支持不安全证书的https访问

比眉伴天荒 2022-09-01 13:57 199阅读 0赞

@Slf4j
    @Component
    public class HttpsFacility {
        
    
    
        //支持不安全证书的https访问
        public  String httpsPost(String url ,String json) throws KeyManagementException, NoSuchAlgorithmException, IOException {
        
    
            SSLContext sc = createSslContext();
            HttpsURLConnection conn = (HttpsURLConnection) new URL(url).openConnection();
            conn.setSSLSocketFactory(sc.getSocketFactory());
            conn.setHostnameVerifier((s, sslSession) -> true);
            conn.setDoInput(true);
            conn.setDoOutput(true);
            conn.connect();
            OutputStream os = conn.getOutputStream();
            os.write(json.getBytes("utf-8"));
            os.flush();
            os.close();
            StringBuilder result = new StringBuilder();
            try (BufferedReader br = new BufferedReader(new InputStreamReader(conn.getInputStream()))) {
        
                String line;
                while (null != (line = br.readLine())) {
        
                    result.append(line).append("\n");
                }
            }
            conn.disconnect();
    
            log.info(result.toString());
            return result.toString();
        }
    
        private static SSLContext createSslContext() throws NoSuchAlgorithmException, KeyManagementException {
        
            SSLContext sc = SSLContext.getInstance("SSL");
    
            sc.init(null, new TrustManager[]{
        new X509TrustManager() {
        
                @Override
                public void checkClientTrusted(X509Certificate[] x509Certificates, String s) throws CertificateException {
        
    
                }
    
                @Override
                public void checkServerTrusted(X509Certificate[] x509Certificates, String s) throws CertificateException {
        
    
                }
    
                @Override
                public X509Certificate[] getAcceptedIssuers() {
        
                    return new X509Certificate[0];
                }
            }}, new java.security.SecureRandom());
    
            return sc;
        }
    
    }