HTTPS证书校验异常怎么解决？

技术  /  管理员 发布于 7年前   245

HTTPS证书校验异常，验证不通过要怎么解决？下面本篇文章给大家介绍一下Https请求验证证书失败的解决方法。有一定的参考价值，有需要的朋友可以参考一下，希望对大家有所帮助。

报错：unable to find valid certification path to requested target

解决办法：

1、导入证书到本地证书库

2、信任所有SSL证书

最好的解决办法或许是信任所有SSL证书，因为某些时候不能每次都手动的导入证书非常麻烦。现在封装了个方法，在连接openConnection的时候忽略掉证书就行了。

SslUtils.java

import java.security.cert.CertificateException;import java.security.cert.X509Certificate; import javax.net.ssl.HostnameVerifier;import javax.net.ssl.HttpsURLConnection;import javax.net.ssl.SSLContext;import javax.net.ssl.SSLSession;import javax.net.ssl.TrustManager;import javax.net.ssl.X509TrustManager; public class SslUtils {private static void trustAllHttpsCertificates() throws Exception {    TrustManager[] trustAllCerts = new TrustManager[1];    TrustManager tm = new miTM();    trustAllCerts[0] = tm;    SSLContext sc = SSLContext.getInstance("SSL");    sc.init(null, trustAllCerts, null);    HttpsURLConnection.setDefaultSSLSocketFactory(sc.getSocketFactory());} static class miTM implements TrustManager,X509TrustManager {    public X509Certificate[] getAcceptedIssuers() {        return null;    }     public boolean isServerTrusted(X509Certificate[] certs) {        return true;    }     public boolean isClientTrusted(X509Certificate[] certs) {        return true;    }     public void checkServerTrusted(X509Certificate[] certs, String authType)throws CertificateException {        return;    }     public void checkClientTrusted(X509Certificate[] certs, String authType)throws CertificateException {        return;    }} /** * 忽略HTTPS请求的SSL证书，必须在openConnection之前调用 * @throws Exception */public static void ignoreSsl() throws Exception{    HostnameVerifier hv = new HostnameVerifier() {        public boolean verify(String urlHostName, SSLSession session) {System.out.println("Warning: URL Host: " + urlHostName + " vs. " + session.getPeerHost());return true;        }    };    trustAllHttpsCertificates();    HttpsURLConnection.setDefaultHostnameVerifier(hv);} }

SslTest.java:

import java.io.OutputStreamWriter;import java.net.URL;import java.net.URLConnection;import org.apache.commons.io.IOUtils; public class SslTest {         public String getRequest(String url,int timeOut) throws Exception{        URL u = new URL(url);        if("https".equalsIgnoreCase(u.getProtocol())){SslUtils.ignoreSsl();        }        URLConnection conn = u.openConnection();        conn.setConnectTimeout(timeOut);        conn.setReadTimeout(timeOut);        return IOUtils.toString(conn.getInputStream());    }         public String postRequest(String urlAddress,String args,int timeOut) throws Exception{        URL url = new URL(urlAddress);        if("https".equalsIgnoreCase(url.getProtocol())){SslUtils.ignoreSsl();        }        URLConnection u = url.openConnection();        u.setDoInput(true);        u.setDoOutput(true);        u.setConnectTimeout(timeOut);        u.setReadTimeout(timeOut);        OutputStreamWriter osw = new OutputStreamWriter(u.getOutputStream(), "UTF-8");        osw.write(args);        osw.flush();        osw.close();        u.getOutputStream();        return IOUtils.toString(u.getInputStream());    }         public static void main(String[] args) {        try {SslTest st = new SslTest();String a = st.getRequest("https://xxx.com/login.action", 3000);System.out.println(a);        } catch (Exception e) {e.printStackTrace();        }    } }

更多相关知识，请关注！

以上就是HTTPS证书校验异常怎么解决？的详细内容，更多请关注其它相关文章！