1 package com.cucpay.tradeportal.util; 2 3 import java.io.IOException; 4 import java.net.SocketTimeoutException; 5 import java.nio.charset.Charset; 6 import java.security.cert.CertificateException; 7 import java.security.cert.X509Certificate; 8 import java.util.ArrayList; 9 import java.util.List; 10 import java.util.Map; 11 12 import javax.net.ssl.SSLContext; 13 import javax.net.ssl.SSLException; 14 import javax.net.ssl.SSLSession; 15 import javax.net.ssl.SSLSocket; 16 import javax.net.ssl.TrustManager; 17 import javax.net.ssl.X509TrustManager; 18 19 import org.apache.http.HttpEntity; 20 import org.apache.http.HttpResponse; 21 import org.apache.http.NameValuePair; 22 import org.apache.http.ParseException; 23 import org.apache.http.client.ClientProtocolException; 24 import org.apache.http.client.HttpClient; 25 import org.apache.http.client.entity.UrlEncodedFormEntity; 26 import org.apache.http.client.methods.HttpGet; 27 import org.apache.http.client.methods.HttpPost; 28 import org.apache.http.client.utils.URLEncodedUtils; 29 import org.apache.http.conn.ConnectTimeoutException; 30 import org.apache.http.conn.scheme.Scheme; 31 import org.apache.http.conn.ssl.SSLSocketFactory; 32 import org.apache.http.conn.ssl.X509HostnameVerifier; 33 import org.apache.http.entity.ContentType; 34 import org.apache.http.entity.StringEntity; 35 import org.apache.http.impl.client.DefaultHttpClient; 36 import org.apache.http.message.BasicNameValuePair; 37 import org.apache.http.params.CoreConnectionPNames; 38 import org.apache.http.util.EntityUtils; 39 40 /** 41 * 封装了采用HttpClient发送HTTP请求的方法 42 * @see 本工具所采用的是最新的HttpComponents-Client-4.2.1 43 * @see =================================================================================================== 44 * @see 开发HTTPS应用时，时常会遇到两种情况 45 * @see 1、测试服务器没有有效的SSL证书,客户端连接时就会抛异常 46 * @see javax.net.ssl.SSLPeerUnverifiedException: peer not authenticated 47 * @see 2、测试服务器有SSL证书,但可能由于各种不知名的原因,它还是会抛一堆烂码七糟的异常,诸如下面这几种 48 * @see javax.net.ssl.SSLException: hostname in certificate didn't match: <123.125.97.66> != <123.125.97.241> 49 * @see javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: 50 * @see sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target 51 * @see =================================================================================================== 52 * @see 这里使用的是HttpComponents-Client-4.1.2创建的连接,所以就要告诉它使用一个不同的TrustManager 53 * @see 由于SSL使用的模式是X.509,对于该模式,Java有一个特定的TrustManager,称为X509TrustManager 54 * @see TrustManager是一个用于检查给定的证书是否有效的类,所以我们自己创建一个X509TrustManager实例 55 * @see 而在X509TrustManager实例中,若证书无效,那么TrustManager在它的checkXXX()方法中将抛出CertificateException 56 * @see 既然我们要接受所有的证书,那么X509TrustManager里面的方法体中不抛出异常就行了 57 * @see 然后创建一个SSLContext并使用X509TrustManager实例来初始化之 58 * @see 接着通过SSLContext创建SSLSocketFactory,最后将SSLSocketFactory注册给HttpClient就可以了 59 * @see =================================================================================================== 60 * @version v1.6 61 * @history v1.0-->新建<code>sendGetRequest()</code>和<code>sendPostRequest()</code>方法 62 * @history v1.1-->新增<code>sendPostSSLRequest()</code>方法,用于发送HTTPS的POST请求 63 * @history v1.2-->新增<code>sendPostRequest()</code>方法,用于发送HTTP协议报文体为任意字符串的POST请求 64 * @history v1.3-->新增<code>java.net.HttpURLConnection</code>实现的<code>sendPostRequestByJava()</code> 65 * @history v1.4-->所有POST方法中增加连接超时限制和读取超时限制 66 * @history v1.5-->重组各方法,并补充自动获取HTTP响应文本编码的方式,移除<code>sendPostRequestByJava()</code> 67 * @history v1.6-->整理GET和POST请求方法,使之更为适用 68 * @create Feb 1, 2012 3:02:27 PM 69 * @update Apr 15, 2013 10:44:35 AM 70 */ 71 public class HttpClientUtil { 72 private HttpClientUtil(){} 73 74 /** 75 * 发送HTTP_GET请求 76 * @see 1)该方法会自动关闭连接,释放资源 77 * @see 2)该方法会自动获取到响应消息头中[Content-Type:text/html; charset=GBK]的charset值作为响应报文解码字符集 78 * @see 若响应消息头中无Content-Type属性,则默认使用HttpClient内部默认的ISO-8859-1 79 * @param requestURL 请求地址(含参数) 80 * @return 远程主机响应正文 81 */ 82 public static String sendGetRequest(String reqURL){ 83 long respLen = 0; //响应长度 84 String respContent = null; //响应内容 85 Charset respCharset = null; //响应编码 86 HttpClient httpClient = new DefaultHttpClient(); //创建默认的httpClient实例 87 HttpGet httpGet = new HttpGet(reqURL); //创建org.apache.http.client.methods.HttpGet 88 try{ 89 HttpResponse response = httpClient.execute(httpGet); //执行GET请求 90 HttpEntity entity = response.getEntity(); //获取响应实体 91 if(null != entity){ 92 //使用EntityUtils.getContentCharSet(entity)也可以获取响应编码,但从4.1.3开始不建议使用这种方式 93 respCharset = ContentType.getOrDefault(entity).getCharset(); 94 respLen = entity.getContentLength(); 95 respContent = EntityUtils.toString(entity, respCharset); 96 //Consume response content 97 EntityUtils.consume(entity); 98 } 99 System.out.println("-----------------------------------------------------------------------"); 100 System.out.println("请求地址: " + httpGet.getURI()); 101 System.out.println("响应状态: " + response.getStatusLine()); 102 System.out.println("响应长度: " + respLen); 103 System.out.println("响应编码: " + respCharset); 104 System.out.println("响应内容: " + respContent); 105 System.out.println("-----------------------------------------------------------------------"); 106 }catch(ClientProtocolException e){ 107 //该异常通常是协议错误导致:比如构造HttpGet对象时传入协议不对(将'http'写成'htp')or响应内容不符合HTTP协议要求等 108 LogUtil.getLogger().error("协议异常,堆栈信息如下", e); 109 }catch(ParseException e){ 110 LogUtil.getLogger().error(e.getMessage(), e); 111 }catch(IOException e){ 112 //该异常通常是网络原因引起的,如HTTP服务器未启动等 113 LogUtil.getLogger().error("网络异常,堆栈信息如下", e); 114 }finally{ 115 //关闭连接,释放资源 116 httpClient.getConnectionManager().shutdown(); 117 } 118 return respContent; 119 } 120 121 122 /** 123 * 发送HTTP_POST请求 124 * @see 1)该方法的优点在于-->允许自定义任何格式和内容的HTTP请求报文体,只要你熟悉HTTP/1.1协议 125 * @see 2)该方法会自动关闭连接,释放资源 126 * @see 3)方法内设置了连接和读取超时时间,单位为毫秒,超时后方法会自动返回空字符串 127 * @see 4)请求参数含中文等特殊字符时,可在传入前自行<code>URLEncoder.encode(string,encodeCharset)</code>,再指定encodeCharset为null 128 * @see 5)亦可指定encodeCharset参数值,由本方法代为编码 129 * @see 6)该方法在解码响应报文时所采用的编码,为响应消息头中[Content-Type:text/html; charset=GBK]的charset值 130 * @see 若响应消息头中未指定Content-Type属性,则默认使用HttpClient内部默认的ISO-8859-1 131 * @param reqURL 请求地址 132 * @param reqData 请求参数,若有多个参数则应拼接为param11=value11&22=value22&33=value33的形式 133 * @param encodeCharset 编码字符集,编码请求数据时用之,其为null表示请求参数已编码完毕,不需要二次编码 134 * @return 远程主机响应正文 135 */ 136 public static String sendPostRequest(String reqURL, String reqData, String encodeCharset){ 137 String reseContent = ""; 138 HttpClient httpClient = new DefaultHttpClient(); 139 httpClient.getParams().setParameter(CoreConnectionPNames.CONNECTION_TIMEOUT, 1000); 140 httpClient.getParams().setParameter(CoreConnectionPNames.SO_TIMEOUT, 2000); 141 HttpPost httpPost = new HttpPost(reqURL); 142 try{ 143 if(null != reqData){ 144 if(reqData.contains("&")){ 145 List<NameValuePair> formParams = new ArrayList<NameValuePair>(); 146 for(String str : reqData.split("&")){ 147 formParams.add(new BasicNameValuePair(str.substring(0,str.indexOf("=")), str.substring(str.indexOf("=")+1))); 148 } 149 httpPost.setEntity(new StringEntity(URLEncodedUtils.format(formParams, encodeCharset))); 150 }else{ 151 httpPost.setEntity(new StringEntity(reqData, encodeCharset)); 152 } 153 } 154 HttpResponse response = httpClient.execute(httpPost); 155 HttpEntity entity = response.getEntity(); 156 if (null != entity) { 157 reseContent = EntityUtils.toString(entity, ContentType.getOrDefault(entity).getCharset()); 158 EntityUtils.consume(entity); 159 } 160 } catch (ConnectTimeoutException cte){ 161 LogUtil.getLogger().error("与[" + reqURL + "]连接超时,自动返回空字符串"); 162 } catch (SocketTimeoutException ste){ 163 LogUtil.getLogger().error("与[" + reqURL + "]读取超时,自动返回空字符串"); 164 }catch(Exception e){ 165 LogUtil.getLogger().error("与[" + reqURL + "]通信异常,堆栈信息如下", e); 166 }finally{ 167 httpClient.getConnectionManager().shutdown(); 168 } 169 return reseContent; 170 } 171 172 173 /** 174 * 发送HTTP_POST_SSL请求 175 * @see 1)该方法会自动关闭连接,释放资源 176 * @see 2)该方法亦可处理普通的HTTP_POST请求 177 * @see 3)方法内设置了连接和读取超时时间,单位为毫秒,超时后方法会自动返回空字符串 178 * @see 4)请求参数含中文等特殊字符时,可在传入前自行<code>URLEncoder.encode(string,encodeCharset)</code>,再指定encodeCharset为null 179 * @see 5)亦可指定encodeCharset参数值,由本方法代为编码 180 * @see 6)该方法在解码响应报文时所采用的编码,为响应消息头中[Content-Type:text/html; charset=GBK]的charset值 181 * @see 若响应消息头中未指定Content-Type属性,则默认使用HttpClient内部默认的ISO-8859-1 182 * @see 7)若reqURL的HTTPS端口不是默认的443,那么只需要在reqURL中指明其实际的HTTPS端口即可,而无需修改本方法内部指定的443 183 * @see 此时,方法默认会取指明的HTTPS端口进行连接..如reqURL=https://123.125.97.66:8085/pay/则实际请求即对方HTTPS_8085端口 184 * @param reqURL 请求地址 185 * @param params 请求参数 186 * @param encodeCharset 编码字符集,编码请求数据时用之,其为null表示请求参数已编码完毕,不需要二次编码 187 * @return 远程主机响应正文 188 */ 189 public static String sendPostSSLRequest(String reqURL, Map<String, String> params, String encodeCharset){ 190 String responseContent = ""; 191 HttpClient httpClient = new DefaultHttpClient(); 192 //设置代理服务器 193 //httpClient.getParams().setParameter(ConnRoutePNames.DEFAULT_PROXY, new HttpHost("10.0.0.4", 8080)); 194 httpClient.getParams().setParameter(CoreConnectionPNames.CONNECTION_TIMEOUT, 1000); 195 httpClient.getParams().setParameter(CoreConnectionPNames.SO_TIMEOUT, 2000); 196 //创建TrustManager 197 //用于解决javax.net.ssl.SSLPeerUnverifiedException: peer not authenticated 198 X509TrustManager trustManager = new X509TrustManager(){ 199 @Override 200 public void checkClientTrusted(X509Certificate[] chain, String authType) throws CertificateException {} 201 @Override 202 public void checkServerTrusted(X509Certificate[] chain, String authType) throws CertificateException {} 203 @Override 204 public X509Certificate[] getAcceptedIssuers() {return null;} 205 }; 206 //创建HostnameVerifier 207 //用于解决javax.net.ssl.SSLException: hostname in certificate didn't match: <123.125.97.66> != <123.125.97.241> 208 X509HostnameVerifier hostnameVerifier = new X509HostnameVerifier(){ 209 @Override 210 public void verify(String host, SSLSocket ssl) throws IOException {} 211 @Override 212 public void verify(String host, X509Certificate cert) throws SSLException {} 213 @Override 214 public void verify(String host, String[] cns, String[] subjectAlts) throws SSLException {} 215 @Override 216 public boolean verify(String arg0, SSLSession arg1) {return true;} 217 }; 218 try { 219 //TLS1.0与SSL3.0基本上没有太大的差别,可粗略理解为TLS是SSL的继承者，但它们使用的是相同的SSLContext 220 SSLContext sslContext = SSLContext.getInstance(SSLSocketFactory.TLS); 221 //使用TrustManager来初始化该上下文,TrustManager只是被SSL的Socket所使用 222 sslContext.init(null, new TrustManager[]{trustManager}, null); 223 //创建SSLSocketFactory 224 SSLSocketFactory socketFactory = new SSLSocketFactory(sslContext, hostnameVerifier); 225 //通过SchemeRegistry将SSLSocketFactory注册到HttpClient上 226 httpClient.getConnectionManager().getSchemeRegistry().register(new Scheme("https", 443, socketFactory)); 227 //创建HttpPost 228 HttpPost httpPost = new HttpPost(reqURL); 229 //httpPost.setHeader(HTTP.CONTENT_TYPE, "application/x-www-form-urlencoded; charset=UTF-8"); 230 //构建POST请求的表单参数 231 if(null != params){ 232 List<NameValuePair> formParams = new ArrayList<NameValuePair>(); 233 for(Map.Entry<String,String> entry : params.entrySet()){ 234 formParams.add(new BasicNameValuePair(entry.getKey(), entry.getValue())); 235 } 236 httpPost.setEntity(new UrlEncodedFormEntity(formParams, encodeCharset)); 237 } 238 HttpResponse response = httpClient.execute(httpPost); 239 HttpEntity entity = response.getEntity(); 240 if (null != entity) { 241 // //打印HTTP响应报文的第一行,即状态行 242 // System.out.println(response.getStatusLine()); 243 // //打印HTTP响应头信息 244 // for(Header header : response.getAllHeaders()){ 245 // System.out.println(header.toString()); 246 // } 247 responseContent = EntityUtils.toString(entity, ContentType.getOrDefault(entity).getCharset()); 248 EntityUtils.consume(entity); 249 } 250 } catch (ConnectTimeoutException cte){ 251 //Should catch ConnectTimeoutException, and don`t catch org.apache.http.conn.HttpHostConnectException 252 LogUtil.getLogger().error("与[" + reqURL + "]连接超时,自动返回空字符串"); 253 } catch (SocketTimeoutException ste){ 254 LogUtil.getLogger().error("与[" + reqURL + "]读取超时,自动返回空字符串"); 255 } catch (Exception e) { 256 LogUtil.getLogger().error("与[" + reqURL + "]通信异常,堆栈信息为", e); 257 } finally { 258 httpClient.getConnectionManager().shutdown(); 259 } 260 return responseContent; 261 } 262 }
155
被折叠的 条评论
为什么被折叠?
到【灌水乐园】发言
