java实现 HTTP/HTTPS请求绕过证书检测

一、Java实现免证书访问Https请求

创建证书管理器类

import java.security.cert.CertificateException;

import java.security.cert.X509Certificate;

import javax.net.ssl.X509TrustManager;

/**

 * 证书信任管理器（用于https请求）

 *

 */

public class MyX509TrustManager implements X509TrustManager {

	public void checkClientTrusted(X509Certificate[] chain, String authType) throws CertificateException {

	}

	public void checkServerTrusted(X509Certificate[] chain, String authType) throws CertificateException {

	}

	public X509Certificate[] getAcceptedIssuers() {

		return null;

	}

}

服务器主机名校验类

import javax.net.ssl.HostnameVerifier;

import javax.net.ssl.SSLSession;

public class NullHostNameVerifier implements HostnameVerifier{

    @Override

    public boolean verify(String hostname, SSLSession session) {

        return true;

    }

}

调用测试

import java.io.BufferedReader;

import java.io.InputStreamReader;

import java.io.OutputStreamWriter;

import java.io.PrintWriter;

import java.net.URL;

import javax.net.ssl.HttpsURLConnection;

import javax.net.ssl.SSLContext;

import javax.net.ssl.SSLSocketFactory;

import javax.net.ssl.TrustManager;

import cn.com.goevent.weixin.util.MyX509TrustManager;

public class HttpsTest {

	public static void main(String[] args) throws Exception {

	    //设置可通过ip地址访问https请求

	    HttpsURLConnection.setDefaultHostnameVerifier(new NullHostNameVerifier());

	    TrustManager[] tm = {new MyX509TrustManager()};

	    SSLContext sslContext = SSLContext.getInstance("TLS");

	    sslContext.init(null, tm, new java.security.SecureRandom());

	    // 从上述SSLContext对象中得到SSLSocketFactory对象

	    SSLSocketFactory ssf = sslContext.getSocketFactory();

    	    String urlStr = "https://192.168.1.10/login_queryLkBySfmc.htm";

    	    URL url = new URL(urlStr);

	    HttpsURLConnection con = (HttpsURLConnection) url.openConnection();

	    con.setSSLSocketFactory(ssf);

    	    con.setRequestMethod("POST"); // 设置以POST方式提交数据

    	    con.setDoInput(true); // 打开输入流，以便从服务器获取数据

    	    con.setDoOutput(true);// 打开输出流，以便向服务器提交数据

	    //设置发送参数

            String param = "sfmc=测试";

            PrintWriter out = new PrintWriter(new OutputStreamWriter(con.getOutputStream(),"UTF-8"));

            out.print(param);

            out.flush();

            out.close();

            //读取请求返回值

	    InputStreamReader in = new InputStreamReader(con.getInputStream(),"UTF-8");

	    BufferedReader bfreader = new BufferedReader(in);

	    String result = "";

	    String line = "";

	    while ((line = bfreader.readLine()) != null) {

	    	result += line;

	    }

	    System.out.println("result:"+result);

	}

}

二、java实现 HTTP/HTTPS请求绕过证书检测代码实现

使用Apache的HttpClient发送GET和POST请求

1.使用帮助类HttpClients创建CloseableHttpClient对象.

2.基于要发送的HTTP请求类型创建HttpGet或者HttpPost实例.

3.使用addHeader方法添加请求头部,诸如User-Agent, Accept-Encoding等参数.

4.对于POST请求,创建NameValuePair列表,并添加所有的表单参数.然后把它填充进HttpPost实体.

5.通过执行此HttpGet或者HttpPost请求获取CloseableHttpResponse实例

6.从此CloseableHttpResponse实例中获取状态码,错误信息,以及响应页面等等.

7.最后关闭HttpClient资源.

POST请求封装的工具类



import java.io.BufferedOutputStream;

import java.io.BufferedReader;

import java.io.IOException;

import java.io.InputStream;

import java.io.InputStreamReader;

import java.lang.reflect.Method;

import java.net.URLDecoder;

import java.net.URLEncoder;

import java.security.KeyManagementException;

import java.security.KeyStoreException;

import java.security.NoSuchAlgorithmException;

import java.security.cert.CertificateException;

import java.security.cert.X509Certificate;

import java.util.ArrayList;

import java.util.HashMap;

import java.util.List;

import java.util.Map;

import java.util.Map.Entry;

import com.sun.corba.se.impl.orbutil.threadpool.TimeoutException;

import org.apache.commons.httpclient.util.TimeoutController;

import org.apache.http.NameValuePair;

import org.apache.http.client.config.RequestConfig;

import org.apache.http.client.entity.UrlEncodedFormEntity;

import org.apache.http.client.methods.CloseableHttpResponse;

import org.apache.http.client.methods.HttpPost;

import org.apache.http.conn.ssl.SSLConnectionSocketFactory;

import org.apache.http.entity.StringEntity;

import org.apache.http.impl.client.CloseableHttpClient;

import org.apache.http.impl.client.HttpClients;

import org.apache.http.message.BasicNameValuePair;

import org.apache.http.util.EntityUtils;

import org.apache.log4j.Logger;

import cn.qtone.hjy.service.bean.yd.sync.AccountPasswordInfoSyncItem;

import cn.qtone.hjy.service.bean.yd.sync.OrderInfoSyncItem;

import cn.qtone.hjy.service.bean.yd.sync.YdOrderRelationshipInfoSyncItem;

import cn.qtone.hjy.service.core.DES;

import cn.qtone.hjy.service.dao.YdEduDao;

import cn.qtone.util.SpringUtil;

import com.alibaba.fastjson.JSONObject;

import javax.net.ssl.SSLContext;

import javax.net.ssl.TrustManager;

import javax.net.ssl.X509TrustManager;

public class HttpClientUtil {

    static Logger log = Logger.getLogger(HttpClientUtil.class) ;

    private static  RequestConfig requestConfig = RequestConfig.custom().setSocketTimeout(10000).setConnectTimeout(10000).build();//设置请求和传输超时时间

    private static CloseableHttpClient httpclient = HttpClients.createDefault();

    public static String send(String httpUrl, String message) throws IOException {

        String result = null ;

        HttpPost httpPost = new HttpPost(httpUrl);

        //设置数据读取超时5s   传输超时5s    链接请求超时5s

        RequestConfig requestConfig = RequestConfig.custom()

                    .setSocketTimeout(5000)

                    .setConnectTimeout(5000)

                    .setConnectionRequestTimeout(5000)

                    .build();

        httpPost.setConfig(requestConfig) ;

        message = URLEncoder.encode(message, "UTF-8") ;

        StringEntity entity = new StringEntity(message);

        httpPost.setEntity(entity);

        CloseableHttpResponse response = httpclient.execute(httpPost);

        BufferedReader in = null ;

        try {

            InputStream content = response.getEntity().getContent() ;

            in = new BufferedReader(new InputStreamReader(content));

            StringBuilder sb = new StringBuilder();

            String line = "" ;

            while ((line = in.readLine()) != null) {

                sb.append(line);

            }

            result = sb.toString() ;

            System.out.println("接收原始报文：" + URLDecoder.decode(result, "UTF-8")) ;

        } finally {

            EntityUtils.consume(response.getEntity());

            response.close();

        }

        return result ;

    }

    public static String post(String httpUrl, String message) throws Exception {

        String result = null ;

        CloseableHttpClient httpclient = HttpClients.createDefault();

        BufferedReader in = null ;

        HttpPost httpPost = new HttpPost(httpUrl);

        httpPost.setConfig(requestConfig);

        List <NameValuePair> nvps = new ArrayList <NameValuePair>();

        nvps.add(new BasicNameValuePair("tokenId", DES.encrypt(message)));

        httpPost.setEntity(new UrlEncodedFormEntity(nvps));

        try {

            System.out.println("发送报文：" + message);

            System.out.println("发送报文：" + DES.encrypt(message)) ;

            CloseableHttpResponse response = httpclient.execute(httpPost);

            InputStream content = response.getEntity().getContent() ;

            in = new BufferedReader(new InputStreamReader(content, "UTF-8"));

            StringBuilder sb = new StringBuilder();

            String line = "" ;

            while ((line = in.readLine()) != null) {

                sb.append(line);

            }

            System.out.println("响应报文：" + sb.toString()) ;

            //result = URLDecoder.decode(sb.toString(), "UTF-8") ;

            //result = DES.decrypt(result) ;

            //System.out.println("完成：" + JSONObject.parseObject(result) + "\n");

            return result ;

        } catch (Exception e) {

            e.printStackTrace() ;

        } finally {

            httpclient.close();

        }

        return null ;

    }

    /**

     * 发起post请求，请求参数以Map集合形式传入，封装到List <NameValuePair> 发起post请求

     * @param httpUrl

     * @param params

     * @return

     * @throws Exception

     */

    public static String post(String httpUrl, Map<String, String> params) throws Exception {

        String result = null ;

        CloseableHttpClient httpclient = createSSLClientDefault();

        //httpclient.

        //httpclient.

        BufferedReader in = null ;

        HttpPost httpPost = new HttpPost(httpUrl);

        httpPost.setConfig(requestConfig);

        List <NameValuePair> nvps = new ArrayList <NameValuePair>();

        StringBuffer paramsBuf = new StringBuffer() ;

        for(Entry<String, String> e : params.entrySet()) {

            nvps.add(new BasicNameValuePair(e.getKey(), e.getValue()));

            paramsBuf.append("&").append(e.getKey()).append("=").append(e.getValue()) ;

        }

        httpPost.setEntity(new UrlEncodedFormEntity(nvps, "UTF-8"));

        try {

//          报文参数27：&id=jn-3-767744&groupPlatProTerminalId=119667&extend=uwJZ8j3CkpGPL4rM5J6KJhjR99O7yAe3BAGLS8ooI8ijNqKHfzTaK6W9wQvjZEVOmWJ3HxFb2O9D

//          wDbe3++UiQ==&xxtCode=370000&terminalType=1&role=3&type=3

            System.out.println("post请求报文地址：" + httpUrl+"?"+paramsBuf.toString()) ;

            CloseableHttpResponse response = httpclient.execute(httpPost);

            InputStream content = response.getEntity().getContent() ;

            in = new BufferedReader(new InputStreamReader(content, "UTF-8"));

//          in = new BufferedReader(new InputStreamReader(content, "GBK"));

//          in = new BufferedReader(new InputStreamReader(content));

            StringBuilder sb = new StringBuilder();

            String line = "" ;

            while ((line = in.readLine()) != null) {

                sb.append(line);

            }

            result = sb.toString() ;

            System.out.println("响应报文：" + result) ;

            //  响应报文：{"ret":0,"msg":"成功","callbackurl":"https://edu.10086.cn/test-sso/login?service=http%3A%2F%2F112.35.7.169%3A9010%2Feducloud%2Flogin%2Flogin%3Ftype%3D3%26mode%3D1%26groupId%3D4000573%26provincePlatformId%3D54","accesstoken":"2467946a-bee9-4d8c-8cce-d30181073b75"}Í

            //记录报文日志

            YdEduDao dao = SpringUtil.getBean(YdEduDao.class);

            dao.saveCallLog(httpUrl, paramsBuf.toString(), result);    // HJY_SERVICE_LOG

            return result ;

        } catch (Exception e) {

            e.printStackTrace() ;

        } finally {

            httpclient.close();

        }

        return null ;

    }

    public static JSONObject postData(String httpUrl, Object obj) throws Exception {

        JSONObject json = null;

        try{

        String result = post(httpUrl,obj);

             json = JSONObject.parseObject(result);

        }catch(TimeoutException e){

            System.out.println("请求超时了："+httpUrl);

            throw e;

        }finally {

            return json ;

        }

    }

    public static String post(String httpUrl, Object obj) throws Exception {

        Map<String, String>  params = getParamData(obj);

        String result = null ;

        try {

            result = post(httpUrl,params);

            return result ;

        } catch (Exception e) {

            e.printStackTrace() ;

        } finally {

            httpclient.close();

        }

        return null ;

    }

    private static Map<String, String>  getParamData(Object obj) {

        Class cla = obj.getClass();

        Map<String, String> map = new HashMap<String, String>();

        Method[] methods = cla.getDeclaredMethods();

        try {

            for (Method m : methods) {

                String mname = m.getName();

                if (mname.startsWith("get")) {

                    String name = mname.substring(3, mname.length());// 截取字段

                    name = name.substring(0, 1).toLowerCase()

                            + name.substring(1, name.length());// 把首字母变小写

                    String value = m.invoke(obj)==null?"":m.invoke(obj).toString();

                    if(cla.equals(YdOrderRelationshipInfoSyncItem.class)&&name.equals("unionId")&&(value==null||value.equals(""))){

                        continue;

                    }

                    map.put(name,value);// 取值

                }

            }

            Class superclass = cla.getSuperclass();

            while (!superclass.equals(Object.class)) {

                Method[] superclassmethods = superclass.getDeclaredMethods();

                for (Method m : superclassmethods) {

                    String mname = m.getName();

                    if (mname.startsWith("get")) {

                        String name = mname.substring(3, mname.length());// 截取字段

                        name = name.substring(0, 1).toLowerCase()

                                + name.substring(1, name.length());// 把首字母变小写

                        String value = m.invoke(obj)==null?"":m.invoke(obj).toString();

                        if((cla.equals(OrderInfoSyncItem.class)||cla.equals(AccountPasswordInfoSyncItem.class)||cla.equals(YdOrderRelationshipInfoSyncItem.class))&&name.equals("operation"))

                            continue;

                        map.put(name,value);// 取值

                    }

                }

                superclass = superclass.getSuperclass();

            }

        } catch (Exception e) {

            e.printStackTrace();

        }

        return map;

    }


public static CloseableHttpClient createSSLClientDefault(){

        try {

            //SSLContext sslContext = new SSLContextBuilder().loadTrustMaterial(null, new TrustStrategy() {

            // 在JSSE中，证书信任管理器类就是实现了接口X509TrustManager的类。我们可以自己实现该接口，让它信任我们指定的证书。

            // 创建SSLContext对象，并使用我们指定的信任管理器初始化

            //信任所有

                X509TrustManager x509mgr = new X509TrustManager() {

                    //　　该方法检查客户端的证书，若不信任该证书则抛出异常

                    public void checkClientTrusted(X509Certificate[] xcs, String string) {

                    }

                    // 　　该方法检查服务端的证书，若不信任该证书则抛出异常

                    public void checkServerTrusted(X509Certificate[] xcs, String string) {

                    }

                    // 　返回受信任的X509证书数组。

                    public X509Certificate[] getAcceptedIssuers() {

                        return null;

                    }

                };

                SSLContext sslContext = SSLContext.getInstance("TLS");

                sslContext.init(null, new TrustManager[] { x509mgr }, null);

                ////创建HttpsURLConnection对象，并设置其SSLSocketFactory对象

                SSLConnectionSocketFactory sslsf = new SSLConnectionSocketFactory(sslContext, SSLConnectionSocketFactory.ALLOW_ALL_HOSTNAME_VERIFIER);

            //  HttpsURLConnection对象就可以正常连接HTTPS了，无论其证书是否经权威机构的验证，只要实现了接口X509TrustManager的类MyX509TrustManager信任该证书。

            return HttpClients.custom().setSSLSocketFactory(sslsf).build();

        } catch (KeyManagementException e) {

            e.printStackTrace();

        } catch (NoSuchAlgorithmException e) {

            e.printStackTrace();

        } catch (Exception e) {

            e.printStackTrace();

        }

        // 创建默认的httpClient实例.

        return  HttpClients.createDefault();

    }

}

另外，在针对http进行升级时，在HTTPS的证书未经权威机构认证的情况下，访问HTTPS站点的两种方法，一种方法是把该证书导入到Java的TrustStore文件中，另一种是自己实现并覆盖JSSE缺省的证书信任管理器类。两种方法各有优缺点，第一种方法不会影响JSSE的安全性，但需要手工导入证书；第二种方法虽然不用手工导入证书，但需要小心使用，否则会带来一些安全隐患。

参考博客：

[1]Java实现免证书访问Https请求

[2]java实现 HTTP/HTTPS请求绕过证书检测代码实现

Java实现 HTTP/HTTPS请求绕过证书检测的更多相关文章

  1. java实现 HTTP/HTTPS请求绕过证书检测代码实现

    java实现 HTTP/HTTPS请求绕过证书检测代码实现 1.开发需求 需要实现在服务端发起HTTP/HTTPS请求,访问其他程序资源. 2.URLConnection和HTTPClient的比较 ...

  2. 简述Java中Http/Https请求监听方法

    一.工欲善其事必先利其器 做Web开发的人总免不了与Http/Https请求打交道,很多时候我们都希望能够直观的的看到我们发送的请求参数和服务器返回的响应信息,这个时候就需要借助于某些工具啦.本文将采 ...

  3. java实现的https请求

    转载并修改自 http://www.blogjava.net/etlan/archive/2006/06/29/55767.html Https请求 超文本传输协议HTTP协议:被用于在Web浏览器和 ...

  4. java如何发起https请求

    1.写一个SSLClient类,继承至HttpClient import java.security.cert.CertificateException; import java.security.c ...

  5. java的https请求解决证书问题

    package sqr.srchSpider.utils; import java.security.SecureRandom; import java.security.cert.Certifica ...

  6. 【问题记录】Java服务发起HTTPS请求报错：PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException

    问题报错 今天上线了我开发的一个OAuth2单点登录客户端的实现,在测试系统验证没问题,到生产环境由于单点登录服务端HTTPS协议,报错如下: I/O error on POST request fo ...

  7. HTTPS请求 SSL证书验证

    import urllib2 url = "https://www.12306.cn/mormhweb/" headers = {"User-Agent": & ...

  8. UrlConnection doPost Https请求 、编码设置

    UrlConnection doPost Https请求 .编码设置 UrlConnection doPost方法 /** * 发送POST请求 * * @param url 请求地址url * @p ...

  9. Java爬虫--Https绕过证书

    https网站服务器都是有证书的. 是由网站自己的服务器签发的,并不被浏览器或操作系统广泛接受. 在使用CloseableHttpClient时经常遇到证书错误(知乎的网站就是这样) 现在需要SSL绕 ...

随机推荐

  1. 第39篇-Java通过JNI调用C/C++函数

    在某些情况下,Java语言需要通过调用C/C++函数来实现某些功能,因为Java有时候对这些功能显的无能为力,如想使用X86_64 的 SIMD 指令提升一下业务方法中关键代码的性能,又或者想要获取某 ...

  2. idea创建maven项目时一直在 Process Running

    解决方案: 1.设置maven的配置 File--->Settings(Ctrl+Alt+S)--->Build--->Build Tools--->Maven--->R ...

  3. 【从头到脚品读 Linux 0.11 源码】第一回 最开始的两行代码

    从这一篇开始,您就将跟着我一起进入这操作系统的梦幻之旅! 别担心,每一章的内容会非常的少,而且你也不要抱着很大的负担去学习,只需要像读小说一样,跟着我一章一章读下去就好. 话不多说,直奔主题.当你按下 ...

  4. 96-00年CPU功耗感知调度研究

    最近读了一些1996-2000年的通过调度来降低cpu能耗的文章,主要文章有[1] [2] [3] [4] [5], 简单总结一些该时期单核CPU功耗感知的调度策略. 该时期还出现了很多关于低功耗电路 ...

  5. C语言通过指针数组和二维数组读取文件

    1 # include <stdio.h> 2 # include <stdlib.h> 3 # include <time.h> 4 # include < ...

  6. puts()_C语言

    puts()函数用来向标准输出设备, scanf函数是格式输入函数,即按用户指定的格式从键盘上把数据输入到指定的变量之中. puts就是输出字符串啊.int puts(    const char* ...

  7. Electron快速入门之事件

    const { app, BrowserWindow } = require('electron') function createWindow () {   const win = new Brow ...

  8. C#中的异步

    什么是异步? 作为一名Web端的码农,第一次接触异步是Ajax. 异步请求后端获取数据源,js操作html的dom节点,而无需要渲染整个网页的操作. 页面上点击按钮,加载进度动画,同时发起Ajax请求 ...

  9. No 'Access-Control-Allow-Origin' header: 跨域问题踩坑记录

    前言 前两周在服务器上部署一个系统时,遇到了跨域问题,这也不是第一次遇到跨域问题了,本来以为解决起来会很顺利,没想到解决过程中遇到了很多坑,所以觉得有必要写一篇博客记录一下这个坑. 问题产生原因 本来 ...

  10. vite的项目，使用 rollup 打包的方法

    官网资料 构建生产版本--库模式 https://cn.vitejs.dev/guide/build.html#library-mode 详细设置 https://cn.vitejs.dev/conf ...