httpclient 4.5.2 https协议时忽略服务器证书

1maven dependencedependency>    groupId>org.apache.httpcomponentsgroupId>    artifactId>httpclientartifactId>    version>4.5.2version>dependency>2. 测试类package com.iraid.test; import java.io.BufferedReader;import java.io.File;import java.io.FileInputStream;import java.io.IOException;import java.io.InputStream;import java.io.InputStreamReader;import java.security.KeyStore; import javax.net.ssl.SSLContext; import org.apache.http.client.methods.CloseableHttpResponse;import org.apache.http.client.methods.HttpPost;import org.apache.http.config.Registry;import org.apache.http.config.RegistryBuilder;import org.apache.http.conn.HttpClientConnectionManager;import org.apache.http.conn.socket.ConnectionSocketFactory;import org.apache.http.conn.socket.PlainConnectionSocketFactory;import org.apache.http.conn.ssl.SSLConnectionSocketFactory;import org.apache.http.conn.ssl.SSLContexts;import org.apache.http.conn.ssl.TrustSelfSignedStrategy;import org.apache.http.entity.ContentType;import org.apache.http.entity.StringEntity;import org.apache.http.impl.client.CloseableHttpClient;import org.apache.http.impl.client.HttpClients;import org.apache.http.impl.conn.PoolingHttpClientConnectionManager;import org.apache.http.util.EntityUtils; /** * 使用 httpclient4.5 进行 https 通讯， * 采用双向认证， 连接池管理connection *  * @author wangfeihu * */public class HttpClientforSSL {     public static HttpClientConnectionManager CONNECTION_MANAGER = null;     /**     * 初始化 connection manager.     * @param keyStoreFile     * @param keyStorePass     * @param trustStoreFile     * @param trustStorePass     * @throws Exception     */    public void init(String keyStoreFile, String keyStorePass,            String trustStoreFile, String trustStorePass) throws Exception {        System.out.println("init conection pool...");         InputStream ksis = new FileInputStream(new File(keyStoreFile));// 私钥证书        InputStream tsis = new FileInputStream(new File(trustStoreFile));// 信任证书库         KeyStore ks = KeyStore.getInstance("PKCS12");        ks.load(ksis, keyStorePass.toCharArray());         KeyStore ts = KeyStore.getInstance("JKS");        ts.load(tsis, trustStorePass.toCharArray());         SSLContext sslContext = SSLContexts.custom()                .loadKeyMaterial(ks, keyStorePass.toCharArray())                // 如果有 服务器证书                .loadTrustMaterial(ts, new TrustSelfSignedStrategy())                // 如果没有服务器证书，可以采用自定义 信任机制                // .loadTrustMaterial(null, new TrustStrategy() {                //                // // 信任所有                // public boolean isTrusted(X509Certificate[] arg0,                // String arg1) throws CertificateException {                // return true;                // }                //                // })                .build();        SSLConnectionSocketFactory sslsf = new SSLConnectionSocketFactory(sslContext, new String[] { "TLSv1" }, null,                SSLConnectionSocketFactory.ALLOW_ALL_HOSTNAME_VERIFIER);         Registry registry = RegistryBuilder                . create()                .register("http", PlainConnectionSocketFactory.INSTANCE)                .register("https", sslsf).build();        ksis.close();        tsis.close();        CONNECTION_MANAGER = new PoolingHttpClientConnectionManager(registry);     }     /**     * do post     * @param url     * @param params     * @throws Exception     */    public void post(String url, String params) throws Exception {        if (CONNECTION_MANAGER == null) {            return;        }        CloseableHttpClient httpClient = HttpClients.custom()                .setConnectionManager(CONNECTION_MANAGER).build();        HttpPost httpPost = new HttpPost(url);         httpPost.setEntity(new StringEntity(params,                ContentType.APPLICATION_JSON));         CloseableHttpResponse resp = httpClient.execute(httpPost);        System.out.println(resp.getStatusLine());        InputStream respIs = resp.getEntity().getContent();        String content = convertStreamToString(respIs);        System.out.println(content);        EntityUtils.consume(resp.getEntity());    }          public static String convertStreamToString(InputStream is) {        BufferedReader reader = new BufferedReader(new InputStreamReader(is));        StringBuilder sb = new StringBuilder();         String line = null;        try {            while ((line = reader.readLine()) != null) {                sb.append(line + "/n");            }        } catch (IOException e) {            e.printStackTrace();        } finally {            try {                is.close();            } catch (IOException e) {                e.printStackTrace();            }        }        return sb.toString();    }

如果没有证书或者秘钥上面的init方法直接可以写成这样：

/** * httpclient4.5.2版 * 忽略服务器证书，采用信任机制 * @return */public static HttpClientConnectionManager init(){try {SSLContext sslContext  = SSLContexts.custom().loadTrustMaterial(null, new TrustStrategy() {@Overridepublic boolean isTrusted(X509Certificate[] arg0, String arg1)throws CertificateException {// TODO Auto-generated method stubreturn true;}}).build();SSLConnectionSocketFactory sslsf = new SSLConnectionSocketFactory( sslContext, new String[] { "TLSv1" }, null,                SSLConnectionSocketFactory.ALLOW_ALL_HOSTNAME_VERIFIER);Registry registry = RegistryBuilder                . create()                .register("http", PlainConnectionSocketFactory.INSTANCE)                .register("https", sslsf).build();        return new PoolingHttpClientConnectionManager(registry);} catch (Exception e) {e.printStackTrace();}return null;}

在main方法中调用getConn方法

public static void main(String[] args) {HttpClientConnectionManager clientConnectionManager = init();if(clientConnectionManager != null){CloseableHttpClient httpClient = HttpClients.custom().setConnectionManager(clientConnectionManager).build();String url = "http://admod-analyse.com:8080";getConn(httpClient, url);}}

原文地址：http://www.68iis.com/server/Linuxserver/4181_2.html