Spring-RestTemplate调用https rest服务时出错（证书错误）

Question

我在tomcat war中调用一个rest web服务。我使用以下内容进行web服务调用：

    public UsuarioDTO validarDatosToken(String token, boolean incluirRoles) throws ModeloException, DAOException {

        RestTemplate restTemplate = new RestTemplate();
        UserRestVO page = restTemplate.getForObject("https://xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"), UserRestVO.class);

        if (page != null && page.getStatusResult() != null && page.getStatusResult().getStatusCode().equals("OK") && page.getUser() != null) {
            ------------
            return datos;
        } else {
            throw new ModeloException(ErroresGeneralesEnum.ERROR_TOKEN_CADUCADO);
        }
    }
}


public Authentication authenticateReal(Authentication authentication) throws AuthenticationException {

    String username = authentication.getName();
    String password = (String) authentication.getCredentials();

    UsuarioDTO usuario = null;
    try {
        usuario = usuariosService.validarDatosToken(username, true);


    } catch (Exception e) {
        e.printStackTrace();
        Logger.getLogger(CustomAuthenticationProvider.class.getName()).error(e);

        throw new BadCredentialsException("Username not found.");
    }



}

Answer 1

从您的代码中，我没有看到RESTTemplate的任何特定SSL配置。因为我不知道Spring的哪个版本（以及相关的HTTPClient)，所以我建议尝试从下面的代码开始，看看会发生什么：

public void tryme() throws ClientProtocolException, IOException {
 String urlOverHttps = "https:xxxxxxx";  
 CloseableHttpClient httpClient = 
      HttpClients.custom()
             .setSSLHostnameVerifier(new NoopHostnameVerifier())
             .build();
   HttpComponentsClientHttpRequestFactory reqFactory = 
              new HttpComponentsClientHttpRequestFactory();
   reqFactory.setHttpClient(httpClient);

   ResponseEntity<String> response =  
          new RestTemplate(reqFactory).exchange(
                  urlOverHttps, HttpMethod.GET, null, String.class);
   String responseCode = response.getStatusCode();
}

这在理论上应该绕过证书检查。它需要HttpClient4.4。正如我所说，您没有公开当前配置的许多细节，所以我在这里只能胡乱猜测。