java跳过https_Java跳过Https安全Get或Post访问

为了方便以后使用,记录一下。

一、证书信任管理器

/**

* MyX509TrustManager.java 2013-11-29

*

* Copyright(c) 2000-2013 Rain, All Rights Reserved.

*/

package com.rain.weixin.util;

import java.security.cert.CertificateException;

import java.security.cert.X509Certificate;

import javax.net.ssl.X509TrustManager;

/**

* 证书信任管理器(用于https请求)

*

* @author Rain

* @date 2013-11-29

* @version 1.0

*/

public class MyX509TrustManager implements X509TrustManager {

@Override

public void checkClientTrusted(X509Certificate[] arg0, String arg1) throws CertificateException {

// TODO Auto-generated method stub

}

@Override

public void checkServerTrusted(X509Certificate[] arg0, String arg1) throws CertificateException {

// TODO Auto-generated method stub

}

@Override

public X509Certificate[] getAcceptedIssuers() {

// TODO Auto-generated method stub

return null;

}

}二、Get或Post请求工具类

/**

* WeixinUtil.java 2013-11-29

*

* Copyright(c) 2000-2013 Rain, All Rights Reserved.

*/

package com.rain.weixin.util;

import java.io.BufferedReader;

import java.io.InputStream;

import java.io.InputStreamReader;

import java.io.OutputStream;

import java.net.ConnectException;

import java.net.URL;

import javax.net.ssl.HttpsURLConnection;

import javax.net.ssl.SSLContext;

import javax.net.ssl.SSLSocketFactory;

import javax.net.ssl.TrustManager;

import org.json.JSONException;

import org.json.JSONObject;

import org.slf4j.Logger;

import org.slf4j.LoggerFactory;

import com.rain.weixin.AccessToken;

import com.rain.weixin.Menu;

/**

* 微信工具类

*

* @author Rain

* @date 2013-11-29

* @version 1.0

*/

public class WeixinUtil {

private static Logger LOG = LoggerFactory.getLogger(WeixinUtil.class);

// 获取access_token的接口地址(GET) 限200(次/天)

public final static String access_token_url = "https://api.weixin.qq.com/cgi-bin/token?grant_type=client_credential&appid=APPID&secret=APPSECRET";

// 菜单创建(POST) 限100(次/天)

public static String menu_create_url = "https://api.weixin.qq.com/cgi-bin/menu/create?access_token=ACCESS_TOKEN";

/**

* 发起https请求并获取结果

*

* @param requestUrl 请求地址

* @param requestMethod 请求方式(GET、POST)

* @param outputStr 提交的数据

* @return JSONObject(通过JSONObject.get(key)的方式获取json对象的属性值)

*/

public static JSONObject httpRequest(String requestUrl, String requestMethod, String outputStr) {

JSONObject jsonObject = null;

StringBuffer buffer = new StringBuffer();

try {

// 创建SSLContext对象,并使用我们指定的信任管理器初始化

TrustManager[] tm = { new MyX509TrustManager() };

SSLContext sslContext = SSLContext.getInstance("SSL", "SunJSSE");

sslContext.init(null, tm, new java.security.SecureRandom());

// 从上述SSLContext对象中得到SSLSocketFactory对象

SSLSocketFactory ssf = sslContext.getSocketFactory();

URL url = new URL(requestUrl);

HttpsURLConnection httpUrlConn = (HttpsURLConnection) url.openConnection();

httpUrlConn.setSSLSocketFactory(ssf);

httpUrlConn.setDoOutput(true);

httpUrlConn.setDoInput(true);

httpUrlConn.setUseCaches(false);

// 设置请求方式(GET/POST)

httpUrlConn.setRequestMethod(requestMethod);

if ("GET".equalsIgnoreCase(requestMethod))

httpUrlConn.connect();

// 当有数据需要提交时

if (null != outputStr) {

OutputStream outputStream = httpUrlConn.getOutputStream();

// 注意编码格式,防止中文乱码

outputStream.write(outputStr.getBytes("UTF-8"));

outputStream.close();

}

// 将返回的输入流转换成字符串

InputStream inputStream = httpUrlConn.getInputStream();

InputStreamReader inputStreamReader = new InputStreamReader(inputStream, "utf-8");

BufferedReader bufferedReader = new BufferedReader(inputStreamReader);

String str = null;

while ((str = bufferedReader.readLine()) != null) {

buffer.append(str);

}

bufferedReader.close();

inputStreamReader.close();

// 释放资源

inputStream.close();

inputStream = null;

httpUrlConn.disconnect();

jsonObject = new JSONObject(buffer.toString());

} catch (ConnectException ce) {

LOG.error("Weixin server connection timed out.");

} catch (Exception e) {

LOG.error("https request error:{}", e);

}

return jsonObject;

}

/**

* 获取access_token

*

* @param appid 凭证

* @param appsecret 密钥

* @return

*/

public static AccessToken getAccessToken(String appid, String appsecret) {

AccessToken accessToken = null;

String requestUrl = access_token_url.replace("APPID", appid).replace("APPSECRET", appsecret);

JSONObject jsonObject = httpRequest(requestUrl, "GET", null);

// 如果请求成功

if (null != jsonObject) {

try {

accessToken = new AccessToken();

accessToken.setToken(jsonObject.getString("access_token"));

accessToken.setExpiresIn(jsonObject.getInt("expires_in"));

} catch (JSONException e) {

accessToken = null;// 获取token失败

LOG.error("获取token失败 errcode:{} errmsg:{}", jsonObject.getInt("errcode"), jsonObject.getString("errmsg"));

}

}

return accessToken;

}

/**

* 创建菜单

*

* @param menu 菜单实例

* @param accessToken 有效的access_token

* @return 0表示成功,其他值表示失败

*/

public static int createMenu(Menu menu, String accessToken) {

int result = 0;

// 拼装创建菜单的url

String url = menu_create_url.replace("ACCESS_TOKEN", accessToken);

// 将菜单对象转换成json字符串

String jsonMenu = JacksonXmlUtil.object2Json(menu);

LOG.info("menu:" + jsonMenu);

// 调用接口创建菜单

JSONObject jsonObject = httpRequest(url, "POST", jsonMenu);

if (null != jsonObject) {

if (0 != jsonObject.getInt("errcode")) {

result = jsonObject.getInt("errcode");

LOG.error("创建菜单失败 errcode:{} errmsg:{}", jsonObject.getInt("errcode"), jsonObject.getString("errmsg"));

}

}

return result;

}

}

  • 0
    点赞
  • 0
    收藏
    觉得还不错? 一键收藏
  • 0
    评论
Java 请求 HTTPS 时有几种方法可以跳过认证: 1. 关闭 SSL 验证 这种方式不建议使用,因为关闭 SSL 验证会导致安全风险。 代码如下: ```java TrustManager[] trustAllCerts = new TrustManager[] { new X509TrustManager() { public java.security.cert.X509Certificate[] getAcceptedIssuers() { return new java.security.cert.X509Certificate[0]; } public void checkClientTrusted(X509Certificate[] certs, String authType) { } public void checkServerTrusted(X509Certificate[] certs, String authType) { } } }; SSLContext sc = SSLContext.getInstance("TLS"); sc.init(null, trustAllCerts, new java.security.SecureRandom()); HttpsURLConnection.setDefaultSSLSocketFactory(sc.getSocketFactory()); ``` 2. 添加自定义证书 这种方式需要将自定义证书添加到 Java 运行环境中。 代码如下: ```java KeyStore keyStore = KeyStore.getInstance("JKS"); FileInputStream inputStream = new FileInputStream(new File("your_keystore_path")); keyStore.load(inputStream, "your_keystore_password".toCharArray()); TrustManagerFactory trustManagerFactory = TrustManagerFactory.getInstance(TrustManagerFactory.getDefaultAlgorithm()); trustManagerFactory.init(keyStore); SSLContext sslContext = SSLContext.getInstance("TLS"); sslContext.init(null, trustManagerFactory.getTrustManagers(), new SecureRandom()); HttpsURLConnection.setDefaultSSLSocketFactory(sslContext.getSocketFactory()); ``` 3. 使用 HttpURLConnection 类 如果是简单的 HTTP 请求,可以使用 HttpURLConnection 类代替 HttpsURLConnection 类,这样就不需要进行 SSL 认证。 代码如下: ```java URL url = new URL("your_url"); HttpURLConnection conn = (HttpURLConnection) url.openConnection(); conn.setRequestMethod("GET"); BufferedReader in = new BufferedReader( new InputStreamReader(conn.getInputStream())); String inputLine; StringBuilder response = new StringBuilder(); while ((inputLine = in.readLine()) != null) { response.append(inputLine); } in.close(); ```

“相关推荐”对你有帮助么?

  • 非常没帮助
  • 没帮助
  • 一般
  • 有帮助
  • 非常有帮助
提交
评论
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值