HttpsURLConnection HTTPS 证书过期


private static void setDefaultSSLSocketFactory() {
		try {
			X509TrustManager x509TrustManager = getTrustManager();
			TrustManager[] trustAllCerts = new TrustManager[] { x509TrustManager };

			SSLContext sc = getSslContext(trustAllCerts);
			HttpsURLConnection.setDefaultSSLSocketFactory(sc.getSocketFactory());
		} catch (KeyManagementException | NoSuchAlgorithmException e) {
			e.printStackTrace();
		}
	}

	private static SSLContext getSslContext(TrustManager[] trustAllCerts)
			throws NoSuchAlgorithmException, KeyManagementException {
		SSLContext sc = SSLContext.getInstance("TLS");
		sc.init(null, trustAllCerts, new java.security.SecureRandom());
		return sc;
	}

	private static X509TrustManager getTrustManager() {
		X509TrustManager x509TrustManager = new X509TrustManager() {
			public java.security.cert.X509Certificate[] getAcceptedIssuers() {
				return new java.security.cert.X509Certificate[] {};
			}

			public void checkClientTrusted(java.security.cert.X509Certificate[] certs, String authType) {
			}

			public void checkServerTrusted(java.security.cert.X509Certificate[] certs, String authType) {
			}
		};
		return x509TrustManager;
	}


  • 0
    点赞
  • 0
    收藏
    觉得还不错? 一键收藏
  • 0
    评论
在Java中,HttpsURLConnection默认会验证服务器的证书,防止中间人攻击。如果你的HTTPS服务器使用的是自签名证书或者其他不受信任的证书,那么HttpsURLConnection会抛出javax.net.ssl.SSLHandshakeException异常。 如果你想跳过证书校验,可以使用以下代码: ```java import java.net.URL; import javax.net.ssl.HttpsURLConnection; import javax.net.ssl.SSLContext; import javax.net.ssl.TrustManager; import javax.net.ssl.X509TrustManager; import java.security.cert.X509Certificate; public class HttpsURLConnectionExample { public static void main(String[] args) throws Exception { String url = "https://www.example.com/api"; URL obj = new URL(url); // 创建一个信任管理器,跳过证书校验 TrustManager[] trustAllCerts = new TrustManager[] { new X509TrustManager() { public void checkClientTrusted(X509Certificate[] chain, String authType) {} public void checkServerTrusted(X509Certificate[] chain, String authType) {} public X509Certificate[] getAcceptedIssuers() { return new X509Certificate[0]; } } }; // 创建一个SSL上下文对象,跳过证书校验 SSLContext sslContext = SSLContext.getInstance("SSL"); sslContext.init(null, trustAllCerts, new java.security.SecureRandom()); // 创建一个HttpsURLConnection对象,使用上面创建的SSL上下文对象 HttpsURLConnection.setDefaultSSLSocketFactory(sslContext.getSocketFactory()); HttpsURLConnection con = (HttpsURLConnection) obj.openConnection(); // 设置请求方法 con.setRequestMethod("GET"); // 打印响应状态码 int responseCode = con.getResponseCode(); System.out.println("Response Code : " + responseCode); // 读取响应内容 BufferedReader in = new BufferedReader(new InputStreamReader(con.getInputStream())); String inputLine; StringBuffer response = new StringBuffer(); while ((inputLine = in.readLine()) != null) { response.append(inputLine); } in.close(); // 打印响应内容 System.out.println(response.toString()); } } ``` 在上面的示例代码中,我们创建了一个信任管理器,它跳过了证书校验。然后我们创建了一个SSL上下文对象,并使用上面创建的信任管理器初始化它。最后,我们将这个SSL上下文对象设置为默认的SSL套接字工厂,并使用它来创建一个HttpsURLConnection对象。这样我们就可以跳过证书校验,并正常使用HTTPS接口了。
评论
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值