如何执行TLS1。2.使用Rest模板创建Rest客户端

Question

我正在使用Spring3.0 restTemboard通过调用post方法消费json webservice。

        MultiValueMap<String, String> headers = new LinkedMultiValueMap<String, String>();
        headers.add("Content-Type", MediaType.APPLICATION_JSON_VALUE);      
        HttpEntity<Object> entity = new HttpEntity<Object>(requestAsString, headers);
        postForObject = restTemplate.postForObject(url, entity, responseClass );

我们的应用程序部署在WAS服务器中，并试图通过创建与TLS1的套接字连接来连接producer。0.但是，现在producer只支持TLS1。1和TLS1。2.

如何强制restTempate使用TLS1。1或TLS 1.2。

通常，对于apache httpClient代码，创建自定义PromatcolSocketFactory并覆盖createSocket方法。但是，在RestTemboard的情况下，如何实现相同的。

Answer 1

@如果你的问题还没解决的话。

    RestTemplate restTemplate = new RestTemplate();
    DefaultHttpClient httpClient = new DefaultHttpClient();
    // We're going to try and load and enable TLS version 1.2 standard communication context from JSSE Providers
    // This is enabled only for download media Mirakl as some merchants don't accept communication with TLS versions prior to 1.1
    try {
        SSLContext context;
        context = SSLContext.getInstance("TLSv1.2");
        context.init(null, null, null);

        SSLSocketFactory ssf = new SSLSocketFactory(context);
        ClientConnectionManager ccm = httpClient.getConnectionManager();
        SchemeRegistry sr = ccm.getSchemeRegistry();
        sr.register(new Scheme("http", 80, PlainSocketFactory.getSocketFactory()));
        sr.register(new Scheme("https", 443, ssf));

    } catch (NoSuchAlgorithmException | KeyManagementException e) {
        LOGGER.warn("Could not load the TLS version 1.2 due to => ", e);
    }

    restTemplate.setRequestFactory(new HttpComponentsClientHttpRequestFactory(httpClient));

Answer 2

您可以将RestTemplate配置为使用自定义的ClientHttpRequestFactory。特别是（因为您使用的是Spring 3.0），这里有一个CommonClientHttPrequestFactory。这将使您能够详细配置commons HTTP，您的RestTemplate将使用它来执行其请求。

请注意，在Spring的更高版本中，实际的实现类已经发生了变化（如果您仍然使用3.0，那么您真的应该考虑更新）。从3.1开始，实现类被称为HttpComponentsClientHttpRequestFactory。

Answer 3

带着Spring

import javax.net.ssl.SSLContext;
import org.apache.http.impl.client.CloseableHttpClient;
import org.apache.http.impl.client.HttpClientBuilder;
import org.springframework.http.client.HttpComponentsClientHttpRequestFactory;
import org.springframework.web.client.RestTemplate;

SSLContext context = SSLContext.getInstance("TLSv1.2");
context.init(null, null, null);

CloseableHttpClient httpClient = HttpClientBuilder.create().setSSLContext(context)
    .build();
HttpComponentsClientHttpRequestFactory factory = new HttpComponentsClientHttpRequestFactory(httpClient);
RestTemplate restTemplate = new RestTemplate(factory);
.....