忽略tls 证书 java_Java 访问Https请求，如何忽略证书？

现象：

java程序在访问https资源时，出现报错：

sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

这本质上，是java在访问https资源时的证书信任问题。如何解决这个问题呢？

import java.io.BufferedReader;

import java.io.IOException;

import java.io.InputStream;

import java.io.InputStreamReader;

import java.io.UnsupportedEncodingException;

import java.net.HttpURLConnection;

import java.net.MalformedURLException;

import java.net.URL;

import java.security.SecureRandom;

import java.security.cert.X509Certificate;

import javax.net.ssl.HostnameVerifier;

import javax.net.ssl.HttpsURLConnection;

import javax.net.ssl.SSLContext;

import javax.net.ssl.SSLSession;

import javax.net.ssl.TrustManager;

import javax.net.ssl.X509TrustManager;

import javax.security.cert.CertificateException;

public class HttpDemo {

private static final String SYS_VULLN_URL_JSON = "https://11.12.123.1/template/web/list?username=admin&password=pass23";

final static HostnameVerifier DO_NOT_VERIFY = new HostnameVerifier() {

public boolean verify(String hostname, SSLSession session) {

return true;

}

};

public static void httpGet() {

StringBuffer tempStr = new StringBuffer();

String responseContent = "";

HttpURLConnection conn = null;

try {

// Create a trust manager that does not validate certificate chains

trustAllHosts();

URL url = new URL(SYS_VULLN_URL_JSON);

HttpsURLConnection https = (HttpsURLConnection) url.openConnection();

if (url.getProtocol().toLowerCase().equals("https")) {

https.setHostnameVerifier(DO_NOT_VERIFY);

conn = https;

} else {

conn = (HttpURLConnection) url.openConnection();

}

conn.connect();

System.out.println(conn.getResponseCode() + " " +

conn.getResponseMessage());

} catch (UnsupportedEncodingException e) {

e.printStackTrace();

} catch (MalformedURLException e) {

e.printStackTrace();

} catch (IOException e) {

e.printStackTrace();

} catch (Exception e) {

e.printStackTrace();

}

}

/**

* Trust every server - dont check for any certificate

*/

private static void trustAllHosts() {

// Create a trust manager that does not validate certificate chains

TrustManager[] trustAllCerts = new TrustManager[] {

new X509TrustManager() {

public java.security.cert.X509Certificate[] getAcceptedIssuers() {

return new java.security.cert.X509Certificate[] { };

}

public void checkClientTrusted(

X509Certificate[] chain, String authType) {

}

public void checkServerTrusted(

X509Certificate[] chain, String authType) {

}

}

};

// Install the all-trusting trust manager

try {

SSLContext sc = SSLContext.getInstance("TLS");

sc.init(null, trustAllCerts, new java.security.SecureRandom());

HttpsURLConnection.setDefaultSSLSocketFactory(sc.getSocketFactory());

} catch (Exception e) {

e.printStackTrace();

}

}

public static void main(String[] args) {

httpGet();

}

}

打赏

微信扫一扫，打赏作者吧～