從javadoc中我們可以看到j(luò)avax.net.ssl.HttpsURLConnection提供了一個靜態(tài)方法來用setDefaultSSLSocketFory（）方法覆蓋。 這樣，您就可以提供一個自定義javax.net.ssl.TrustManager，它可以驗證您自己的CA證書握手和驗證等。但是，這將覆蓋JVM中所有“ https” URL的默認(rèn)值！

那么，如何僅覆蓋一個https URL？ 再次查看javax.net.ssl.HttpsURLConnection，我們看到了setSSLSocketFactory（）的實例方法，但是我們無法直接實例化HttpsURLConnection對象！ 我花了一些時間才意識到j(luò)ava.net.URL實際上是其實現(xiàn)的工廠類！ 可以使用新的URL（“ https：// localhost”）.openConnection（）獲得這樣的實例。

為了完成本文，我將提供一個簡單的工作示例來演示這一點。

package zemian;import java.io.BufferedReader; import java.io.InputStream; import java.io.InputStreamReader; import java.net.URL; import java.net.URLConnection; import java.security.SecureRandom; import java.security.cert.X509Certificate;import javax.net.ssl.HttpsURLConnection; import javax.net.ssl.SSLContext; import javax.net.ssl.SSLSocketFactory; import javax.net.ssl.TrustManager; import javax.net.ssl.X509TrustManager;public class WGetText {public static void main(String[] args) throws Exception {String urlString = System.getProperty("url", "https://google.com");URL url = new URL(urlString);URLConnection urlConnection = url.openConnection();HttpsURLConnection httpsUrlConnection = (HttpsURLConnection) urlConnection;SSLSocketFactory sslSocketFactory = createSslSocketFactory();httpsUrlConnection.setSSLSocketFactory(sslSocketFactory);try (InputStream inputStream = httpsUrlConnection.getInputStream()) {BufferedReader reader = new BufferedReader(new InputStreamReader(inputStream));String line = null;while ((line = reader.readLine()) != null) {System.out.println(line);}}}private static SSLSocketFactory createSslSocketFactory() throws Exception {TrustManager[] byPassTrustManagers = new TrustManager[] { new X509TrustManager() {public X509Certificate[] getAcceptedIssuers() {return new X509Certificate[0];}public void checkClientTrusted(X509Certificate[] chain, String authType) {}public void checkServerTrusted(X509Certificate[] chain, String authType) {}} };SSLContext sslContext = SSLContext.getInstance("TLS");sslContext.init(null, byPassTrustManagers, new SecureRandom());return sslContext.getSocketFactory();} }

翻譯自: https://www.javacodegeeks.com/2014/11/how-to-setup-custom-sslsocketfactorys-trustmanager-per-each-url-connection.html

創(chuàng)作挑戰(zhàn)賽新人創(chuàng)作獎勵來咯，堅持創(chuàng)作打卡瓜分現(xiàn)金大獎

總結(jié)

以上是生活随笔為你收集整理的如何为每个URL连接设置自定义SSLSocketFactory的TrustManager的全部內(nèi)容，希望文章能夠幫你解決所遇到的問題。

如果覺得生活随笔網(wǎng)站內(nèi)容還不錯，歡迎將生活随笔推薦給好友。