1.使用HttpClient4.3 调用https出现如下错误：
javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
当使用网上其他的方式的时候，出现错误：javax.net.ssl.SSLException: hostname in certificate didn't match: <openapi.ysepay.com> != <default.ssl.cdn.jiasule.com>
原因：这是SSL证书请求问题。
2.原来的代码：
1 /**
2 * 拼接请求参数，发起请求
3 * @param request
4 * @param sParaTemp
5 * @param strMethod
6 * @param strButtonName
7 * @return
8 */
9 public static String sendRequest(String mch_id,HttpServletRequest request, Map<String, String> paraTemp) {
10 String result = null;// 返回的结果
11 CloseableHttpResponse response = null;
12 CloseableHttpClient client = null;
13
14 HttpPost httpPost = new HttpPost(SwiftpassConfig.yinsheng_YSEPAY_GATEWAY_URL); //创建HttpPost对象
15 // 存参列表
16 List <NameValuePair> params = new ArrayList<NameValuePair>();
17 // 参数不为空
18 if(!paraTemp.isEmpty()) {
19 // 遍历map，保存到List中
20 for (Map.Entry<String, String> entry : paraTemp.entrySet()) {
21 params.add(new BasicNameValuePair(entry.getKey(), entry.getValue()));
22 }
23 try {
24 httpPost.setEntity(new UrlEncodedFormEntity(params ,HTTP.UTF_8));
25 // 创建 CloseableHttpClient 对象
26 client = HttpClients.createDefault();
27 response = client.execute(httpPost);
28 if(response.getStatusLine().getStatusCode() == 200) {
29 HttpEntity httpEntity = response.getEntity();
30 //取出应答字符串
31 result = EntityUtils.toString(httpEntity);
32 }
33 } catch (Exception e) {
34 e.printStackTrace();
35 result = e.getMessage().toString();
36 }
37 }
38 return result;
39 }
使用上诉代码调用https接口，出现上述的错误。
3.修改之后的代码：
/**
* buildSSLCloseableHttpClient:(设置允许所有主机名称都可以，忽略主机名称验证)
* @author xbq
* @return
* @throws Exception
*/
private static CloseableHttpClient buildSSLCloseableHttpClient() throws Exception {
SSLContext sslContext = new SSLContextBuilder().loadTrustMaterial(null, new TrustStrategy() {
// 信任所有
public boolean isTrusted(X509Certificate[] chain, String authType) throws CertificateException {
return true;
}
}).build();
// ALLOW_ALL_HOSTNAME_VERIFIER:这个主机名验证器基本上是关闭主机名验证的,实现的是一个空操作，并且不会抛出javax.net.ssl.SSLException异常。
SSLConnectionSocketFactory sslsf = new SSLConnectionSocketFactory(sslContext, new String[] { "TLSv1" }, null,
SSLConnectionSocketFactory.ALLOW_ALL_HOSTNAME_VERIFIER);
return HttpClients.custom().setSSLSocketFactory(sslsf).build();
}
/**
* 拼接请求参数，发起请求
* @param request
* @param sParaTemp
* @param strMethod
* @param strButtonName
* @return
*/
public static String sendRequest(String mch_id,HttpServletRequest request, Map<String, String> paraTemp) {
String result = null;// 返回的结果
CloseableHttpResponse response = null;
CloseableHttpClient client = null;
HttpPost httpPost = new HttpPost(SwiftpassConfig.yinsheng_YSEPAY_GATEWAY_URL); //创建HttpPost对象
// 存参列表
List <NameValuePair> params = new ArrayList<NameValuePair>();
// 参数不为空
if(!paraTemp.isEmpty()) {
// 遍历map，保存到List中
for (Map.Entry<String, String> entry : paraTemp.entrySet()) {
params.add(new BasicNameValuePair(entry.getKey(), entry.getValue()));
}
try {
httpPost.setEntity(new UrlEncodedFormEntity(params ,HTTP.UTF_8));
// 调用方法，创建 CloseableHttpClient 对象
client = buildSSLCloseableHttpClient();
response = client.execute(httpPost);
if(response.getStatusLine().getStatusCode() == 200) {
HttpEntity httpEntity = response.getEntity();
//取出应答字符串
result = EntityUtils.toString(httpEntity);
}
} catch (Exception e) {
e.printStackTrace();
result = e.getMessage().toString();
}
}
return result;
}
