【java】请求跳过ssl证书验证

206 阅读1分钟

工具类 SSLUtils

import javax.net.ssl.SSLContext;
import javax.net.ssl.SSLSocketFactory;
import javax.net.ssl.TrustManager;
import javax.net.ssl.X509TrustManager;
import java.security.SecureRandom;
import java.security.cert.X509Certificate;

public class SSLUtils {
    /**
     * 忽略https证书验证
     * @return
     */
    public static SSLSocketFactory getSSLSocketFactory() {
        try {
            SSLContext sslContext = SSLContext.getInstance("SSL");
            sslContext.init(null, getTrustManager(), new SecureRandom());
            return sslContext.getSocketFactory();
        } catch (Exception e) {
            throw new RuntimeException(e);
        }
    }

    private static TrustManager[] getTrustManager() {
        TrustManager[] trustAllCerts = new TrustManager[]{
                new X509TrustManager() {
                    //检查客户端证书,若不信任该证书抛出异常,咱们自己就是客户端不用检查
                    @Override
                    public void checkClientTrusted(X509Certificate[] chain, String authType) {
                    }
                    //检查服务器的证书,若不信任该证书抛出异常,可以不检查默认都信任
                    @Override
                    public void checkServerTrusted(X509Certificate[] chain, String authType) {
                    }
                    //返回受信任的X509证书数组
                    @Override
                    public X509Certificate[] getAcceptedIssuers() {
                        return new X509Certificate[]{};
                    }
                }
        };
        return trustAllCerts;
    }
}

使用方法 在创建http链接的地方增加添加【setSSLSocketFactory】 httpsUrl.setSSLSocketFactory(SSLUtils.getSSLSocketFactory());

public MultipartFile urlToMultipartFile(String url, String fileName) {
    MultipartFile multipartFile = null;
    try {
        HttpsURLConnection httpsUrl = (HttpsURLConnection) new URL(url).openConnection();
        httpsUrl.setSSLSocketFactory(SSLUtils.getSSLSocketFactory());
        httpsUrl.connect();
        File file = inputStreamToFile(httpsUrl.getInputStream(), fileName);
        multipartFile = getMultipartFile(file);
        httpsUrl.disconnect();
    } catch (Exception e) {
        e.printStackTrace();
    }
    return multipartFile;
}