记录一次Java中使用P12证书访问https，nginx返回403的问题

最新推荐文章于 2024-09-19 07:00:00 发布

雨雨雨就要爆炸了

最新推荐文章于 2024-09-19 07:00:00 发布

阅读量878

点赞数 7

分类专栏： Java进阶之路文章标签： java https nginx

本文链接：https://blog.csdn.net/m0_46109609/article/details/137682279

版权

Java进阶之路专栏收录该内容

26 篇文章 4 订阅

订阅专栏

文章讲述了作者在使用Java进行HTTPS请求时遇到403Forbidden的问题，通过测试证书、调试代码和添加User-Agent请求头，最终解决了问题并分享了解决方案。

摘要由CSDN通过智能技术生成

1、先使用浏览器导入证书访问，测试证书和密钥是否正确

在这里插入图片描述
成功返回，说明p12证书和密钥是没问题的。

2、编写初始java代码

import javax.net.ssl.*;
import java.io.BufferedReader;
import java.io.InputStream;
import java.io.InputStreamReader;
import java.net.URL;
import java.nio.file.Files;
import java.nio.file.Paths;
import java.security.KeyStore;
import java.security.SecureRandom;
import java.security.cert.CertificateException;
import java.security.cert.X509Certificate;

public class P12CertificateExample {
    public static void main(String[] args) throws Exception {
        // 加载P12证书文件
        String p12File = "E:\\xxxxxx.p12";
        String password = "xxxxxx";
        KeyStore keyStore = KeyStore.getInstance("PKCS12");
        InputStream inputStream = Files.newInputStream(Paths.get(p12File));
        keyStore.load(inputStream, password.toCharArray());

        // 创建KeyManagerFactory，并初始化
        KeyManagerFactory keyManagerFactory = KeyManagerFactory.getInstance(KeyManagerFactory.getDefaultAlgorithm());
        keyManagerFactory.init(keyStore, password.toCharArray());

        // 创建信任管理器
        TrustManager[] trustManagers = { new X509TrustManager() {
            @Override
            public void checkClientTrusted(X509Certificate[] x509Certificates, String s) throws CertificateException {
            }

            @Override
            public void checkServerTrusted(X509Certificate[] x509Certificates, String s) throws CertificateException {
            }

            @Override
            public X509Certificate[] getAcceptedIssuers() {
                return new X509Certificate[0];
            }
        } };

        // 创建SSL上下文并初始化
        SSLContext sslContext = SSLContext.getInstance("TLS");
        sslContext.init(keyManagerFactory.getKeyManagers(), trustManagers, new SecureRandom());

        // 设置默认的SSL上下文
        SSLContext.setDefault(sslContext);

        // 创建URL对象
        String url = "https://api.xxxx.com/xxx/xxx/xxx";
        HttpsURLConnection connection = (HttpsURLConnection) new URL(url).openConnection();
        HttpsURLConnection.setDefaultSSLSocketFactory(sslContext.getSocketFactory());
        HttpsURLConnection.setDefaultHostnameVerifier((hostname, session) -> true);
        // 发送请求
        connection.setRequestMethod("GET");
        connection.connect();

        // 获取响应
        int responseCode = connection.getResponseCode();
        InputStream responseStream;
        if (responseCode == HttpsURLConnection.HTTP_OK) {
            responseStream = connection.getInputStream();
        } else {
            responseStream = connection.getErrorStream();
        }

        // 处理响应数据
        // ...
        // 读取响应数据
        BufferedReader reader = new BufferedReader(new InputStreamReader(responseStream));
        StringBuilder response = new StringBuilder();
        String line;
        while ((line = reader.readLine()) != null) {
            response.append(line);
        }
        // 打印响应结果
        System.out.println("Response: " + response.toString());
        // 关闭连接和流
        responseStream.close();
        connection.disconnect();
    }
}

3、结果响应 403 Forbidden

在这里插入图片描述

Response: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>nginx</center></body></html>

4、解决方案

后经过漫长的排查…对代码添加请求头，如下：

connection.setRequestProperty("User-Agent","Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36");

java代码就能正常返回了。