java 无需SSL验证的HTTP请求

最新推荐文章于 2024-07-23 14:34:01 发布

wm307118696

最新推荐文章于 2024-07-23 14:34:01 发布

阅读量780

点赞数

分类专栏： java 文章标签： java ssl http

本文链接：https://blog.csdn.net/wm307118696/article/details/128188976

版权

java 专栏收录该内容

1 篇文章 0 订阅

订阅专栏

经常遇到自签证书，java不认识的情况。一般都是将证书copy到jdk路径或通过代码加载自签证书，已使通过https访问资源，能够通过SSL握手验证。

以上两种方法，都比较麻烦。先说思路，通过忽略ssl 证书，废话不多说，直接上代码。依赖org.apache.httpcomponents.httpclient

1. 直接使用http client ,通过配置 SSLConnectionSocketFactory 的 TrustStrategy 验证策略

TrustStrategy acceptingTrustStrategy = (x509Certificates, s) -> true;
SSLContext sslContext = org.apache.http.ssl.SSLContexts.custom().loadTrustMaterial(null, acceptingTrustStrategy).build();
 SSLConnectionSocketFactory csf = new SSLConnectionSocketFactory(sslContext, new NoopHostnameVerifier());
CloseableHttpClient httpclient = HttpClients.custom().setSSLSocketFactory(csf).build();

2. 通过配置spring restTemplate

RestTemplate restTemplate=new RestTemplate();
TrustStrategy acceptingTrustStrategy = (x509Certificates, s) -> true;

SSLContext sslContext = org.apache.http.ssl.SSLContexts.custom().loadTrustMaterial(null, acceptingTrustStrategy).build();
SSLConnectionSocketFactory csf = new SSLConnectionSocketFactory(sslContext, new NoopHostnameVerifier());
CloseableHttpClient httpClient = HttpClients.custom().setSSLSocketFactory(csf).build();
HttpComponentsClientHttpRequestFactory requestFactory = new HttpComponentsClientHttpRequestFactory();
requestFactory.setHttpClient(httpClient);
restTemplate = new RestTemplate(requestFactory);

只在确认访问服务可信时，才使用，不然会存在安全问题。