在Apache HttpClient 4.3中忽略SSL证书

Question

如何忽略Apache HttpClient4.3的SSL证书（信任所有证书）？

null

• 仅用于测试目的。孩子们，不要在家里（或生产中）尝试

Answer 1

下面的代码适用于信任自签名证书。在创建客户端时必须使用TrustSelfSignedStrategy：

SSLContextBuilder builder = new SSLContextBuilder();
builder.loadTrustMaterial(null, new TrustSelfSignedStrategy());
SSLConnectionSocketFactory sslsf = new SSLConnectionSocketFactory(
        builder.build());
CloseableHttpClient httpclient = HttpClients.custom().setSSLSocketFactory(
        sslsf).build();

HttpGet httpGet = new HttpGet("https://some-server");
CloseableHttpResponse response = httpclient.execute(httpGet);
try {
    System.out.println(response.getStatusLine());
    HttpEntity entity = response.getEntity();
    EntityUtils.consume(entity);
} finally {
    response.close();
}

我没有故意包括SSLConnectionSocketFactory.allow_all_hostname_verifier:目的是允许使用自签名证书进行测试，这样您就不必从证书颁发机构获得适当的证书。您可以轻松地使用正确的主机名创建自签名证书，所以这样做，而不是添加SSLConnectionSocketFactory.allow_all_hostname_verifier标志。