java 主动信任证书

java 主动信任证书

SSLContext sslcontext = SSLContexts.custom().loadKeyMaterial(keyStore, mid.toCharArray()).loadTrustMaterial(keyStore, new TrustStrategy() {

    // 信任所有

    public boolean isTrusted(java.security.cert.X509Certificate[] chain, String authType) {

        return true;

    }

}).build();

SSLConnectionSocketFactory sslsf = new SSLConnectionSocketFactory(sslcontext, new String[] { "TLSv1" },

            null, SSLConnectionSocketFactory.ALLOW_ALL_HOSTNAME_VERIFIER);

包： https://files.cnblogs.com/files/xiluhua/httpclient-4.3.3.zip

完整代码：

package com.taiping.dianshang.payment.service.wechat.fromWechat;

import java.security.cert.CertificateException;

import java.security.cert.X509Certificate;

import java.util.Map;

import javax.net.ssl.SSLContext;

import javax.net.ssl.TrustManager;

import javax.net.ssl.X509TrustManager;

import org.apache.http.HttpEntity;

import org.apache.http.HttpHost;

import org.apache.http.HttpResponse;

import org.apache.http.client.methods.HttpPost;

import org.apache.http.conn.ClientConnectionManager;

import org.apache.http.conn.params.ConnRoutePNames;

import org.apache.http.conn.scheme.Scheme;

import org.apache.http.conn.scheme.SchemeRegistry;

import org.apache.http.conn.ssl.SSLSocketFactory;

import org.apache.http.entity.StringEntity;

import org.apache.http.impl.client.DefaultHttpClient;

import org.springframework.stereotype.Component;

import com.taiping.dianshang.constant.ConstantTool;

import com.taiping.facility.cache.container.CacheContainer;

import com.taiping.facility.tool.FileStreamTool;

import com.taiping.facility.tool.LogTool;

import com.taiping.facility.tool.MapTool;

import com.taiping.facility.tool.PropertyFileTool;

/**

 *

 * @author xilh

 * @since 20200409

 */

@Component

public class HttpclientImpl_ssl {

	/**

	 * @author xilh

	 * @since 20200324

	 */

	@SuppressWarnings({ "unchecked", "deprecation" })

	public String post(String url, Object obj, Map<String, Object> httpclientParams) throws Exception {

		HttpPost httpPost = null;

		String responseMsg = null;

		Map<String, Object> map  = (Map<String, Object>)obj;

		String trans = MapTool.getStringFromMap(map, "trans");

		String packet = MapTool.getStringFromMap(map, "packet");

		DefaultHttpClient httpclient = new DefaultHttpClient();

		// 代理的设置

		String value = CacheContainer.getSystemParameterValue("internet.proxy");

		if (LogTool.isLocal) {

			value = PropertyFileTool.get("internet.proxy");

		}

		LogTool.info(this.getClass(), trans+", proxy: "+value);

		String[] arr = value.split(":");

        HttpHost proxy = new HttpHost(arr[0], Integer.valueOf(arr[1]));

        httpclient.getParams().setParameter(ConnRoutePNames.DEFAULT_PROXY, proxy);

		try {

			// Secure Protocol implementation.

			SSLContext ctx = SSLContext.getInstance("TLS");

			// Implementation of a trust manager for X509 certificates

			X509TrustManager tm = new X509TrustManager() {

				public void checkClientTrusted(X509Certificate[] xcs, String string) throws CertificateException {

				}

				public void checkServerTrusted(X509Certificate[] xcs, String string) throws CertificateException {

				}

				public X509Certificate[] getAcceptedIssuers() {

					return null;

				}

			};

			ctx.init(null, new TrustManager[] { tm }, null);

			SSLSocketFactory ssf = new SSLSocketFactory(ctx, SSLSocketFactory.ALLOW_ALL_HOSTNAME_VERIFIER);

			ClientConnectionManager ccm = httpclient.getConnectionManager();

			// register https protocol in httpclient's scheme registry

			SchemeRegistry sr = ccm.getSchemeRegistry();

			sr.register(new Scheme("https", 443, ssf));

			httpclient = new DefaultHttpClient(ccm, httpclient.getParams());

			// String auth = CacheContainer.getSysParamValue("authorization.token.18", true);

			// appKey ："TPJJ"     appSecret： "yMJlPH9RnjxpqhyysxaIXYT82U1Sh32q"

			//装配post请求参数

			httpPost = new HttpPost(url);

			httpPost.setHeader("Content-Type","application/json;charset=UTF-8");

//	        List<BasicNameValuePair> list = new ArrayList<BasicNameValuePair>();

//	        list.add(new BasicNameValuePair("appKey", "TPJJ"));

//	        list.add(new BasicNameValuePair("appSecret", "yMJlPH9RnjxpqhyysxaIXYT82U1Sh32q"));

//	        list.add(new BasicNameValuePair("tokenExpireDay", "7"));

	        httpPost.setEntity(new StringEntity((String)packet,"application/json", ConstantTool.UTF8));

			HttpResponse response = httpclient.execute(httpPost);

			HttpEntity entity = response.getEntity();

			byte buffer[] = FileStreamTool.read(entity.getContent());

			LogTool.info(this.getClass(), trans+", buffer size: "+buffer.length);

			if (buffer != null && buffer.length > 0) {

				responseMsg = new String(buffer, ConstantTool.UTF8);

			}

			LogTool.info(this.getClass(), trans+", responseMsg: "+responseMsg);

			System.out.println();

		} catch (Exception e) {

			LogTool.error(this.getClass(), e);

		} finally{

			if (httpPost != null) {

				// 关闭请求

				httpPost.releaseConnection();

			}

		}

		return responseMsg;

	}

}