public static void main(String... args) {
try (CloseableHttpClient httpclient = createAcceptSelfSignedCertificateClient()) {
HttpGet httpget = new HttpGet("https://example.com");
System.out.println("Executing request " + httpget.getRequestLine());
httpclient.execute(httpget);
System.out.println("----------------------------------------");
} catch (NoSuchAlgorithmException | KeyStoreException | KeyManagementException | IOException e) {
throw new RuntimeException(e);
}
}
private static CloseableHttpClient createAcceptSelfSignedCertificateClient()
throws KeyManagementException, NoSuchAlgorithmException, KeyStoreException {
// use the TrustSelfSignedStrategy to allow Self Signed Certificates
SSLContext sslContext = SSLContextBuilder
.create()
.loadTrustMaterial(new TrustSelfSignedStrategy())
.build();
// we can optionally disable hostname verification.
// if you don't want to further weaken the security, you don't have to include this.
HostnameVerifier allowAllHosts = new NoopHostnameVerifier();
// create an SSL Socket Factory to use the SSLContext with the trust self signed certificate strategy
// and allow all hosts verifier.
SSLConnectionSocketFactory connectionFactory = new SSLConnectionSocketFactory(sslContext, allowAllHosts);
// finally create the HttpClient using HttpClient factory methods and assign the ssl socket factory
return HttpClients
.custom()
.setSSLSocketFactory(connectionFactory)
.build();
}
SSLContext sslContext = SSLContext.getInstance("SSL");
// set up a TrustManager that trusts everything
sslContext.init(null, new TrustManager[] { new X509TrustManager() {
public X509Certificate[] getAcceptedIssuers() {
System.out.println("getAcceptedIssuers =============");
return null;
}
public void checkClientTrusted(X509Certificate[] certs,
String authType) {
System.out.println("checkClientTrusted =============");
}
public void checkServerTrusted(X509Certificate[] certs,
String authType) {
System.out.println("checkServerTrusted =============");
}
} }, new SecureRandom());
SSLSocketFactory sf = new SSLSocketFactory(sslContext);
Scheme httpsScheme = new Scheme("https", 443, sf);
SchemeRegistry schemeRegistry = new SchemeRegistry();
schemeRegistry.register(httpsScheme);
// apache HttpClient version >4.2 should use BasicClientConnectionManager
ClientConnectionManager cm = new SingleClientConnManager(schemeRegistry);
HttpClient httpClient = new DefaultHttpClient(cm);
SchemeRegistry schemeRegistry = new SchemeRegistry();
schemeRegistry.register(new Scheme("http", 80, PlainSocketFactory.getSocketFactory()));
schemeRegistry.register(new Scheme("https", 443, new MockSSLSocketFactory()));
ClientConnectionManager cm = new SingleClientConnManager(schemeRegistry);
DefaultHttpClient httpclient = new DefaultHttpClient(cm);
模拟ssl工厂-
public class MockSSLSocketFactory extends SSLSocketFactory {
public MockSSLSocketFactory() throws NoSuchAlgorithmException, KeyManagementException, KeyStoreException, UnrecoverableKeyException {
super(trustStrategy, hostnameVerifier);
}
private static final X509HostnameVerifier hostnameVerifier = new X509HostnameVerifier() {
@Override
public void verify(String host, SSLSocket ssl) throws IOException {
// Do nothing
}
@Override
public void verify(String host, X509Certificate cert) throws SSLException {
//Do nothing
}
@Override
public void verify(String host, String[] cns, String[] subjectAlts) throws SSLException {
//Do nothing
}
@Override
public boolean verify(String s, SSLSession sslSession) {
return true;
}
};
private static final TrustStrategy trustStrategy = new TrustStrategy() {
@Override
public boolean isTrusted(X509Certificate[] chain, String authType) throws CertificateException {
return true;
}
};
}
如果是在代理人背后，需要这样做-
HttpParams params = new BasicHttpParams();
params.setParameter(AuthPNames.PROXY_AUTH_PREF, getClientAuthPrefs());
DefaultHttpClient httpclient = new DefaultHttpClient(cm, params);
httpclient.getCredentialsProvider().setCredentials(
new AuthScope(proxyHost, proxyPort),
new UsernamePasswordCredentials(proxyUser, proxyPass));
23条答案
按热度按时间kpbwa7wx1#
如果您使用的是apache httpclient 4.5.x，请尝试以下操作：
7rfyedvj2#
fwiw，一个使用jax rs 2.x的“resteasy”实现来构建一个特殊的“信任所有”客户端的示例。。。
相关maven依赖项
e5nszbig3#
如果在使用嵌入apache httpclient 4.1的Amazon3Client时遇到此问题，只需定义如下系统属性，以便ssl证书检查器轻松：
-dcom.amazonaws.sdk.disablecertchecking=真
恶作剧管理
luaexgnf4#
按4.3.3测试
}
oaxa6hgo5#
如果您使用的是fluent api，则需要通过
Executor:... 哪里
sslContext是按照zz编码器的答案所示创建的sslcontext。之后，您可以按以下方式执行http请求：
注：使用httpclient 4.2进行测试
qyswt5oh6#
apachehttpclient 4.1.3的完整工作版本（基于上面的oleg代码，但在我的系统上仍然需要allow\u all\u hostname\u验证器）：
请注意，我抛出所有异常是因为实际上，如果在实际系统中出现任何一个异常，我也无能为力！
gcuhipw97#
下面的代码用于
4.5.5```import java.io.IOException;
import java.security.KeyManagementException;
import java.security.NoSuchAlgorithmException;
import java.security.SecureRandom;
import java.security.cert.CertificateException;
import java.security.cert.X509Certificate;
import javax.net.ssl.HostnameVerifier;
import javax.net.ssl.SSLContext;
import javax.net.ssl.SSLSession;
import javax.net.ssl.TrustManager;
import javax.net.ssl.X509TrustManager;
import org.apache.http.client.methods.CloseableHttpResponse;
import org.apache.http.client.methods.HttpGet;
import org.apache.http.client.methods.HttpUriRequest;
import org.apache.http.conn.ssl.SSLConnectionSocketFactory;
import org.apache.http.impl.client.CloseableHttpClient;
import org.apache.http.impl.client.HttpClients;
import org.apache.http.util.EntityUtils;
class HttpsSSLClient {
}
public class TestMe {
}
4.0.0
a0x5cqrl8#
4.5.4测试：
daolsyd09#
要接受httpclient 4.4.x中的所有证书，可以在创建httpclient时使用以下一行代码：
qmelpv7a10#
idv4meu811#
使用httpclient 4.5.5和fluent api进行测试
t40tm48m12#
作为zz编码器答案的扩展，重写hostnameverifier会很好。
g9icjywg13#
您需要使用自己的trustmanager创建sslcontext，并使用此上下文创建https方案。这是密码，
vyswwuz214#
我就是这样做的-
创建我自己的mocksslsocketfactory（类附在下面）
使用它初始化defaulthttpclient。如果使用代理，则需要提供代理设置。
初始化defaulthttpclient-
模拟ssl工厂-
如果是在代理人背后，需要这样做-
p5fdfcr115#
使用fluent4.5.2，我必须进行以下修改才能使其正常工作。