Hostname * not verified:certificate，HTTPS接口调用处理

公子旭

已于 2023-05-20 11:40:30 修改

阅读量3k

点赞数

分类专栏：通用Java 文章标签： https 网络协议 http okhttp java

于 2023-05-20 11:38:29 首次发布

本文链接：https://blog.csdn.net/guosyu/article/details/130779567

版权

通用Java 专栏收录该内容

16 篇文章 0 订阅

订阅专栏

使用OKHTTP调用HTTPS接口时，报错/异常信息：

Hostname * not verified:
certificate: sha256/F0yVXJ/nbG7JtrM+11NhtuKkepfbtzvXufVCUQ5Gxm4=
DN: CN=*.xxx.com, O=*有限公司, L=北京市, ST=北京市, C=CN
subjectAltNames: [*.xxx.com, xxx.com]

处理方式如下：

	/**
	 * 发送POST请求，调用HTTP接口
	 * @param url 接口地址
	 * @param params 接口参数（JSon格式）
	 * @return JSon
	 * 
	 */
	public static String post(String url, String params) throws Exception {
	    
		String json = null;
		if(params == null) params = "";
		TrustManagerFactory trustManagerFactory = null;
		trustManagerFactory = TrustManagerFactory.getInstance(TrustManagerFactory.getDefaultAlgorithm());
		trustManagerFactory.init((KeyStore) null);
		TrustManager[] trustManagers = trustManagerFactory.getTrustManagers();
		if (trustManagers.length != 1 || !(trustManagers[0] instanceof X509TrustManager)) {
		    throw new IllegalStateException("Unexpected default trust managers:" + Arrays.toString(trustManagers));
		}
		X509TrustManager trustManager = (X509TrustManager) trustManagers[0];
		SSLContext sslContext = SSLContext.getInstance("TLS");
		sslContext.init(null, new TrustManager[]{trustManager}, null);
		
    	OkHttpClient client = new OkHttpClient().newBuilder().connectTimeout(15, TimeUnit.SECONDS)
    	.readTimeout(70, TimeUnit.SECONDS).sslSocketFactory(create(), trustManager).hostnameVerifier(trusts()).build();
    	MediaType mediaType = MediaType.parse("application/json");
    	RequestBody body = RequestBody.create(mediaType, params);
	    
		Request.Builder builder = new Request.Builder();
		builder.url(url); //接口地址
		builder.method("POST", body);
		builder.addHeader("Content-Type", "application/json");
		Request request = builder.build();
		Response response = client.newCall(request).execute();
		ResponseBody responseBody = response.body();
		
		if (response.isSuccessful() && responseBody != null) {
			json = responseBody.string();
		} else {
			if(responseBody != null) json = responseBody.string();
		}
	    
    	return json;

	}

	/**
	 * 处理SSL协议（添加信任域名）
	 */
	private static HostnameVerifier trusts() {
		
	    return new HostnameVerifier() {
	        @Override
	        public boolean verify(String hostname, SSLSession session) {            
	            HostnameVerifier verifier = HttpsURLConnection.getDefaultHostnameVerifier();
	            return verifier.verify("*.xxx.com", session);
	        }
	    };
	    
	}
	
	/**
	 * 创建SSLSocketFactory
	 * @return SSLSocketFactory
	 */
	private static SSLSocketFactory create() {

        SSLSocketFactory sslFactory = null;
        try {
            SSLContext ctx = SSLContext.getInstance("TLS");
            ctx.init(null, new TrustManager[]{new Verifier()}, new SecureRandom());
            sslFactory = ctx.getSocketFactory();
        } catch (Exception e) {
        	e.printStackTrace();
        }

        return sslFactory;
        
    }