关于JAVA发送Https请求（HttpsURLConnection和
HttpURLCon。。。
关于JAVA发送Https请求（HttpsURLConnection和HttpURLConnection）
【转】
https协议对于开发者⽽⾔其实只是多了⼀步证书验证的过程。这个证书正常情况下被jdk/jre/security/cacerts所管理。⾥⾯证书包含两种情况：
1、机构所颁发的被认证的证书，这种证书的⽹站在浏览器访问时https头显⽰为绿⾊如百度
2、个⼈所设定的证书，这种证书的⽹站在浏览器⾥https头显⽰为红⾊×，且需要点击信任该⽹站才能继续访问。⽽点击信任这⼀步的操作就是我们在java代码访问https⽹站时区别于http请求需要做的事情。
所以JAVA发送Https请求有两种情况，三种解决办法：
第⼀种情况：Https⽹站的证书为机构所颁发的被认证的证书，这种情况下和http请求⼀模⼀样，⽆需做任何改变，⽤HttpsURLConnection 或者HttpURLConnection都可以
[java]
1. public static void main(String[] args) throws Exception{
2. URL serverUrl = new URL("xxxx");
3. HttpURLConnection conn = (HttpURLConnection) serverUrl.openConnection();
4. conn.setRequestMethod("GET");
5. conn.setRequestProperty("Content-type", "application/json");
6. //必须设置false，否则会⾃动redirect到重定向后的地址
7. conn.setInstanceFollowRedirects(false);
8. t();
9. String result = getReturn(conn);
10. }
11.
12. /*请求url获取返回的内容*/
13. public static String getReturn(HttpURLConnection connection) throws IOException{
14. StringBuffer buffer = new StringBuffer();redis是什么干嘛的
15. //将返回的输⼊流转换成字符串
16. try(InputStream inputStream = InputStream();
17. InputStreamReader inputStreamReader = new InputStreamReader(inputStream, ConstantInfo.CHARSET);
18. BufferedReader bufferedReader = new BufferedReader(inputStreamReader);){
19. String str = null;
20. while ((str = adLine()) != null) {
21. buffer.append(str);
22. }
java下载过程23. String result = String();vs2022创建c语言项目
24. return result;
25. }
26. }
第⼆种情况：个⼈所设定的证书，这种证书默认不被信任，需要我们⾃⼰选择信任，信任的办法有两种：
A、将证书导⼊java的运⾏环境中
从该⽹站下载或者从⽹站开发者出获取证书
运⾏命令将证书导⼊java运⾏环境：keytool -import -keystore %JAVA_HOME%\jre\lib\security\cacerts - -alias xxx 完成。java代码中发送https的请求和http⼀样，同第⼀种情况。
B、忽略证书验证过程，忽略之后任何Https协议⽹站皆能正常访问，同第⼀种情况
[java]
1. import CertificateException;
2. import X509Certificate;
3. import javax.ssl.X509TrustManager;
4. public class MyX509TrustManager implements X509TrustManager {
5.
6. @Override
7. public void checkClientTrusted(X509Certificate certificates[],String authType) throws CertificateException {
8. }
9.
10. @Override
11. public void checkServerTrusted(X509Certificate[] ax509certificate,String s) throws CertificateException {
12. }
13.
14. @Override
15. public X509Certificate[] getAcceptedIssuers() {html5支持所有浏览器吗
16. // TODO Auto-generated method stub
17. return null;
18. }
19. }
[java]
1. public static void main(String[] args) throws Exception{
2. SSLContext sslcontext = Instance("SSL","SunJSSE");
3. sslcontext.init(null, new TrustManager[]{new MyX509TrustManager()}, new java.security.SecureRandom());
4. URL url = new URL("xxxx");
5. HostnameVerifier ignoreHostnameVerifier = new HostnameVerifier() {
6. public boolean verify(String s, SSLSession sslsession) {
7. System.out.println("WARNING: Hostname is not matched for cert.");
8. return true;
9. }
10. };
11. HttpsURLConnection.setDefaultHostnameVerifier(ignoreHostnameVerifier);
12. HttpsURLConnection.SocketFactory());
13. //之后任何Https协议⽹站皆能正常访问，同第⼀种情况
14. }
C、java代码中加载证书，必须使⽤HttpsURLConnection⽅式
从⽹站开发者出获取⽣成证书的密钥库cacert.keystore
[java]
1. import java.io.FileInputStream;
2. import java.security.KeyStore;
3. import CertificateException;
4. import X509Certificate;
5. import javax.ssl.TrustManager;
6. import javax.ssl.TrustManagerFactory;
7. import javax.ssl.X509TrustManager;
8. public class MyX509TrustManager implements X509TrustManager {
9. /*
10. * The default X509TrustManager returned by SunX509. We'll delegate
11. * decisions to it, and fall back to the logic in this class if the
12. * default X509TrustManager doesn't trust it.
13. */
14. X509TrustManager sunJSSEX509TrustManager;
15. MyX509TrustManager() throws Exception {
16. // create a "default" JSSE X509TrustManager.
17. KeyStore ks = Instance("JKS");
18. ks.load(new FileInputStream("cancert.keystore"),
19. "changeit".toCharArray());
20. TrustManagerFactory tmf =
21. Instance("SunX509", "SunJSSE");
22. tmf.init(ks);
23. TrustManager tms [] = TrustManagers();
24. /*
25. * Iterate over the returned trustmanagers, look
26. * for an instance of X509TrustManager. If found,
27. * use that as our "default" trust manager.
28. */
29. for (int i = 0; i < tms.length; i++) {
30. if (tms[i] instanceof X509TrustManager) {
31. sunJSSEX509TrustManager = (X509TrustManager) tms[i];
cellpadding和cellspacing32. return;
33. }
34. }
35. /*
36. * Find some other way to initialize, or else we have to fail the
37. * constructor.
38. */
39. throw new Exception("Couldn't initialize");
二尖瓣反流
40. }
41. /*
42. * Delegate to the default trust manager.
43. */
44. public void checkClientTrusted(X509Certificate[] chain, String authType)
45. throws CertificateException {
46. try {
47. sunJSSEX509TrustManager.checkClientTrusted(chain, authType);
48. } catch (CertificateException excep) {
49. // do any special handling here, or rethrow exception.
50. }
51. }
52. /*
53. * Delegate to the default trust manager.
54. */
55. public void checkServerTrusted(X509Certificate[] chain, String authType)
56. throws CertificateException {
57. try {
58. sunJSSEX509TrustManager.checkServerTrusted(chain, authType);
59. } catch (CertificateException excep) {
60. /*
61. * Possibly pop up a dialog box asking whether to trust the
62. * cert chain.
63. */
64. }
65. }
66. /*
67. * Merely pass this through.
68. */
69. public X509Certificate[] getAcceptedIssuers() {
70. AcceptedIssuers();
71. }
72. }
[java]
1.
[java]
1. public static void main(String[] args) throws Exception{
2. SSLContext sslcontext = Instance("SSL","SunJSSE");
3. sslcontext.init(null, new TrustManager[]{new MyX509TrustManager()}, new java.security.SecureRandom());
4. URL serverUrl = new URL("xxxx");
5. HttpsURLConnection conn = (HttpsURLConnection) serverUrl.openConnection();
6. conn.SocketFactory());
7. conn.setRequestMethod("GET");
8. conn.setRequestProperty("Content-type", "application/json");
9. //必须设置false，否则会⾃动redirect到重定向后的地址
10. conn.setInstanceFollowRedirects(false);
11. t();
12. String result = getReturn(conn);
13. }
14.
15. /*请求url获取返回的内容*/
16. public static String getReturn(HttpsURLConnection connection) throws IOException{
17. StringBuffer buffer = new StringBuffer();
18. //将返回的输⼊流转换成字符串
19. try(InputStream inputStream = InputStream();
20. InputStreamReader inputStreamReader = new InputStreamReader(inputStream, ConstantInfo.CHARSET);
21. BufferedReader bufferedReader = new BufferedReader(inputStreamReader);){
22. String str = null;
23. while ((str = adLine()) != null) {
24. buffer.append(str);
25. }
26. String result = String();
27. return result;
28. }
29. }
30.
版权声明：本站内容均来自互联网，仅供演示用，请勿用于商业和其他非法用途。如果侵犯了您的权益请与我们联系QQ:729038198，我们将在24小时内删除。
发表评论