java ssl client_理解apache httpclient(java)中的ssl

/**

* This example demonstrates how to create secure connections with a custom SSL

* context.

*/

public class ClientCustomSSL {

public final static void main(String[] args) throws Exception {

// Trust own CA and all self-signed certs

SSLContext sslcontext = SSLContexts.custom()

.loadTrustMaterial(new File("my.keystore"), "nopassword".toCharArray(),

new TrustSelfSignedStrategy())

.build();

// Allow TLSv1 protocol only

SSLConnectionSocketFactory sslsf = new SSLConnectionSocketFactory(

sslcontext,

new String[] { "TLSv1" },

null,

SSLConnectionSocketFactory.getDefaultHostnameVerifier());

CloseableHttpClient httpclient = HttpClients.custom()

.setSSLSocketFactory(sslsf)

.build();

try {

HttpGet httpget = new HttpGet("https://httpbin.org/");

System.out.println("Executing request " + httpget.getRequestLine());

CloseableHttpResponse response = httpclient.execute(httpget);

try {

HttpEntity entity = response.getEntity();

System.out.println("----------------------------------------");

System.out.println(response.getStatusLine());

EntityUtils.consume(entity);

} finally {

response.close();

}

} finally {

httpclient.close();

}

}

}

为什么我们需要那个?我已经测试了一个httpclient请求,上面没有任何ssl的东西,并且从https url得到了正确的响应,没有错误。

如果我不添加任何sslcontext,会有什么问题?

如果让它更安全很重要,这条线是什么?以下内容:

.loadTrustMaterial(new File("my.keystore"), "nopassword".toCharArray(),

好像我们需要一些文件和密码?