javax.net.ssl.SSLHandshakeException: Chain validation failed 异常

最新推荐文章于 2024-04-19 18:47:37 发布

铜锣烧_

最新推荐文章于 2024-04-19 18:47:37 发布

阅读量1k

点赞数

CC 4.0 BY-SA版权

分类专栏：工作日志文章标签： ssl https 网络协议

本文链接：https://blog.csdn.net/lanziEVOL/article/details/128663414

工作日志专栏收录该内容

10 篇文章

订阅专栏

当CA证书到期时，可以通过更新证书或跳过HTTPS验证机制来解决问题。文中提供了自定义TrustManager和HostnameVerifier的代码示例，用于创建不进行服务器验证的SSLSocketFactory，以允许OkHttpClient忽略证书错误。

原因：ca证书到期了

解决：1.更新ca证书 2.跳过https验证机制

下面是跳过https验证的方法：

    // ---------跳过https验证机制---------
    //自定义SS验证相关类
    private static class TrustAllCerts implements X509TrustManager {
        @Override
        public void checkClientTrusted(X509Certificate[] chain, String authType) throws CertificateException {
        }

        @Override
        public void checkServerTrusted(X509Certificate[] chain, String authType) throws CertificateException {
        }

        @Override
        public X509Certificate[] getAcceptedIssuers() {
            return new X509Certificate[0];
        }
    }

    private static class TrustAllHostnameVerifier implements HostnameVerifier {
        @Override
        public boolean verify(String hostname, SSLSession session) {
            return true;
        }
    }

    private static SSLSocketFactory createSSLSocketFactory() {
        SSLSocketFactory ssfFactory = null;
        try {
            SSLContext sc = SSLContext.getInstance("TLS");
            sc.init(null, new TrustManager[]{new TrustAllCerts()}, new SecureRandom());
            ssfFactory = sc.getSocketFactory();
        } catch (Exception e) {
        }
        return ssfFactory;
    }

    new OkHttpClient.Builder()
    .sslSocketFactory(createSSLSocketFactory(), new X509TrustManager() {
                    @Override
                    public void checkClientTrusted(X509Certificate[] x509Certificates, String s) throws CertificateException {

                    }

                    @Override
                    public void checkServerTrusted(X509Certificate[] x509Certificates, String s) throws CertificateException {

                    }

                    @Override
                    public X509Certificate[] getAcceptedIssuers() {
                        return new X509Certificate[0];
                    }
                })
     .hostnameVerifier(new TrustAllHostnameVerifier())
     .build();