Java忽略https ssl证书

原创已于 2025-07-21 16:28:06 修改 · 381 阅读

7 ·

CC 4.0 BY-SA版权

文章标签：

#https #java #ssl

于 2025-07-21 16:27:26 首次发布

Java 专栏收录该内容

3 篇文章

订阅专栏

private SSLContext createSslContext(RestClientBuilder restClientBuilder, Map<String, String> settings) {
    if (!isHttpsHost(settings)) {
        return null;
    }
    String certBase64 = settings.get("sslCert");
    if (Strings.isNullOrEmpty(certBase64)) {
        LOGGER.error("sslCert could not be null when use https");
        return null;
    }
    String sslFormat = settings.get("sslFormat");
    try {
        /**
         * ssl
        if (Strings.isNullOrEmpty(sslFormat)) {
            sslFormat = "jks";
        }
        KeyStore truststore = KeyStore.getInstance(sslFormat);
        try (InputStream is = new ByteArrayInputStream(Base64.decodeBase64(certBase64))) {
            truststore.load(is, Optional.ofNullable(settings.get("sslCertPassword")).map(String::toCharArray).orElse("".toCharArray()));
        }
        SSLContextBuilder sslBuilder = SSLContexts.custom().loadTrustMaterial(truststore, null);
        *
        */
        /**ignore 证书*/
        SSLContextBuilder sslBuilder = SSLContexts.custom().loadTrustMaterial(null, (chain, authType) -> true);// 信任所有证书
        return sslBuilder.build();
    } catch (Exception e) {
        throw new IllegalArgumentException(e);
    }
}

正常不忽略ssl证书

if (Strings.isNullOrEmpty(sslFormat)) {
    sslFormat = "jks";
}
KeyStore truststore = KeyStore.getInstance(sslFormat);
try (InputStream is = new ByteArrayInputStream(Base64.decodeBase64(certBase64))) {
    truststore.load(is, Optional.ofNullable(settings.get("sslCertPassword")).map(String::toCharArray).orElse("".toCharArray()));
}
SSLContextBuilder sslBuilder = SSLContexts.custom().loadTrustMaterial(truststore, null);

忽略ssl证书

/**ignore 证书*/
SSLContextBuilder sslBuilder = SSLContexts.custom().loadTrustMaterial(null, (chain, authType) -> true);// 信任所有证书