HttpClient設置忽略SSL，實現HTTPS訪問, 解決Certificates does not conform to algorithm constraints

話很少說，直接上代碼。

測試API:   https://api.k780.com/?app=life.time&appkey=10003&sign=b59bc3ef6191eb9f747dd4e83c99f2a4&format=json

 

代碼：

 1 import org.apache.http.HttpStatus;
 2 import org.apache.http.client.methods.CloseableHttpResponse;
 3 import org.apache.http.client.methods.HttpGet;
 4 import org.apache.http.conn.ssl.NoopHostnameVerifier;
 5 import org.apache.http.conn.ssl.SSLConnectionSocketFactory;
 6 import org.apache.http.conn.ssl.TrustStrategy;
 7 import org.apache.http.impl.client.CloseableHttpClient;
 8 import org.apache.http.impl.client.HttpClients;
 9 import org.apache.http.ssl.SSLContextBuilder;
10 import org.apache.http.util.EntityUtils;
11 import org.slf4j.Logger;
12 import org.slf4j.LoggerFactory;
13 
14 import javax.net.ssl.SSLContext;
15 import java.io.IOException;
16 import java.security.cert.CertificateException;
17 import java.security.cert.X509Certificate;
18 
19 public class TestHttps {
20 
21     private static Logger logger = LoggerFactory.getLogger(TestHttps.class);
22 
23     public static void main(String[] args) {
24         CloseableHttpResponse response = null;
25         CloseableHttpClient httpClient = null;
26         try {
27             String url = "https://api.k780.com/?app=life.time&appkey=10003&sign=b59bc3ef6191eb9f747dd4e83c99f2a4&format=json";
28             httpClient = createIgnoreSSLHttpClient();
29             if (httpClient == null) {
30                 logger.error("HttpClient create fail.");
31                 return;
32             }
33             HttpGet httpGet = new HttpGet(url);
34             response = httpClient.execute(httpGet);
35             int statusCode = response.getStatusLine().getStatusCode();
36             if (statusCode != HttpStatus.SC_OK) {
37                 System.out.println("NO_OK : " + null);
38             } else {
39                 String result = EntityUtils.toString(response.getEntity(), "UTF-8");
40                 System.out.println("OK : " + result);
41             }
42         } catch (Exception e) {
43             e.printStackTrace();
44         } finally {
45             if (response != null) {
46                 try {
47                     response.close();
48                 } catch (IOException e) {
49                     e.printStackTrace();
50                 }
51             }
52             if (httpClient != null) {
53                 try {
54                     httpClient.close();
55                 } catch (IOException e) {
56                     e.printStackTrace();
57                 }
58             }
59         }
60     }
61 
62     public static CloseableHttpClient createIgnoreSSLHttpClient() {
63         try {
64             SSLContext sslContext = new SSLContextBuilder().loadTrustMaterial(null, new TrustStrategy() {
65                 public boolean isTrusted(X509Certificate[] chain,
66                                          String authType) throws CertificateException {
67                     return true;
68                 }
69             }).build();
70             SSLConnectionSocketFactory sslConnectionSocketFactory = new SSLConnectionSocketFactory(sslContext, NoopHostnameVerifier.INSTANCE);
71             return HttpClients.custom().setSSLSocketFactory(sslConnectionSocketFactory).build();
72         } catch (Exception e) {
73             e.printStackTrace();
74         }
75         return null;
76     }
77 }

執行結果爲： 

OK : {"success":"1","result":{"timestamp":"1572330118","datetime_1":"2019-10-29 14:21:58","datetime_2":"2019年10月29日 14時21分58秒","week_1":"2","week_2":"星期二","week_3":"週二","week_4":"Tuesday"} 

 

測試使用jdk1.8

可能遇到的問題（報錯）：

1.  javax.net.ssl.SSLHandshakeException: Received fatal alert: handshake_failure

2.  javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: Certificates does not conform to algorithm constraints

解決辦法：

找到jdk所在目錄，例如個人目錄爲： D:\Java\jdk1.8.0_131

找到java.security文件.  目錄： D:\Java\jdk1.8.0_131\jre\lib\security\java.security

編輯該文件，將  下面幾行用# 註釋，後關閉IDE，後從新打開，build後再次執行便可解決。

jdk.certpath.disabledAlgorithms=MD2, MD5, RSA keySize < 1024, \
   DSA keySize < 1024, EC keySize < 224


jdk.tls.disabledAlgorithms=SSLv3, RC4, MD5withRSA, DH keySize < 768, \
    EC keySize < 224