Question

Java的HttpClient如何去支持无证书访问https

Answer 1

不用httpclient, 用jdk的api就可以写

import java.io.ByteArrayOutputStream;
import java.io.InputStream;
import java.net.HttpURLConnection;
import java.net.URL;

import javax.net.ssl.HostnameVerifier;
import javax.net.ssl.HttpsURLConnection;
import javax.net.ssl.SSLSession;
import javax.net.ssl.TrustManager;
import javax.net.ssl.X509TrustManager;

public class HttpUtil {

	public static void main(String[] args) throws Exception {
	}

	public static String getToUrl(String url, String charset) throws Exception {
		HostnameVerifier hv = new HostnameVerifier() {
			public boolean verify(String urlHostName, SSLSession session) {
				return true;
			}
		};
		
		javax.net.ssl.TrustManager[] trustAllCerts = new javax.net.ssl.TrustManager[1];
		javax.net.ssl.TrustManager tm = new MyM();
		trustAllCerts[0] = tm;
		javax.net.ssl.SSLContext sc = javax.net.ssl.SSLContext.getInstance("SSL");
		sc.init(null, trustAllCerts, null);
		javax.net.ssl.HttpsURLConnection.setDefaultSSLSocketFactory(sc.getSocketFactory());

		HttpsURLConnection.setDefaultHostnameVerifier(hv);
		
		HttpURLConnection connection = (HttpURLConnection) new URL(url).openConnection();
		connection.setDoInput(true);
		connection.setRequestMethod("GET");
		connection.setUseCaches(false);
		connection.setInstanceFollowRedirects(true);
		connection.connect();

		InputStream response = connection.getInputStream();
		ByteArrayOutputStream result = new ByteArrayOutputStream();
		byte[] data = new byte[10240];
		int count = -1;
		while (-1 != (count = response.read(data, 0, data.length))) {
			result.write(data, 0, count);
		}

		connection.disconnect();

		return new String(result.toByteArray(), charset);
	}

	static class MyM implements TrustManager, X509TrustManager {
	
		public void checkClientTrusted(java.security.cert.X509Certificate[] chain, String authType) throws java.security.cert.CertificateException {
			
		}
	
		public void checkServerTrusted(java.security.cert.X509Certificate[] chain, String authType) throws java.security.cert.CertificateException {
			
		}
	
		public java.security.cert.X509Certificate[] getAcceptedIssuers() {
			return null;
		}
	}

}

Answer 2

在服务器站点设置里，将SSL设置为忽略。