栏目分类:
子分类:
返回
名师互学网用户登录
快速导航关闭
当前搜索
当前分类
子分类
实用工具
热门搜索
名师互学网 > IT > 软件开发 > 后端开发 > .Net

javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: No subject alternat...

.Net 更新时间: 发布时间: IT归档 最新发布 模块sitemap 名妆网 法律咨询 聚返吧 英语巴士网 伯小乐 网商动力

javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: No subject alternat...

问题原因

访问https的网站,没有携带证书

解决方案 一、忽略证书
public RestTemplate dtRestTemplate() {
        RestTemplate restTemplate = null;
        try {
            SSLContext sslContext = SSLContext.getInstance("TLSv1.2");
            sslContext.init(null, disableSslCheck(), new java.security.SecureRandom());
            HostnameVerifier hostnameVerifier = NoopHostnameVerifier.INSTANCE;
            SSLConnectionSocketFactory sslsf = new SSLConnectionSocketFactory(sslContext, hostnameVerifier);
            RequestConfig requestConfig = RequestConfig.custom()
                .setConnectTimeout(TIMEOUT)
                .setConnectionRequestTimeout(TIMEOUT)
                .setSocketTimeout(TIMEOUT)
                .build();
            CloseableHttpClient sslInsecureClient = HttpClients.custom()
                .setDefaultRequestConfig(requestConfig)
                .setSSLSocketFactory(sslsf)
                .build();

            HttpComponentsClientHttpRequestFactory requestFactory = new HttpComponentsClientHttpRequestFactory();

            requestFactory.setHttpClient(sslInsecureClient);
            restTemplate = new RestTemplate(requestFactory);
        } catch (Exception ex) {
            LOG.error("restTemplate create failed:" + ex.getMessage());
        }
        return restTemplate;
    }

    private static TrustManager[] disableSslCheck() {
        return new TrustManager[] {
                new X509TrustManager() {
                    @Override
                    public void checkClientTrusted(X509Certificate[] chain, String authType)
                            throws CertificateException {
                    }

                    @Override
                    public void checkServerTrusted(X509Certificate[] chain, String authType)
                            throws CertificateException {
                    }

                    @Override
                    public X509Certificate[] getAcceptedIssuers() {
                        return new X509Certificate[0];
                    }
                }
        };
    }
二、获取对应网站的证书
public RestTemplate restTemplate() {
        RestTemplate restTemplate = null;
        CloseableHttpClient sslInsecureClient = null;
        try {
            SSLContext sslContext = SSLContext.getInstance("TLSv1.2");
            sslContext.init(null, getTrustManagerFactory().getTrustManagers(), new java.security.SecureRandom());
            HostnameVerifier hostnameVerifier = NoopHostnameVerifier.INSTANCE;
            SSLConnectionSocketFactory sslsf = new SSLConnectionSocketFactory(sslContext, hostnameVerifier);
            RequestConfig requestConfig = RequestConfig.custom()
                .setConnectTimeout(TIMEOUT)
                .setSocketTimeout(TIMEOUT)
                .setConnectionRequestTimeout(TIMEOUT)
                .build();
            sslInsecureClient = HttpClients.custom()
                .setSSLSocketFactory(sslsf)
                .setDefaultRequestConfig(requestConfig)
                .build();

            HttpComponentsClientHttpRequestFactory requestFactory = new HttpComponentsClientHttpRequestFactory();
            requestFactory.setHttpClient(sslInsecureClient);
            restTemplate = new RestTemplate(requestFactory);
        } catch (Exception ex) {
            LOG.error("create failed:", ex);
            if (!Objects.isNull(sslInsecureClient)) {
                try {
                    sslInsecureClient.close();
                } catch (IOException exx) {
                    LOG.error("close failed:", exx);
                }
            }
        }
        return restTemplate;
    }

 private static TrustManagerFactory getTrustManagerFactory() throws Exception {
        KeyStore keyStore = KeyStore.getInstance(KeyStore.getDefaultType());
        TrustManagerFactory trustManagerFactory = TrustManagerFactory.getInstance(
            TrustManagerFactory.getDefaultAlgorithm());
        InputStream inputStream = null;
        try {
            inputStream = RestTemplateConfig.class.getClassLoader().getResourceAsStream("证书地址");
            keyStore.load(inputStream, null);
            trustManagerFactory.init(keyStore);
        } catch (FileNotFoundException ex) {
            LOG.error("load key store file failed");
        } finally {
            if (inputStream != null) {
                inputStream.close();
            }
        }
        return trustManagerFactory;
    }

转载请注明:文章转载自 www.mshxw.com
本文地址:https://www.mshxw.com/it/905437.html
我们一直用心在做
关于我们 文章归档 网站地图 联系我们

版权所有 (c)2021-2022 MSHXW.COM

ICP备案号:晋ICP备2021003244-6号