Java https 请求绕过 SSL 证书验证问题

[mengyxu]

• 问题

同一个方法,用 JUnit 测试类跑没有问题,程序运行起来定时器跑就抛异常(No subject alternative names present),半天了没有头绪,求帮忙分析分析. JDK17,springboot2.7.1,JUnit5

• 工具类 http://img.xumy.vip/f74d93b9/c630/45e4/b016/7fb381e0243b.png

• 测试类 http://img.xumy.vip/ddb25898/abc0/44a6/97fe/292cf1d99ca5.png

• 定时器 http://img.xumy.vip/385c5af2/5fa5/4f7b/b90b/623b53da1056.png

[blankmiss]

你为什么不发哥 gist 出来

[Hancock]

用 OkHttp 的 sslSocketFactory 、hostnameVerifier 看看呢
https://square.github.io/okhttp/4.x/okhttp/okhttp3/-ok-http-client/-builder/ssl-socket-factory/

[mengyxu]

@Hancock 我用 apache 的 httpclient 是没有问题的,我是想着换成 jdk11 自带 httpClient,结果遇到了这个问题

[b2byco]

试试这个
try {
X509TrustManager x509TrustManager = new X509TrustManager() {@
Override
public void checkClientTrusted(X509Certificate[] chain, String authType) throws CertificateException {}@
Override
public void checkServerTrusted(X509Certificate[] chain, String authType) throws CertificateException {}@
Override
public X509Certificate[] getAcceptedIssuers() {
return new X509Certificate[0];
}
};
SSLContext sslContext = SSLContext.getInstance("TLSv1.2");
sslContext.init((KeyManager[]) null, new X509TrustManager[] {
x509TrustManager
}, (SecureRandom) null);
HttpClient client = HttpClient.newBuilder().sslContext(sslContext).followRedirects(HttpClient.Redirect.ALWAYS).version(HttpClient.Version.HTTP_1_1).build();
URI uri = new URI("https", "//", null);
HttpRequest r = HttpRequest.newBuilder().uri(uri).GET().build();
var s = client.send(r, HttpResponse.BodyHandlers.ofString());
System.out.println(s.body());
} catch(Exception e) {}