栏目分类:
子分类:
返回
名师互学网用户登录
快速导航关闭
当前搜索
当前分类
子分类
实用工具
热门搜索
名师互学网 > IT > 软件开发 > 后端开发 > .Net

解决https,javax.net.ssl.SSLException: hostname in certificate didn‘t match 等问题

.Net 更新时间: 发布时间: IT归档 最新发布 模块sitemap 名妆网 法律咨询 聚返吧 英语巴士网 伯小乐 网商动力

解决https,javax.net.ssl.SSLException: hostname in certificate didn‘t match 等问题

问题原因:https链接需要验证证书,证书不匹配、过期等问题导致调用接口不成功

https不校验证书,代码:

    static {
        SSLSocketFactory socketFactory = new SSLSocketFactory(getSSLContext(), SSLSocketFactory.ALLOW_ALL_HOSTNAME_VERIFIER);

        SchemeRegistry schemeRegistry = new SchemeRegistry();
        schemeRegistry.register(new Scheme("http", PlainSocketFactory.getSocketFactory(), 80));
        schemeRegistry.register(new Scheme("https", socketFactory, 443));

        HttpParams params = new BasicHttpParams();
        params.setIntParameter(ConnManagerPNames.MAX_TOTAL_CONNECTIONS, 100);
        ConnPerRouteBean connPerRouteBean = new ConnPerRouteBean(100);
        params.setParameter(ConnManagerPNames.MAX_CONNECTIONS_PER_ROUTE, connPerRouteBean);

        connectionManager = new ThreadSafeClientConnManager(params, schemeRegistry);
    }

    private static SSLContext getSSLContext() {
        try {
            // 这里可以填两种值 TLS和LLS , 具体差别可以自行搜索
            SSLContext sc = SSLContext.getInstance("TLS");
            // 构建新对象
            X509TrustManager manager = new X509TrustManager() {
                @Override
                public void checkClientTrusted(X509Certificate[] x509Certificates, String s) throws CertificateException {
                }

                @Override
                public void checkServerTrusted(X509Certificate[] x509Certificates, String s) throws CertificateException {
                }

                // 这里返回Null
                @Override
                public X509Certificate[] getAcceptedIssuers() {
                    return null;
                }
            };
            sc.init(null, new TrustManager[]{manager}, null);
            return sc;
        } catch (Exception e) {
            e.printStackTrace();
        }
        return null;
    }

参考代码:

package com.enuo.mall.utils;

import java.io.BufferedReader;
import java.io.IOException;
import java.io.InputStreamReader;
import java.net.URI;
import java.net.URL;
import java.net.URLDecoder;
import java.security.cert.CertificateException;
import java.security.cert.X509Certificate;
import java.text.SimpleDateFormat;
import java.util.List;
import java.util.Map;
import java.util.Properties;

import javax.net.ssl.SSLContext;
import javax.net.ssl.TrustManager;
import javax.net.ssl.X509TrustManager;

import org.apache.commons.httpclient.HttpException;
import org.apache.commons.httpclient.NameValuePair;
import org.apache.commons.httpclient.methods.PostMethod;
import org.apache.http.HttpEntity;
import org.apache.http.HttpResponse;
import org.apache.http.HttpVersion;
import org.apache.http.client.HttpClient;
import org.apache.http.client.entity.UrlEncodedFormEntity;
import org.apache.http.client.methods.HttpPost;
import org.apache.http.conn.ClientConnectionManager;
import org.apache.http.conn.params.ConnManagerPNames;
import org.apache.http.conn.params.ConnPerRouteBean;
import org.apache.http.conn.scheme.PlainSocketFactory;
import org.apache.http.conn.scheme.Scheme;
import org.apache.http.conn.scheme.SchemeRegistry;
import org.apache.http.conn.ssl.SSLSocketFactory;
import org.apache.http.impl.client.DefaultHttpClient;
import org.apache.http.impl.conn.tsccm.ThreadSafeClientConnManager;
import org.apache.http.message.BasicNameValuePair;
import org.apache.http.params.BasicHttpParams;
import org.apache.http.params.CoreConnectionPNames;
import org.apache.http.params.CoreProtocolPNames;
import org.apache.http.params.HttpParams;
import org.apache.http.util.EntityUtils;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;

import com.alibaba.fastjson.JSONObject;

@SuppressWarnings("deprecation")
public class Util {

	private static Logger logger = LoggerFactory.getLogger(Util.class);

	//编码格式
	public static final String DEFAULT_CONTENT_ENCODING = "UTF-8";

	//超时时间
	public static final int CONN_TIME_OUT = 20000;
	//读取超时时间
	public static final int SO_TIME_OUT = 20000;

	public static final SimpleDateFormat Default_DATE_FORMAT = new SimpleDateFormat("yyyy-MM-dd HH:mm:ss");
	public static final String GROUPCODE = "9000001277";
	public static SimpleDateFormat minuteFormat = new SimpleDateFormat("yyyyMMddHHmm");

	private static ClientConnectionManager connectionManager;

	private static Properties props;

	static {
		SSLSocketFactory socketFactory = new SSLSocketFactory(getSSLContext(),
				SSLSocketFactory.ALLOW_ALL_HOSTNAME_VERIFIER);

		SchemeRegistry schemeRegistry = new SchemeRegistry();
		schemeRegistry.register(new Scheme("http", PlainSocketFactory.getSocketFactory(), 80));
		schemeRegistry.register(new Scheme("https", socketFactory, 443));

		HttpParams params = new BasicHttpParams();
		params.setIntParameter(ConnManagerPNames.MAX_TOTAL_CONNECTIONS, 100);
		ConnPerRouteBean connPerRouteBean = new ConnPerRouteBean(100);
		params.setParameter(ConnManagerPNames.MAX_CONNECTIONS_PER_ROUTE, connPerRouteBean);

		connectionManager = new ThreadSafeClientConnManager(params, schemeRegistry);
	}

	private static SSLContext getSSLContext() {
		try {
			// 这里可以填两种值 TLS和LLS , 具体差别可以自行搜索
			SSLContext sc = SSLContext.getInstance("TLS");
			// 构建新对象
			X509TrustManager manager = new X509TrustManager() {
				@Override
				public void checkClientTrusted(X509Certificate[] x509Certificates, String s)
						throws CertificateException {
				}

				@Override
				public void checkServerTrusted(X509Certificate[] x509Certificates, String s)
						throws CertificateException {
				}

				// 这里返回Null
				@Override
				public X509Certificate[] getAcceptedIssuers() {
					return null;
				}
			};
			sc.init(null, new TrustManager[] {
				manager }, null);
			return sc;
		} catch (Exception e) {
			e.printStackTrace();
		}
		return null;
	}

	public static String getConf(String key) {
		return props.getProperty(key);
	}

	
	public static HttpClient getHttpClient(int timeOut, int soTimeout) {

		if (timeOut == 0) {
			timeOut = CONN_TIME_OUT;
		}
		if (soTimeout == 0) {
			soTimeout = SO_TIME_OUT;
		}

		HttpParams params = new BasicHttpParams();
		params.setParameter(CoreProtocolPNames.PROTOCOL_VERSION, HttpVersion.HTTP_1_1);
		params.setParameter(CoreConnectionPNames.CONNECTION_TIMEOUT, timeOut);
		params.setParameter(CoreConnectionPNames.SO_TIMEOUT, soTimeout);
		DefaultHttpClient httpclient = new DefaultHttpClient(connectionManager, params);
		return httpclient;
	}

	
	public static JSONObject httpRequest(String url, List params) throws Exception {

		StringBuffer result = new StringBuffer();

		HttpClient httpclient = getHttpClient(CONN_TIME_OUT, SO_TIME_OUT);

		HttpPost post = null;
		try {
			URL url1 = new URL(url);
			URI uri = new URI(url1.getProtocol(), url1.getHost(), url1.getPath(), url1.getQuery(), null);
			post = new HttpPost(uri);
			HttpEntity requestEntity = new UrlEncodedFormEntity(params, "UTF-8");

			logger.debug("---------接口地址:" + url + ",请求参数:"
					+ URLDecoder.decode(EntityUtils.toString(requestEntity), "UTF-8"));

			post.setEntity(requestEntity);

			HttpResponse response = httpclient.execute(post);
			

			HttpEntity resEntity = response.getEntity();
			InputStreamReader reader = new InputStreamReader(resEntity.getContent(), DEFAULT_CONTENT_ENCODING);
			char[] buff = new char[1024];
			int length = 0;
			while ((length = reader.read(buff)) != -1) {
				result.append(buff, 0, length);
			}
			if (response.getStatusLine().getStatusCode() >= 400) {
				throw new Exception("远程服务器异常,【错误码:" + response.getStatusLine().getStatusCode() + "】");
			}

			logger.debug("应答报文----------" + result.toString());
			if (JsonUtils.isjson(result.toString())) {
				return JSONObject.parseObject(result.toString());
			} else {
				throw new Exception("应答报文----------" + result.toString() + ",不为json字符串");
			}
		} catch (Exception e) {
			e.printStackTrace();
			throw new Exception(e.getMessage());

		} finally {

			post.releaseConnection();

		}
	}

	public static JSONObject httpRequest2(String url, List params) throws Exception {

		StringBuffer result = new StringBuffer();

		HttpClient httpclient = getHttpClient(CONN_TIME_OUT, SO_TIME_OUT);

		HttpPost post = null;
		try {
			URL url1 = new URL(url);
			URI uri = new URI(url1.getProtocol(), url1.getHost(), url1.getPath(), url1.getQuery(), null);
			post = new HttpPost(uri);
			HttpEntity requestEntity = new UrlEncodedFormEntity(params, "UTF-8");

			logger.debug("---------接口地址:" + url + ",请求参数:"
					+ URLDecoder.decode(EntityUtils.toString(requestEntity), "UTF-8"));

			post.setEntity(requestEntity);

			HttpResponse response = httpclient.execute(post);
			

			HttpEntity resEntity = response.getEntity();
			InputStreamReader reader = new InputStreamReader(resEntity.getContent(), DEFAULT_CONTENT_ENCODING);
			char[] buff = new char[1024];
			int length = 0;
			while ((length = reader.read(buff)) != -1) {
				result.append(buff, 0, length);
			}
			//if(response.getStatusLine().getStatusCode() >= 400) {
			//updateLog(logId,"远程服务器异常,【错误码:" + response.getStatusLine().getStatusCode() + "】");
			//throw new Exception("远程服务器异常,【错误码:" + response.getStatusLine().getStatusCode() + "】");
			//}
		} catch (Exception e) {
			e.printStackTrace();
			throw new Exception(e.getMessage());

		} finally {

			post.releaseConnection();

		}
		logger.debug("应答报文----------" + result.toString());
		return JSONObject.parseObject(result.toString());
	}

	public static JSONObject sendRequestByPost(String url, Map params) {
		StringBuffer stringBuffer = new StringBuffer();
		org.apache.commons.httpclient.HttpClient httpClient = new org.apache.commons.httpclient.HttpClient();
		PostMethod method = new PostMethod(url) {
			public String getRequestCharSet() {
				return "UTF-8";
			}
		};

		NameValuePair[] postData = null;
		if (params != null && params.size() > 0) {
			postData = new NameValuePair[params.size()];
			java.util.Iterator it = params.keySet().iterator();
			int index = 0;
			while (it.hasNext()) {
				String key = it.next();
				String value = params.get(key);
				postData[index++] = new NameValuePair(key, value);
			}
		}
		method.addParameters(postData);
		logger.debug("---------接口地址:" + url + ",请求参数:" + params);
		try {
			httpClient.executeMethod(method);

			BufferedReader rd = new BufferedReader(new InputStreamReader(method.getResponseBodyAsStream(), "UTF-8"));
			String line;
			while ((line = rd.readLine()) != null) {
				stringBuffer.append(line);
			}
			rd.close();
		} catch (HttpException e) {
			e.printStackTrace();
		} catch (IOException e) {
			e.printStackTrace();
		} finally {
			method.releaseConnection();
		}
		logger.debug("应答报文----------" + stringBuffer.toString());
		return JSONObject.parseObject(stringBuffer.toString());
	}

}

 

转载请注明:文章转载自 www.mshxw.com
本文地址:https://www.mshxw.com/it/906061.html
我们一直用心在做
关于我们 文章归档 网站地图 联系我们

版权所有 (c)2021-2022 MSHXW.COM

ICP备案号:晋ICP备2021003244-6号