java连接https时禁用证书验证.

 
 

   
   

    
    

   
   
   
   

    
    

     
     import java.io.File;
    
    
   
   

   
   

    
    

   
   
   
   

    
    

     
     import java.security.cert.CertificateException;
    
    
   
   

   
   

    
    

   
   
   
   

    
    

     
     import java.util.List;
    
    
   
   

   
   

    
    

   
   
   
   

    
    

     
     import java.util.Map;
    
    
   
   

   
   

    
    

   
   
   
   

    
    
 
    
    
   
   

   
   

    
    

   
   
   
   

    
    

     
     import javax.net.ssl.SSLContext;
    
    
   
   

   
   

    
    

   
   
   
   

    
    
 
    
    
   
   

   
   

    
    

   
   
   
   

    
    

     
     import org.apache.http.conn.ssl.SSLConnectionSocketFactory;
    
    
   
   

   
   

    
    

   
   
   
   

    
    

     
     import org.apache.http.conn.ssl.TrustSelfSignedStrategy;
    
    
   
   

   
   

    
    

   
   
   
   

    
    

     
     import org.apache.http.conn.ssl.TrustStrategy;
    
    
   
   

   
   

    
    

   
   
   
   

    
    

     
     import org.apache.http.impl.client.CloseableHttpClient;
    
    
   
   

   
   

    
    

   
   
   
   

    
    

     
     import org.apache.http.impl.client.HttpClients;
    
    
   
   

   
   

    
    

   
   
   
   

    
    

     
     import org.apache.http.ssl.SSLContexts;
    
    
   
   

   
   

    
    

   
   
   
   

    
    

     
     import org.springframework.beans.factory.annotation.Autowired;
    
    
   
   

   
   

    
    

   
   
   
   

    
    

     
     import org.springframework.http.client.HttpComponentsClientHttpRequestFactory;
    
    
   
   

   
   

    
    

   
   
   
   

    
    

     
     import org.springframework.security.core.annotation.AuthenticationPrincipal;
    
    
   
   

   
   

    
    

   
   
   
   

    
    

     
     import org.springframework.stereotype.Controller;
    
    
   
   

   
   

    
    

   
   
   
   

    
    

     
     import org.springframework.web.bind.annotation.RequestMapping;
    
    
   
   

   
   

    
    

   
   
   
   

    
    

     
     import org.springframework.web.bind.annotation.RequestMethod;
    
    
   
   

   
   

    
    

   
   
   
   

    
    

     
     import org.springframework.web.bind.annotation.ResponseBody;
    
    
   
   

   
   

    
    

   
   
   
   

    
    

     
     import org.springframework.web.client.RestTemplate;
    
    
   
   

   
   

    
    

   
   
   
   

    
    
 
    
    
   
   

   
   

    
    

   
   
   
   

    
    
    
     
     public String test_getssoinfo() throws Exception {
    
    
   
   

   
   

    
    

   
   
   
   

    
    
        
    
    
   
   

   
   

    
    

   
   
   
   

    
    

     
             TrustStrategy acceptingTrustStrategy = 
     
     new TrustStrategy() {
    
    
   
   

   
   

    
    

   
   
   
   

    
    
 
    
    
   
   

   
   

    
    

   
   
   
   

    
    
            
     
     @Override
    
    
   
   

   
   

    
    

   
   
   
   

    
    
            
     
     public boolean isTrusted(java.security.cert.X509Certificate[] chain,
    
    
   
   

   
   

    
    

   
   
   
   

    
    

     
                         String authType) 
     
     throws CertificateException {
    
    
   
   

   
   

    
    

   
   
   
   

    
    

     
                     System.out.println(
     
     "in isTrusted" );
    
    
   
   

   
   

    
    

   
   
   
   

    
    
                
     
     // TODO 完成方法实现
    
    
   
   

   
   

    
    

   
   
   
   

    
    
                
     
     return 
     
     true;
    
    
   
   

   
   

    
    

   
   
   
   

    
    

     
                 }
    
    
   
   

   
   

    
    

   
   
   
   

    
    

     
             } ;
    
    
   
   

   
   

    
    

   
   
   
   

    
    
 
    
    
   
   

   
   

    
    

   
   
   
   

    
    

     
             SSLContext sslContext = org.apache.http.ssl.SSLContexts.custom()
    
    
   
   

   
   

    
    

   
   
   
   

    
    

     
                     .loadTrustMaterial(
     
     null, acceptingTrustStrategy)
    
    
   
   

   
   

    
    

   
   
   
   

    
    

     
                     .build();
    
    
   
   

   
   

    
    

   
   
   
   

    
    
 
    
    
   
   

   
   

    
    

   
   
   
   

    
    

     
             SSLConnectionSocketFactory csf = 
     
     new SSLConnectionSocketFactory(sslContext);
    
    
   
   

   
   

    
    

   
   
   
   

    
    
 
    
    
   
   

   
   

    
    

   
   
   
   

    
    

     
             CloseableHttpClient httpClient = HttpClients.custom()
    
    
   
   

   
   

    
    

   
   
   
   

    
    

     
                     .setSSLSocketFactory(csf)
    
    
   
   

   
   

    
    

   
   
   
   

    
    

     
                     .build();
    
    
   
   

   
   

    
    

   
   
   
   

    
    
 
    
    
   
   

   
   

    
    

   
   
   
   

    
    

     
             HttpComponentsClientHttpRequestFactory requestFactory =
    
    
   
   

   
   

    
    

   
   
   
   

    
    
                
     
     new HttpComponentsClientHttpRequestFactory();
    
    
   
   

   
   

    
    

   
   
   
   

    
    
 
    
    
   
   

   
   

    
    

   
   
   
   

    
    

     
             requestFactory.setHttpClient(httpClient);
    
    
   
   

   
   

    
    

   
   
   
   

    
    
        
    
    
   
   

   
   

    
    

   
   
   
   

    
    

     
             RestTemplate restTemplate = 
     
     new RestTemplate(requestFactory);
    
    
   
   

   
   

    
    

   
   
   
   

    
    

     
     //        RestTemplate restTemplate = new RestTemplate();
    
    
   
   

   
   

    
    

   
   
   
   

    
    

     
             String userJsonStr = restTemplate.getForObject(
     
     "https://www.xxx.yy/", String.class);
    
    
   
   

   
   

    
    

   
   
   
   

    
    
        
     
     return userJsonStr;
    
    
   
   

   
   

    
    

   
   
   
   

    
    

     
         }
    
    
   
   
 
 

okhttp:

 
 

   
   

    
    

   
   
   
   

    
    

     
     X509TrustManager trustManager = 
     
     new X509TrustManager()
    
    
   
   

   
   

    
    

   
   
   
   

    
    

     
     			{
    
    
   
   

   
   

    
    

   
   
   
   

    
    
				
     
     @Override
    
    
   
   

   
   

    
    

   
   
   
   

    
    
				
     
     public void checkClientTrusted(java.security.cert.X509Certificate[] arg0, String arg1) throws java.security.cert.CertificateException
    
    
   
   

   
   

    
    

   
   
   
   

    
    

     
     				{
    
    
   
   

   
   

    
    

   
   
   
   

    
    

     
     				}
    
    
   
   

   
   

    
    

   
   
   
   

    
    
				
     
     @Override
    
    
   
   

   
   

    
    

   
   
   
   

    
    
				
     
     public void checkServerTrusted(java.security.cert.X509Certificate[] arg0, String arg1) throws java.security.cert.CertificateException
    
    
   
   

   
   

    
    

   
   
   
   

    
    

     
     				{
    
    
   
   

   
   

    
    

   
   
   
   

    
    

     
     				}
    
    
   
   

   
   

    
    

   
   
   
   

    
    
				
     
     @Override
    
    
   
   

   
   

    
    

   
   
   
   

    
    
				
     
     public java.security.cert.X509Certificate[] getAcceptedIssuers()
    
    
   
   

   
   

    
    

   
   
   
   

    
    

     
     				{
    
    
   
   

   
   

    
    

   
   
   
   

    
    

     
     					StrUtil.log(
     
     "getAcceptedIssuers()");
    
    
   
   

   
   

    
    

   
   
   
   

    
    
					
     
     return 
     
     new X509Certificate[
     
     0];
    
    
   
   

   
   

    
    

   
   
   
   

    
    

     
     				}
    
    
   
   

   
   

    
    

   
   
   
   

    
    

     
     			};
    
    
   
   

   
   

    
    

   
   
   
   

    
    
 
    
    
   
   

   
   

    
    

   
   
   
   

    
    

     
     			SSLContext sslContext = SSLContext.getInstance(
     
     "SSL");
    
    
   
   

   
   

    
    

   
   
   
   

    
    

     
     			sslContext.init(
     
     null, 
     
     new X509TrustManager[] { trustManager }, 
     
     new java.security.SecureRandom());
    
    
   
   

   
   

    
    

   
   
   
   

    
    

     
     			SSLSocketFactory sslSocketFactory = sslContext.getSocketFactory();
    
    
   
   

   
   

    
    

   
   
   
   

    
    
			
    
    
   
   

   
   

    
    

   
   
   
   

    
    

     
     			builder.sslSocketFactory(sslSocketFactory, trustManager).hostnameVerifier(
     
     new HostnameVerifier()
    
    
   
   

   
   

    
    

   
   
   
   

    
    

     
     			{
    
    
   
   

   
   

    
    

   
   
   
   

    
    
				
     
     @Override
    
    
   
   

   
   

    
    

   
   
   
   

    
    
				
     
     public boolean verify(String hostname, SSLSession session)
    
    
   
   

   
   

    
    

   
   
   
   

    
    

     
     				{
    
    
   
   

   
   

    
    

   
   
   
   

    
    

     
     					StrUtil.log(
     
     "verify() hostname:" + hostname + 
     
     ", session:" + (session != 
     
     null ? session.toString() : 
     
     "null"));
    
    
   
   

   
   

    
    

   
   
   
   

    
    
					
     
     return 
     
     true;
    
    
   
   

   
   

    
    

   
   
   
   

    
    

     
     				}
    
    
   
   

   
   

    
    

   
   
   
   

    
    

     
     			});