用HttpClient发送HTTPS请求报SSLException: Certificate for ＜域名＞ doesn’t match any of the subject alternativ

蛤蟆卓

于 2022-07-05 16:43:22 发布

阅读量1.0k

点赞数

CC 4.0 BY-SA版权

分类专栏： java IDE 文章标签： https 网络协议 http

本文链接：https://blog.csdn.net/qq_31295171/article/details/125623135

java IDE 专栏收录该内容

5 篇文章

订阅专栏

本文介绍了一种通过重写ExchangeService类并禁用主机名验证的方法，来解决因证书问题无法使用Exchange获取Outlook数据服务的问题。此方案绕过了SSL会话验证，实现了无障碍的数据服务访问。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

用exchage获取Outlook数据服务是因为证书问题导致，现在需要去除证书验证就可以访问了。

ExchangeService service = new ExchangeServiceWithHostVerify(ExchangeVersion.Exchange2010_SP2);

/**
 * 重写ExchangeService类，不对任何域名做验证
 */
private static class ExchangeServiceWithHostVerify extends ExchangeService {

    // 不对任何域名做验证
    private final static HostnameVerifier hostnameVerifierWithOutVerfy = new HostnameVerifier() {
        @Override
        public boolean verify(String s, SSLSession sslSession) {
            return true;
        }
    };

    public ExchangeServiceWithHostVerify(ExchangeVersion requestedServerVersion) {
        super(requestedServerVersion);
    }

    @Override
    protected Registry<ConnectionSocketFactory> createConnectionSocketFactoryRegistry() {
        try {
            return RegistryBuilder.<ConnectionSocketFactory>create().register(EWSConstants.HTTP_SCHEME, new PlainConnectionSocketFactory()).register(EWSConstants.HTTPS_SCHEME, EwsSSLProtocolSocketFactory.build(null, hostnameVerifierWithOutVerfy)).build();
        } catch (GeneralSecurityException e) {
            throw new RuntimeException("Could not initialize ConnectionSocketFactory instances for HttpClientConnectionManager", e);
        }
    }