RestTemplate请求https忽略证书验证

最新推荐文章于 2025-03-18 16:39:57 发布

qianjiu520

最新推荐文章于 2025-03-18 16:39:57 发布

阅读量1.6k

点赞数

CC 4.0 BY-SA版权

分类专栏： java 文章标签： https http java

本文链接：https://blog.csdn.net/qianjiu520/article/details/134926305

java 专栏收录该内容

7 篇文章

订阅专栏

该文章展示了如何在SpringBoot应用中创建一个无视SSL证书验证的RestTemplate实例，通过自定义HttpClient和SSLContext来处理HTTP请求，包括连接超时和重试策略。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

import org.apache.http.config.Registry;
import org.apache.http.config.RegistryBuilder;
import org.apache.http.conn.ConnectTimeoutException;
import org.apache.http.conn.socket.ConnectionSocketFactory;
import org.apache.http.conn.socket.PlainConnectionSocketFactory;
import org.apache.http.conn.ssl.NoopHostnameVerifier;
import org.apache.http.conn.ssl.SSLConnectionSocketFactory;
import org.apache.http.impl.client.CloseableHttpClient;
import org.apache.http.impl.client.DefaultHttpRequestRetryHandler;
import org.apache.http.impl.client.HttpClients;
import org.apache.http.impl.conn.PoolingHttpClientConnectionManager;
import org.apache.http.ssl.SSLContextBuilder;
import org.springframework.context.annotation.Bean;
import org.springframework.context.annotation.Configuration;
import org.springframework.http.client.HttpComponentsClientHttpRequestFactory;
import org.springframework.web.client.RestTemplate;

import java.io.IOException;
import java.net.UnknownHostException;
import java.security.KeyManagementException;
import java.security.KeyStoreException;
import java.security.NoSuchAlgorithmException;
import java.security.cert.X509Certificate;
import java.util.Arrays;
import java.util.Collection;

/**
 * @date 2023/12/11
 */
@Configuration
public class RestTemplateConfig {


    @Bean("ignoreSSLRestTemplate")
    public RestTemplate restTemplateIgnoreSSL()  {
        final HttpComponentsClientHttpRequestFactory factory = new HttpComponentsClientHttpRequestFactory();
        //设置过期时间
        factory.setConnectionRequestTimeout(5000);
        factory.setReadTimeout(5000);
        final SSLContextBuilder builder = new SSLContextBuilder();
        try {
            //全部信任 不做身份鉴定
            builder.loadTrustMaterial(null, (X509Certificate[] x509Certificate, String s) -> true);
        } catch (NoSuchAlgorithmException e) {
            e.printStackTrace();

        } catch (KeyStoreException e) {
            e.printStackTrace();
        }
        SSLConnectionSocketFactory socketFactory = null;
        try {
            socketFactory = new SSLConnectionSocketFactory(builder.build(), new String[]{"TLSv1", "TLSv1.2","SSLv3","SSLv2Hello"}, null, NoopHostnameVerifier.INSTANCE);
        } catch (NoSuchAlgorithmException e) {
            e.printStackTrace();
        } catch (KeyManagementException e) {
            e.printStackTrace();
        }
        //为自定义连接器注册http与https
        Registry<ConnectionSocketFactory> registry = RegistryBuilder.<ConnectionSocketFactory>create()
                .register("http", new PlainConnectionSocketFactory())
                .register("https", socketFactory).build();
        PoolingHttpClientConnectionManager phccm = new PoolingHttpClientConnectionManager(registry);
        phccm.setMaxTotal(500);
        final CloseableHttpClient httpClient = HttpClients.custom().setSSLSocketFactory(socketFactory)
                .setConnectionManager(phccm)
                .setConnectionManagerShared(true)
                .setRetryHandler(new CustomRequestRetryHandler(3))
                .build();

        factory.setHttpClient(httpClient);
        final RestTemplate restTemplate = new RestTemplate(factory);
        return restTemplate;
    }

    public static class CustomRequestRetryHandler extends DefaultHttpRequestRetryHandler {
        protected static final Collection<Class<? extends IOException>> ignoredExceptions =
                Arrays.asList(ConnectTimeoutException.class, UnknownHostException.class);

        public CustomRequestRetryHandler(final int retryCount) {
            super(retryCount, true, ignoredExceptions);
        }
    }
}