Apache HttpClient 5.1绕过SSL验证

Question

我已经配置了CloseableHttpAsyncClient，如下所述

   public CloseableHttpAsyncClient closeableHttpAsyncClient(){
        HttpAsyncClientBuilder clientBuilder = HttpAsyncClients.custom();
        final PoolingAsyncClientConnectionManager connManager = new PoolingAsyncClientConnectionManager();
        connManager.setMaxTotal(10);
        clientBuilder.setConnectionManager(connManager);

        clientBuilder.setRedirectStrategy(DefaultRedirectStrategy.INSTANCE);
        CloseableHttpAsyncClient closeableHttpAsyncClient = clientBuilder.build();
        return closeableHttpAsyncClient;
}

我想绕过SSL验证。我试图检查不同的配置，但没有找到解决方案。

Answer 1

可以设置自定义TLS上下文，并将其与默认TLS策略一起使用，如下所述：

https://github.com/apache/httpcomponents-client/blob/5.1.x/httpclient5/src/test/java/org/apache/hc/client5/http/examples/AsyncClientCustomSSL.java

在此特定示例中，连接管理器已配置为信任所有证书，除了标准CA之外，CN等于httpbin.org。人们可以选择不同的策略或不分青红皂白地信任所有证书，尽管强烈反对后者。

final SSLContext sslcontext = SSLContexts.custom()
        .loadTrustMaterial(new TrustStrategy() {

            @Override
            public boolean isTrusted(
                    final X509Certificate[] chain,
                    final String authType) throws CertificateException {
                // Trust all certs with CN equal `httpbin.org`
                final X509Certificate cert = chain[0];
                return "CN=httpbin.org".equalsIgnoreCase(cert.getSubjectDN().getName());
            }

        })
        .build();
final TlsStrategy tlsStrategy = ClientTlsStrategyBuilder.create()
        .setSslContext(sslcontext)
        .build();
final PoolingAsyncClientConnectionManager cm = PoolingAsyncClientConnectionManagerBuilder.create()
        .setTlsStrategy(tlsStrategy)
        .build();