跳过SSL证书校验

最新推荐文章于 2024-05-09 11:09:47 发布

ForeverToT

最新推荐文章于 2024-05-09 11:09:47 发布

阅读量414

点赞数

文章标签： ssl 网络协议网络

本文链接：https://blog.csdn.net/weixin_38681967/article/details/131801605

版权

该代码段展示了如何创建一个信任所有证书的RestTemplate实例，通过自定义TrustStrategy接受任何X509证书，然后配置SSLContext和HttpClient以实现HTTPS连接。它还使用PoolingHttpClientConnectionManager管理连接。

摘要由CSDN通过智能技术生成

private final RestTemplate restTemplate = new RestTemplate(httpComponentsClientHttpRequestFactory());    
public static HttpComponentsClientHttpRequestFactory httpComponentsClientHttpRequestFactory() {
        TrustStrategy acceptingTrustStrategy = (x509Certificates, authType) -> true;
        SSLContext sslContext = null;
        try {
            sslContext = SSLContexts.custom().loadTrustMaterial(null, acceptingTrustStrategy).build();
        } catch (Exception e) {
            throw new RuntimeException(e);
        }
        LayeredConnectionSocketFactory csf = new SSLConnectionSocketFactory(sslContext, new NoopHostnameVerifier());

        Registry<ConnectionSocketFactory> sfr = RegistryBuilder.<ConnectionSocketFactory>create().register("http", PlainConnectionSocketFactory.getSocketFactory()).register("https", csf != null ? csf : SSLConnectionSocketFactory.getSocketFactory()).build();
        PoolingHttpClientConnectionManager pollingConnectionManager = new PoolingHttpClientConnectionManager(sfr);

        CloseableHttpClient httpClient = HttpClients.custom().setSSLSocketFactory(csf).setConnectionManager(pollingConnectionManager).build();
        HttpComponentsClientHttpRequestFactory factory = new HttpComponentsClientHttpRequestFactory();
        factory.setHttpClient(httpClient);

        return factory;
    }