MasterCard API-将证书添加到请求后出错

Question

万事达卡使用两条腿的OAuth。在准备OAuth负载之后，我将其添加到授权密钥中的头中。然后，请求需要与证书一起发送。我在这一步出错了。

我已经根据上提供的示例代码编写了代码https://developer.mastercard.com/portal/display/api/Locations-示例代码

和示例密钥可在https://developer.mastercard.com/portal/display/api/OAuth验证，

生成SSL证书所遵循的步骤：

1. Open the Firefox browser and enter the URL : https://sandbox.api.mastercard.com
2. Click on the lock icon on the bottom of the browser.
3. Click on View Certificate 
4. Click on the Details tab
5. Under "Certificate Hierarchy", click on the issuing CA (beside the arrow)
6. Click on Export..
7. Save the .PEM file (suppose with "openapi-sandbox.pem").
8. Then using Java's keytool, Load this into a JKS keystore using a command like this: 

keytool-import-alias openapi samplecode ssl cert-file openapi沙箱。pem-密钥库openapi示例代码。jks

准备请求的代码

  URL url = new URL(httpsURL);
  con = (HttpsURLConnection) url.openConnection();
  con.setRequestMethod(method);
  con.setSSLSocketFactory(getSocketFactory());
  con.setDoOutput(true);
  con.setDoInput(true);
  con.addRequestProperty("Authorization", buildAuthHeaderString(params));

和函数来处理证书文件

  private SSLSocketFactory getSocketFactory() 
  {
    KeyStore ks = KeyStore.getInstance("JKS");
    // get user password and file input stream
    char[] password = "prince".toCharArray();
    ClassLoader cl = this.getClass().getClassLoader();
    String location =  "D:\\DEV_HOME\\openapi-samplecode6.jks";
  //  String location =  "openapi-samplecode1.jks";
    System.out.println("location =" + location );
    InputStream stream = cl.getResourceAsStream(location);
    ks.load(stream, password);
   // stream.close();

    SSLContext sc = SSLContext.getInstance("TLS");
    KeyManagerFactory kmf = KeyManagerFactory.getInstance("SunX509");
    TrustManagerFactory tmf = TrustManagerFactory.getInstance("SunX509");

    kmf.init(ks, password);
    tmf.init(ks);

    sc.init(kmf.getKeyManagers(), tmf.getTrustManagers(),null);

    return sc.getSocketFactory();
  }

提前感谢您的时间。：）

javax.net.ssl.SSLHandshakeExc0019：sun.security.validator.ValidatorExc0019：没有找到可信证书在sun.security.ssl.lerts.getSSLExc0019（未知来源）在sun.security.ssl.SSLSocketImpl.fatal（未知来源）在sun.security.ssl.Handshaker.fatalSE（未知来源）在sun.security.ssl.Handshaker.fatalSE（未知来源）在sun.security.ssl.ClientHandshaker.server证书（未知来源）在sun.security.ssl.ClientHandshaker.process消息（未知来源）在sun.security.ssl.Handshaker.process循环（未知来源）sun.security.ssl.Handshaker.process_record（未知来源）sun.security.ssl.SSLSocketImpl.read记录（未知来源）sun. security. ssl。在sun. security. ssl.初始化握手（未知来源）。在sun. security. ssl的SSLSocketImp. start握手（未知来源）。SSLSocketImp. start握手（未知来源）在sun. net. www.协议. http。后连接（未知来源）在sun. net.连接（未知来源）在sun. net. www.协议。在mypack连接（未知来源）。MasterCardDemo. createOpenAPIConnection（MasterCardDemo. java： 183）at mypack.MasterCardDemo. main（MasterCardDemo. java： 64）引起：sun. security. validator。异常：在sun. security. validator中没有找到受信任的证书。SimpleValidator. BuildTrustedChain（未知来源）在sun. security. validator。在sun. security. validator上进行SimpleValidator. Engineering验证（未知来源）。在sun. security. ssl验证（未知来源）。X509TrustManagerImp. valester（未知来源）at sun. security. ssl.X509TrustManagerImp. check信任（未知来源）在sun. security. ssl。X509TrustManagerImp. check ServerTrusted（未知来源）

Answer 1

这实际上是一个SSL问题，与MasterCard的OAuth没有什么关系。您需要说服Java信任服务器上的SSL证书https://api.mastercard.com.您将OAuth证书放在信任存储中，而不是MasterCard证书。比将密钥放在信任存储中更好的解决方案是信任根CA。在Java中，可以使用默认的套接字因子来实现这一点。替换此代码：

con.setSSLSocketFactory(getSocketFactory());

为此：

con.setSSLSocketFactory((SSLSocketFactory)SSLSocketFactory.getDefault());