils {

    public static void trustAllHttpsCertificates() throws Exception {
        TrustManager[] trustAllCerts = new TrustManager[1];
        TrustManager tm = new miTM();
        trustAllCerts[0] = tm;
        SSLContext sc = SSLContext.getInstance("SSL");
        sc.init(null, trustAllCerts, null);
        HttpsURLConnection.setDefaultSSLSocketFactory(sc.getSocketFactory());
    }

    static class miTM implements TrustManager, X509TrustManager {
        public X509Certificate[] getAcceptedIssuers() {