https java 证书_Java绕过证书访问https的方法

代码如下：

package httpstest;

import java.io.BufferedReader;

import java.io.IOException;

import java.io.InputStreamReader;

import java.io.PrintStream;

import java.io.PrintWriter;

import java.net.URL;

import java.security.SecureRandom;

import javax.net.ssl.HostnameVerifier;

import javax.net.ssl.HttpsURLConnection;

import javax.net.ssl.SSLContext;

import javax.net.ssl.SSLSession;

import javax.net.ssl.SSLSocketFactory;

import javax.net.ssl.TrustManager;

public class HttpRequest

{

public static String sendPost(String url, String param)

{

PrintWriter out = null;

BufferedReader in = null;

String result = "";

try

{

//免证书访问https

TrustManager[] tm = { new MyX509TrustManager() };

SSLContext sslContext = SSLContext.getInstance("SSL");

sslContext.init(null, tm, new SecureRandom());

SSLSocketFactory ssf = sslContext.getSocketFactory();

URL realUrl = new URL(url);

HttpsURLConnection conn = (HttpsURLConnection)realUrl.openConnection();

conn.setHostnameVerifier(new TrustAnyHostnameVerifier());

conn.setSSLSocketFactory(ssf);

conn.setRequestProperty("accept", "*/*");

conn.setRequestProperty("connection", "Keep-Alive");

conn.setRequestProperty("content-Type", "application/json");

conn.setRequestProperty("user-agent", "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;SV1)");

//发送post请求必须设置这两行

conn.setDoOutput(true);

conn.setDoInput(true);

//获取URLConnection对象对应的输出流

out = new PrintWriter(conn.getOutputStream());

//发送请求参数

out.print(param);

//flush输出流的缓冲

out.flush();

//定义BufferedReader输入流来读取URL的响应

in = new BufferedReader( new InputStreamReader(conn.getInputStream(), "utf-8"));

String line;

while ((line = in.readLine()) != null)

result = result + line;

}

catch (Exception e)

{

System.out.println("发送 POST 请求出现异常！" + e);

e.printStackTrace();

}

finally

{

try {

if (out != null) {

out.close();

}

if (in != null)

in.close();

}

catch (IOException ex)

{

ex.printStackTrace();

}

}

return result;

}

//服务器主机名校验

public static class TrustAnyHostnameVerifier implements HostnameVerifier {

public boolean verify(String hostname, SSLSession session) {

return true;

}

}

}

还需要定义一个证书管理器的类：

package httpstest;

import java.security.cert.CertificateException;

import java.security.cert.X509Certificate;

import javax.net.ssl.X509TrustManager;

public class MyX509TrustManager

implements X509TrustManager

{

public void checkClientTrusted(X509Certificate[] chain, String authType)

throws CertificateException

{

}

public void checkServerTrusted(X509Certificate[] chain, String authType)

throws CertificateException

{

}

public X509Certificate[] getAcceptedIssuers()

{

return null;

}

}