OKHTTP sslsocketfactory 过期，解决方案

最新推荐文章于 2024-04-21 20:58:17 发布

伍肆伍柒

最新推荐文章于 2024-04-21 20:58:17 发布

阅读量2w

点赞数 4

分类专栏： okhttp

本文链接：https://blog.csdn.net/topc2000/article/details/104032485

版权

okhttp 专栏收录该内容

0 篇文章

订阅专栏

报错：clientBuilder.sslSocketFactory(SSLSocketFactory) not supported on JDK 9+

原因是单参数的构造函数被弃用。

            try {
                TrustManagerFactory trustManagerFactory = null;
                trustManagerFactory = TrustManagerFactory.getInstance(
                        TrustManagerFactory.getDefaultAlgorithm());
                trustManagerFactory.init((KeyStore) null);
                TrustManager[] trustManagers = trustManagerFactory.getTrustManagers();
                if (trustManagers.length != 1 || !(trustManagers[0] instanceof X509TrustManager)) {
                    throw new IllegalStateException("Unexpected default trust managers:"
                            + Arrays.toString(trustManagers));
                }
                X509TrustManager trustManager = (X509TrustManager) trustManagers[0];
                SSLContext sslContext = SSLContext.getInstance("TLS");
                sslContext.init(null, new TrustManager[]{trustManager}, null);
                SSLSocketFactory sslSocketFactory = sslContext.getSocketFactory();
                OkHttpClient okHttpClient = new OkHttpClient.Builder()
                        .sslSocketFactory(sslSocketFactory, trustManager).build()
                }catch(Exception e){}

在遇到双向证书的情况下，需要指定keymanager 以及TrustManager 如微信支付，发生企业支付，企业转账的时候。对上述代码进行更改如下

try {
            TrustManagerFactory trustManagerFactory = null;
            trustManagerFactory = TrustManagerFactory.getInstance(
                    TrustManagerFactory.getDefaultAlgorithm());
            trustManagerFactory.init((KeyStore) null);
            TrustManager[] trustManagers = trustManagerFactory.getTrustManagers();
            if (trustManagers.length != 1 || !(trustManagers[0] instanceof X509TrustManager)) {
                throw new IllegalStateException("Unexpected default trust managers:"
                        + Arrays.toString(trustManagers));
            }
            X509TrustManager trustManager = (X509TrustManager) trustManagers[0];

            KeyStore keystore = KeyStore.getInstance("PKCS12");
            char[] keyPassword = tradeNumber.toCharArray();
            //证书密码
            keystore.load(resource.getInputStream(), keyPassword);
            SSLContext wx_ssl_context = SSLContext.getInstance("TLS");
            KeyManagerFactory kmfactory = KeyManagerFactory.getInstance(KeyManagerFactory.getDefaultAlgorithm());
            kmfactory.init(keystore, keyPassword);
            wx_ssl_context.init(kmfactory.getKeyManagers(), new TrustManager[]{trustManager}, new SecureRandom());
            SSLSocketFactory sslSocketFactory = wx_ssl_context.getSocketFactory();
            OkHttpClient okHttpClient = new OkHttpClient.Builder()
                    .sslSocketFactory(sslSocketFactory, trustManager).connectionPool(new ConnectionPool(300, 3, TimeUnit.MINUTES)).build();
        } catch (Exception e) {
            e.printStackTrace();
        }