Https请求异常：javax.net.ssl.SSLHandshakeException

通过HttpClient对https协议的url发出请求，产生异常：

javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path validation failed: java.security.cert.CertPathValidatorException: basic constraints check failed: pathLenConstraint violated - this cert must be the last cert in the certification path 
是由于Java安全性策略导致，解决方法有导入cert证书和改变安全策略，选择第二种通过代码改变安全性，无条件接受所有证书，加两个类、两行代码：
类一：

import java.io.IOException;
import java.net.InetAddress;
import java.net.Socket;
import java.net.UnknownHostException;
import javax.net.ssl.SSLContext;
import javax.net.ssl.TrustManager;
import org.apache.commons.httpclient.ConnectTimeoutException;
import org.apache.commons.httpclient.HttpClientError;
import org.apache.commons.httpclient.params.HttpConnectionParams;
import org.apache.commons.httpclient.protocol.ControllerThreadSocketFactory;
import org.apache.commons.httpclient.protocol.SecureProtocolSocketFactory;

public class MySecureProtocolSocketFactory implements
  SecureProtocolSocketFactory {
 private SSLContext sslContext = null;

 /**
  * Constructor for MySecureProtocolSocketFactory.
  */
 public MySecureProtocolSocketFactory() {
 }

 /**
  *
  * @return
  */
 private static SSLContext createEasySSLContext() {
  try {
   SSLContext context = SSLContext.getInstance("SSL");
   context.init(null, new TrustManager[] { new MyX509TrustManager() },
     null);
   return context;
  } catch (Exception e) {
   throw new HttpClientError(e.toString());
  }
 }

 /**
  *
  * @return
  */
 private SSLContext getSSLContext() {
  if (this.sslContext == null) {
   this.sslContext = createEasySSLContext();
  }
  return this.sslContext;
 }

 /*
  * (non-Javadoc)
  *
  * @see org.apache.commons.httpclient.protocol.ProtocolSocketFactory#createSocket(java.lang.String,
  *      int, java.net.InetAddress, int)
  */
 public Socket createSocket(String host, int port, InetAddress clientHost,
   int clientPort) throws IOException, UnknownHostException {
  return getSSLContext().getSocketFactory().createSocket(host, port,
    clientHost, clientPort);
 }

 /*
  * (non-Javadoc)
  *
  * @see org.apache.commons.httpclient.protocol.ProtocolSocketFactory#createSocket(java.lang.String,
  *      int, java.net.InetAddress, int,
  *      org.apache.commons.httpclient.params.HttpConnectionParams)
  */
 public Socket createSocket(final String host, final int port,
   final InetAddress localAddress, final int localPort,
   final HttpConnectionParams params) throws IOException,
   UnknownHostException, ConnectTimeoutException {
  if (params == null) {
   throw new IllegalArgumentException("Parameters may not be null");
  }
  int timeout = params.getConnectionTimeout();
  if (timeout == 0) {
   return createSocket(host, port, localAddress, localPort);
  } else {
   return ControllerThreadSocketFactory.createSocket(this, host, port,
     localAddress, localPort, timeout);
  }
 }

 /*
  * (non-Javadoc)
  *
  * @see SecureProtocolSocketFactory#createSocket(java.lang.String,int)
  */
 public Socket createSocket(String host, int port) throws IOException,
   UnknownHostException {
  return getSSLContext().getSocketFactory().createSocket(host, port);
 }

 /*
  * (non-Javadoc)
  *
  * @see SecureProtocolSocketFactory#createSocket(java.net.Socket,java.lang.String,int,boolean)
  */
 public Socket createSocket(Socket socket, String host, int port,
   boolean autoClose) throws IOException, UnknownHostException {
  return getSSLContext().getSocketFactory().createSocket(socket, host,
    port, autoClose);
 }
}
类二：

import java.security.cert.CertificateException;
import java.security.cert.X509Certificate;
import javax.net.ssl.X509TrustManager;

public class MyX509TrustManager implements X509TrustManager {
 /*
  * (non-Javadoc)
  *
  * @see javax.net.ssl.X509TrustManager#checkClientTrusted(java.security.cert.X509Certificate[],
  *      java.lang.String)
  */
 public void checkClientTrusted(X509Certificate[] arg0, String arg1)
   throws CertificateException {
 }

 /*
  * (non-Javadoc)
  *
  * @see javax.net.ssl.X509TrustManager#checkServerTrusted(java.security.cert.X509Certificate[],
  *      java.lang.String)
  */
 public void checkServerTrusted(X509Certificate[] arg0, String arg1)
   throws CertificateException {
 }

 /*
  * (non-Javadoc)
  *
  * @see javax.net.ssl.X509TrustManager#getAcceptedIssuers()
  */
 public X509Certificate[] getAcceptedIssuers() {
  return null;
 }
} 
 两行代码：
HttpClient请求之前，加
//接受所有的安全证书
  ProtocolSocketFactory fcty = new MySecureProtocolSocketFactory();
  Protocol.registerProtocol("https", new Protocol("https", fcty, 443));