javax.net.ssl.SSLHandshakeException: Chain validation failed 异常

最新推荐文章于 2024-04-26 09:11:26 发布

铜锣烧_

最新推荐文章于 2024-04-26 09:11:26 发布

阅读量765

点赞数

分类专栏：工作日志文章标签： ssl https 网络协议

本文链接：https://blog.csdn.net/lanzievol/article/details/128663414

版权

工作日志专栏收录该内容

10 篇文章 0 订阅

订阅专栏

原因：ca证书到期了

解决：1.更新ca证书 2.跳过https验证机制

下面是跳过https验证的方法：

    // ---------跳过https验证机制---------
    //自定义SS验证相关类
    private static class TrustAllCerts implements X509TrustManager {
        @Override
        public void checkClientTrusted(X509Certificate[] chain, String authType) throws CertificateException {
        }

        @Override
        public void checkServerTrusted(X509Certificate[] chain, String authType) throws CertificateException {
        }

        @Override
        public X509Certificate[] getAcceptedIssuers() {
            return new X509Certificate[0];
        }
    }

    private static class TrustAllHostnameVerifier implements HostnameVerifier {
        @Override
        public boolean verify(String hostname, SSLSession session) {
            return true;
        }
    }

    private static SSLSocketFactory createSSLSocketFactory() {
        SSLSocketFactory ssfFactory = null;
        try {
            SSLContext sc = SSLContext.getInstance("TLS");
            sc.init(null, new TrustManager[]{new TrustAllCerts()}, new SecureRandom());
            ssfFactory = sc.getSocketFactory();
        } catch (Exception e) {
        }
        return ssfFactory;
    }

    new OkHttpClient.Builder()
    .sslSocketFactory(createSSLSocketFactory(), new X509TrustManager() {
                    @Override
                    public void checkClientTrusted(X509Certificate[] x509Certificates, String s) throws CertificateException {

                    }

                    @Override
                    public void checkServerTrusted(X509Certificate[] x509Certificates, String s) throws CertificateException {

                    }

                    @Override
                    public X509Certificate[] getAcceptedIssuers() {
                        return new X509Certificate[0];
                    }
                })
     .hostnameVerifier(new TrustAllHostnameVerifier())
     .build();