java 使用restTemplate请求接口忽略ssl证书校验

最新推荐文章于 2025-03-18 16:39:57 发布

weixin_44953227

最新推荐文章于 2025-03-18 16:39:57 发布

阅读量2.4k

点赞数 6

分类专栏： Java 文章标签： java ssl 开发语言

本文链接：https://blog.csdn.net/weixin_44953227/article/details/130429374

版权

Java 专栏收录该内容

85 篇文章

订阅专栏

该文章介绍了如何在Java中通过TrustSslUtil工具类忽略SSL证书验证，以进行HTTPS请求。在请求前调用initDefaultSsl()方法，设置信任所有证书的TrustManager，从而允许不安全的连接。这种方法虽然简化了调试过程，但不应用于生产环境，因为这会降低系统的安全性。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

1. 使用

在请求之前调用 TrustSslUtil.initDefaultSsl() 方法即可

// 获取需要的请求头
HttpHeaders httpHeaders = new HttpHeaders();

// 设置请求实体
HttpEntity<String> httpEntity = new HttpEntity<>(httpHeaders);

URI uri = new URI('https://192.168.11.12:8080/auth-api/getTemplate');

// 忽略证书验证
TrustSslUtil.initDefaultSsl();
ResponseEntity<JSONObject> responseEntity = restTemplate.exchange(uri, HttpMethod.POST, httpEntity, JSONObject.class);
logger.info(">>> [{}] responseEntity: {}", METHOD_NAME, responseEntity);

2. 忽略ssl证书工具类

package com.cn.pro.common.util;

import javax.net.ssl.*;
import java.net.Socket;
import java.security.SecureRandom;
import java.security.cert.X509Certificate;

/**
 * 忽略证书验证
 */
public class TrustSslUtil {

    public static void initDefaultSsl() {
        try {
            SSLContext sc = SSLContext.getInstance("SSL");
            HostnameVerifier hv = (urlHostName, session) -> true;
            TrustManager[] trustAllCerts = new TrustManager[]{
                    new X509ExtendedTrustManager() {
                        @Override
                        public void checkClientTrusted(X509Certificate[]
                                                               x509Certificates, String s) {
                        }


                        @Override
                        public void checkServerTrusted(X509Certificate[]
                                                               x509Certificates, String s) {
                        }


                        @Override
                        public X509Certificate[] getAcceptedIssuers() {
                            return null;
                        }


                        @Override
                        public void checkClientTrusted(X509Certificate[]
                                                               x509Certificates, String s, Socket socket) {
                        }


                        @Override
                        public void checkServerTrusted(X509Certificate[]
                                                               x509Certificates, String s, Socket socket) {
                        }


                        @Override
                        public void checkClientTrusted(X509Certificate[]
                                                               x509Certificates, String s, SSLEngine sslEngine) {
                        }


                        @Override
                        public void checkServerTrusted(X509Certificate[]
                                                               x509Certificates, String s, SSLEngine sslEngine) {
                        }
                    }};
            sc.init(null, trustAllCerts, new SecureRandom());


            SSLContext.setDefault(sc);
            HttpsURLConnection.setDefaultHostnameVerifier(hv);
        } catch (Exception e) {
            e.printStackTrace();
        }
    }

}