Easy to play with HttpClient configuration SSL, using bypass certificate authentication to implement HTTPS

The previous article said that HttpClient could not directly access HTTPS resources, this time to simulate the environment, and then configure the HTTPS test. In the previous article, we shared an article, tomcat configuration SSL, that I built and configured SSL in Tomcat, where you can configure HTTPS locally. I have configured it so that the effect is such a drop:

You can see that the certificate has been trusted (displays a light green small lock) and the browser can access it normally. Now let's test it in code:

2. Public static void Main (string[] args) throws ParseException, IOException, Keymanagementexception, NoSuchAlgorithmException, httpprocessexception {
4. String url = "Https://sso.tgb.com:8443/cas/login";
6. String BODY = Send (URL, null, "Utf-8");
8. SYSTEM.OUT.PRINTLN ("Transaction response result:");
10. System.out.println (body);
12. System.out.println ("-----------------------------------");
14. }

The discovery throws an exception, I know there are two scenarios (and perhaps I do not know), here is the first scenario, but also the use of a more numerous scenarios-bypassing certificate validation. Look directly at the code:

2. /**
4. * Bypass Authentication
6. *
8. * @return
10. * @throws nosuchalgorithmexception
12. * @throws keymanagementexception
14. */
16. Public static Sslcontext Createignoreverifyssl () throws NoSuchAlgorithmException, keymanagementexception {
18. Sslcontext sc = sslcontext.getinstance ("SSLv3");
22. //Implement a X509trustmanager interface for bypassing validation without modifying the method inside
24. X509trustmanager TrustManager = new X509trustmanager () {
26. @Override
28. public void checkclienttrusted (
30. Java.security.cert.x509certificate[] Paramarrayofx509certificate,
32. String paramstring) throws certificateexception {
34. }
38. @Override
40. public void checkservertrusted (
42. Java.security.cert.x509certificate[] Paramarrayofx509certificate,
44. String paramstring) throws certificateexception {
46. }
50. @Override
52. Public java.security.cert.x509certificate[] Getacceptedissuers () {
54. return null;
56. }
58. };
62. Sc.init (null, new trustmanager[] {TrustManager}, null);
64. return SC;
66. }

Then modify the original Send method:

2. /**
4. * Mock Request
6. *
8. * @param URL Resource Address
10. * @param map parameter list
12. * @param encoding Code
14. * @return
16. * @throws nosuchalgorithmexception
18. * @throws keymanagementexception
20. * @throws IOException
22. * @throws clientprotocolexception
24. */
26. Public static string send (string URL, map<string,string> map,string encoding) throws Keymanagementexception, NoSuchAlgorithmException, Clientprotocolexception, IOException {
28. String BODY = "";
30. //handling HTTPS requests in a way that bypasses authentication
32. Sslcontext Sslcontext = Createignoreverifyssl ();
36. //Set protocol HTTP and HTTPS for the processing of socket-Link factory objects
38. registry<connectionsocketfactory> socketfactoryregistry = registrybuilder.<connectionsocketfactory> Create ()
40. . Register ("http", Plainconnectionsocketfactory.instance)
42. . Register ("https", new Sslconnectionsocketfactory (sslcontext))
44. . build ();
46. Poolinghttpclientconnectionmanager Connmanager = new Poolinghttpclientconnectionmanager (SocketFactoryRegistry)  ;
48. Httpclients.custom (). Setconnectionmanager (Connmanager);
52. //Create a custom HttpClient object
54. Closeablehttpclient client = Httpclients.custom (). Setconnectionmanager (Connmanager). build ();
56. /closeablehttpclient client = Httpclients.createdefault ();
60. //Create Post method Request Object
62. HttpPost HttpPost = new HttpPost (URL);
66. //Reload Parameters
68. list<namevaluepair> Nvps = new arraylist<namevaluepair> ();
70. if (map!=null) {
72. for (entry<string, string> entry:map.entrySet ()) {
74. Nvps.add (New Basicnamevaluepair (Entry.getkey (), Entry.getvalue ()));
76. }
78. }
80. //Set parameters to the request object
82. Httppost.setentity (new Urlencodedformentity (Nvps, encoding));
86. System.out.println ("Request address:" +url);
88. System.out.println ("request parameter:" +nvps.tostring ());
92. //Set Header information
94. //Specify message Header "Content-type", "User-agent"
96. Httppost.setheader ("Content-type", "application/x-www-form-urlencoded");
98. Httppost.setheader ("user-agent", "mozilla/4.0" (compatible; MSIE 5.0; Windows NT;  Digext) ");
102. //Perform request operation and get results (synchronous blocking)
104. Closeablehttpresponse response = Client.execute (HttpPost);
106. //Get result entity
108. httpentity entity = response.getentity ();
110. if (Entity! = null) {
112. //Convert result entity to string type by specified encoding
114. BODY = entityutils.tostring (entity, encoding);
116. }
118. Entityutils.consume (entity);
120. //Release link
122. Response.close ();
124. return body;
126. }

Now we have to test it and find out.

The next article describes another scenario, and you should look forward to your own generated certificate.

Transfer from http://blog.csdn.net/xiaoxian8023

Easy to play with HttpClient configuration SSL, using bypass certificate authentication to implement HTTPS