在Spring Rest模板中跳过SSL证书验证

使用Spring Rest模板时如何跳过SSL证书验证？配置Rest Template，以便它使用Http Client创建请求。

注意：如果您熟悉sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target则下面的内容应该sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target您有所帮助。

Http客户端

首先，将HttpClient （> 4.4）导入到您的项目中

compile('org.apache.httpcomponents:httpclient:4.5.1')

配置RestTemplate

使用Http客户端的SSLContexts工厂方法配置SSLContext ：

TrustStrategy acceptingTrustStrategy = (X509Certificate[] chain, String authType) -> true;SSLContext sslContext = org.apache.http.ssl.SSLContexts.custom().loadTrustMaterial(null, acceptingTrustStrategy).build();SSLConnectionSocketFactory csf = new SSLConnectionSocketFactory(sslContext);CloseableHttpClient httpClient = HttpClients.custom().setSSLSocketFactory(csf).build();HttpComponentsClientHttpRequestFactory requestFactory =new HttpComponentsClientHttpRequestFactory();requestFactory.setHttpClient(httpClient);RestTemplate restTemplate = new RestTemplate(requestFactory);

org.apache.http.ssl.TrustStrategy用于覆盖标准证书验证过程。在上面的示例中-它始终返回true ，因此无需进一步验证即可信任证书。

考试

@Test
public void opensSSLPage() throws Exception {String uri = "https://some-secured-page.com";ResponseEntity<String> entity = restTemplate.getForEntity(uri, String.class);assertThat(entity.getStatusCode().is2xxSuccessful()).isTrue();
}