使用 restTemplate 时需要忽略证书

Question

我正在尝试向以下地址发送请求。证书无效，我想忽略它。我根据对 1 、 2 的研究编写了以下代码，但我无法完成它。我正在使用 Java 1.7，

 https://api.stubhubsandbox.com/search/catalog/events/v3

代码

private static final TrustManager[] UNQUESTIONING_TRUST_MANAGER = new TrustManager[]{
    new X509TrustManager() {
        public java.security.cert.X509Certificate[] getAcceptedIssuers(){
            return null;
        }
        public void checkClientTrusted( X509Certificate[] certs, String authType ){}
        public void checkServerTrusted( X509Certificate[] certs, String authType ){}
        public void checkClientTrusted(
                java.security.cert.X509Certificate[] arg0, String arg1)
                throws CertificateException {
            // TODO Auto-generated method stub

        }
        public void checkServerTrusted(
                java.security.cert.X509Certificate[] arg0, String arg1)
                throws CertificateException {
            // TODO Auto-generated method stub

        }
    }
};

public static void main(String[] args) {
    TrustStrategy acceptingTrustStrategy =

    SSLContext sslContext = org.apache.http.ssl.SSLContexts.custom()
            .loadTrustMaterial(null, acceptingTrustStrategy)
            .build();

    SSLConnectionSocketFactory csf = new SSLConnectionSocketFactory(sslContext);

    CloseableHttpClient httpClient = HttpClients.custom()
            .setSSLSocketFactory(csf)
            .build();

    HttpComponentsClientHttpRequestFactory requestFactory =
            new HttpComponentsClientHttpRequestFactory();

    requestFactory.setHttpClient(httpClient);

    RestTemplate restTemplate = new RestTemplate(requestFactory);
    String url = "https://api.stubhubsandbox.com/search/catalog/events/v3";
    RestTemplate rest = new RestTemplate();
    Map<String, String> mvm = new HashMap<String, String>();
    mvm.put("Authorization", "Bearer TOKEEEEEEEN");
    Object object = rest.postForObject(url, null, Object.class, mvm);
    System.err.println("done");

}

原文由 Daniel Newtown 发布，翻译遵循 CC BY-SA 4.0 许可协议

Answer 1

您可能已经注意到，Spring 的 RestTemplate 将所有与 HTTP(S) 相关的内容委托给 ClientHttpRequestFactory 的底层实现。由于您使用的是基于 HttpClient 的实现，因此这里有几个有用的 SO 链接，说明如何为内部 HttpClient 实现此目的：

• 忽略 Apache HttpClient 4.3 中的 SSL 证书
• 如何忽略 Apache HttpClient 4.0 中的 SSL 证书错误

显然，从 4.4 版开始，可以这样做：

 CloseableHttpClient httpClient = HttpClients.custom().setSSLHostnameVerifier(NoopHostnameVerifier.INSTANCE).build();

原文由 Costi Ciudatu 发布，翻译遵循 CC BY-SA 3.0 许可协议