java实现 HTTP/HTTPS请求绕过证书检测

一、Java实现免证书访问Https请求

创建证书管理器类

import java.security.cert.CertificateException;

import java.security.cert.X509Certificate;

import javax.net.ssl.X509TrustManager;

/**

 * 证书信任管理器（用于https请求）

 *

 */

public class MyX509TrustManager implements X509TrustManager {

	public void checkClientTrusted(X509Certificate[] chain, String authType) throws CertificateException {

	}

	public void checkServerTrusted(X509Certificate[] chain, String authType) throws CertificateException {

	}

	public X509Certificate[] getAcceptedIssuers() {

		return null;

	}

}

服务器主机名校验类

import javax.net.ssl.HostnameVerifier;

import javax.net.ssl.SSLSession;

public class NullHostNameVerifier implements HostnameVerifier{

    @Override

    public boolean verify(String hostname, SSLSession session) {

        return true;

    }

}

调用测试

import java.io.BufferedReader;

import java.io.InputStreamReader;

import java.io.OutputStreamWriter;

import java.io.PrintWriter;

import java.net.URL;

import javax.net.ssl.HttpsURLConnection;

import javax.net.ssl.SSLContext;

import javax.net.ssl.SSLSocketFactory;

import javax.net.ssl.TrustManager;

import cn.com.goevent.weixin.util.MyX509TrustManager;

public class HttpsTest {

	public static void main(String[] args) throws Exception {

	    //设置可通过ip地址访问https请求

	    HttpsURLConnection.setDefaultHostnameVerifier(new NullHostNameVerifier());

	    TrustManager[] tm = {new MyX509TrustManager()};

	    SSLContext sslContext = SSLContext.getInstance("TLS");

	    sslContext.init(null, tm, new java.security.SecureRandom());

	    // 从上述SSLContext对象中得到SSLSocketFactory对象

	    SSLSocketFactory ssf = sslContext.getSocketFactory();

    	    String urlStr = "https://192.168.1.10/login_queryLkBySfmc.htm";

    	    URL url = new URL(urlStr);

	    HttpsURLConnection con = (HttpsURLConnection) url.openConnection();

	    con.setSSLSocketFactory(ssf);

    	    con.setRequestMethod("POST"); // 设置以POST方式提交数据

    	    con.setDoInput(true); // 打开输入流，以便从服务器获取数据

    	    con.setDoOutput(true);// 打开输出流，以便向服务器提交数据

	    //设置发送参数

            String param = "sfmc=测试";

            PrintWriter out = new PrintWriter(new OutputStreamWriter(con.getOutputStream(),"UTF-8"));

            out.print(param);

            out.flush();

            out.close();

            //读取请求返回值

	    InputStreamReader in = new InputStreamReader(con.getInputStream(),"UTF-8");

	    BufferedReader bfreader = new BufferedReader(in);

	    String result = "";

	    String line = "";

	    while ((line = bfreader.readLine()) != null) {

	    	result += line;

	    }

	    System.out.println("result:"+result);

	}

}

二、java实现 HTTP/HTTPS请求绕过证书检测代码实现

使用Apache的HttpClient发送GET和POST请求

1.使用帮助类HttpClients创建CloseableHttpClient对象.

2.基于要发送的HTTP请求类型创建HttpGet或者HttpPost实例.

3.使用addHeader方法添加请求头部,诸如User-Agent, Accept-Encoding等参数.

4.对于POST请求,创建NameValuePair列表,并添加所有的表单参数.然后把它填充进HttpPost实体.

5.通过执行此HttpGet或者HttpPost请求获取CloseableHttpResponse实例

6.从此CloseableHttpResponse实例中获取状态码,错误信息,以及响应页面等等.

7.最后关闭HttpClient资源.

POST请求封装的工具类



import java.io.BufferedOutputStream;

import java.io.BufferedReader;

import java.io.IOException;

import java.io.InputStream;

import java.io.InputStreamReader;

import java.lang.reflect.Method;

import java.net.URLDecoder;

import java.net.URLEncoder;

import java.security.KeyManagementException;

import java.security.KeyStoreException;

import java.security.NoSuchAlgorithmException;

import java.security.cert.CertificateException;

import java.security.cert.X509Certificate;

import java.util.ArrayList;

import java.util.HashMap;

import java.util.List;

import java.util.Map;

import java.util.Map.Entry;

import com.sun.corba.se.impl.orbutil.threadpool.TimeoutException;

import org.apache.commons.httpclient.util.TimeoutController;

import org.apache.http.NameValuePair;

import org.apache.http.client.config.RequestConfig;

import org.apache.http.client.entity.UrlEncodedFormEntity;

import org.apache.http.client.methods.CloseableHttpResponse;

import org.apache.http.client.methods.HttpPost;

import org.apache.http.conn.ssl.SSLConnectionSocketFactory;

import org.apache.http.entity.StringEntity;

import org.apache.http.impl.client.CloseableHttpClient;

import org.apache.http.impl.client.HttpClients;

import org.apache.http.message.BasicNameValuePair;

import org.apache.http.util.EntityUtils;

import org.apache.log4j.Logger;

import cn.qtone.hjy.service.bean.yd.sync.AccountPasswordInfoSyncItem;

import cn.qtone.hjy.service.bean.yd.sync.OrderInfoSyncItem;

import cn.qtone.hjy.service.bean.yd.sync.YdOrderRelationshipInfoSyncItem;

import cn.qtone.hjy.service.core.DES;

import cn.qtone.hjy.service.dao.YdEduDao;

import cn.qtone.util.SpringUtil;

import com.alibaba.fastjson.JSONObject;

import javax.net.ssl.SSLContext;

import javax.net.ssl.TrustManager;

import javax.net.ssl.X509TrustManager;

public class HttpClientUtil {

    static Logger log = Logger.getLogger(HttpClientUtil.class) ;

    private static  RequestConfig requestConfig = RequestConfig.custom().setSocketTimeout(10000).setConnectTimeout(10000).build();//设置请求和传输超时时间

    private static CloseableHttpClient httpclient = HttpClients.createDefault();

    public static String send(String httpUrl, String message) throws IOException {

        String result = null ;

        HttpPost httpPost = new HttpPost(httpUrl);

        //设置数据读取超时5s   传输超时5s    链接请求超时5s

        RequestConfig requestConfig = RequestConfig.custom()

                    .setSocketTimeout(5000)

                    .setConnectTimeout(5000)

                    .setConnectionRequestTimeout(5000)

                    .build();

        httpPost.setConfig(requestConfig) ;

        message = URLEncoder.encode(message, "UTF-8") ;

        StringEntity entity = new StringEntity(message);

        httpPost.setEntity(entity);

        CloseableHttpResponse response = httpclient.execute(httpPost);

        BufferedReader in = null ;

        try {

            InputStream content = response.getEntity().getContent() ;

            in = new BufferedReader(new InputStreamReader(content));

            StringBuilder sb = new StringBuilder();

            String line = "" ;

            while ((line = in.readLine()) != null) {

                sb.append(line);

            }

            result = sb.toString() ;

            System.out.println("接收原始报文：" + URLDecoder.decode(result, "UTF-8")) ;

        } finally {

            EntityUtils.consume(response.getEntity());

            response.close();

        }

        return result ;

    }

    public static String post(String httpUrl, String message) throws Exception {

        String result = null ;

        CloseableHttpClient httpclient = HttpClients.createDefault();

        BufferedReader in = null ;

        HttpPost httpPost = new HttpPost(httpUrl);

        httpPost.setConfig(requestConfig);

        List <NameValuePair> nvps = new ArrayList <NameValuePair>();

        nvps.add(new BasicNameValuePair("tokenId", DES.encrypt(message)));

        httpPost.setEntity(new UrlEncodedFormEntity(nvps));

        try {

            System.out.println("发送报文：" + message);

            System.out.println("发送报文：" + DES.encrypt(message)) ;

            CloseableHttpResponse response = httpclient.execute(httpPost);

            InputStream content = response.getEntity().getContent() ;

            in = new BufferedReader(new InputStreamReader(content, "UTF-8"));

            StringBuilder sb = new StringBuilder();

            String line = "" ;

            while ((line = in.readLine()) != null) {

                sb.append(line);

            }

            System.out.println("响应报文：" + sb.toString()) ;

            //result = URLDecoder.decode(sb.toString(), "UTF-8") ;

            //result = DES.decrypt(result) ;

            //System.out.println("完成：" + JSONObject.parseObject(result) + "\n");

            return result ;

        } catch (Exception e) {

            e.printStackTrace() ;

        } finally {

            httpclient.close();

        }

        return null ;

    }

    /**

     * 发起post请求，请求参数以Map集合形式传入，封装到List <NameValuePair> 发起post请求

     * @param httpUrl

     * @param params

     * @return

     * @throws Exception

     */

    public static String post(String httpUrl, Map<String, String> params) throws Exception {

        String result = null ;

        CloseableHttpClient httpclient = createSSLClientDefault();

        //httpclient.

        //httpclient.

        BufferedReader in = null ;

        HttpPost httpPost = new HttpPost(httpUrl);

        httpPost.setConfig(requestConfig);

        List <NameValuePair> nvps = new ArrayList <NameValuePair>();

        StringBuffer paramsBuf = new StringBuffer() ;

        for(Entry<String, String> e : params.entrySet()) {

            nvps.add(new BasicNameValuePair(e.getKey(), e.getValue()));

            paramsBuf.append("&").append(e.getKey()).append("=").append(e.getValue()) ;

        }

        httpPost.setEntity(new UrlEncodedFormEntity(nvps, "UTF-8"));

        try {

//          报文参数27：&id=jn-3-767744&groupPlatProTerminalId=119667&extend=uwJZ8j3CkpGPL4rM5J6KJhjR99O7yAe3BAGLS8ooI8ijNqKHfzTaK6W9wQvjZEVOmWJ3HxFb2O9D

//          wDbe3++UiQ==&xxtCode=370000&terminalType=1&role=3&type=3

            System.out.println("post请求报文地址：" + httpUrl+"?"+paramsBuf.toString()) ;

            CloseableHttpResponse response = httpclient.execute(httpPost);

            InputStream content = response.getEntity().getContent() ;

            in = new BufferedReader(new InputStreamReader(content, "UTF-8"));

//          in = new BufferedReader(new InputStreamReader(content, "GBK"));

//          in = new BufferedReader(new InputStreamReader(content));

            StringBuilder sb = new StringBuilder();

            String line = "" ;

            while ((line = in.readLine()) != null) {

                sb.append(line);

            }

            result = sb.toString() ;

            System.out.println("响应报文：" + result) ;

            //  响应报文：{"ret":0,"msg":"成功","callbackurl":"https://edu.10086.cn/test-sso/login?service=http%3A%2F%2F112.35.7.169%3A9010%2Feducloud%2Flogin%2Flogin%3Ftype%3D3%26mode%3D1%26groupId%3D4000573%26provincePlatformId%3D54","accesstoken":"2467946a-bee9-4d8c-8cce-d30181073b75"}Í

            //记录报文日志

            YdEduDao dao = SpringUtil.getBean(YdEduDao.class);

            dao.saveCallLog(httpUrl, paramsBuf.toString(), result);    // HJY_SERVICE_LOG

            return result ;

        } catch (Exception e) {

            e.printStackTrace() ;

        } finally {

            httpclient.close();

        }

        return null ;

    }

    public static JSONObject postData(String httpUrl, Object obj) throws Exception {

        JSONObject json = null;

        try{

        String result = post(httpUrl,obj);

             json = JSONObject.parseObject(result);

        }catch(TimeoutException e){

            System.out.println("请求超时了："+httpUrl);

            throw e;

        }finally {

            return json ;

        }

    }

    public static String post(String httpUrl, Object obj) throws Exception {

        Map<String, String>  params = getParamData(obj);

        String result = null ;

        try {

            result = post(httpUrl,params);

            return result ;

        } catch (Exception e) {

            e.printStackTrace() ;

        } finally {

            httpclient.close();

        }

        return null ;

    }

    private static Map<String, String>  getParamData(Object obj) {

        Class cla = obj.getClass();

        Map<String, String> map = new HashMap<String, String>();

        Method[] methods = cla.getDeclaredMethods();

        try {

            for (Method m : methods) {

                String mname = m.getName();

                if (mname.startsWith("get")) {

                    String name = mname.substring(3, mname.length());// 截取字段

                    name = name.substring(0, 1).toLowerCase()

                            + name.substring(1, name.length());// 把首字母变小写

                    String value = m.invoke(obj)==null?"":m.invoke(obj).toString();

                    if(cla.equals(YdOrderRelationshipInfoSyncItem.class)&&name.equals("unionId")&&(value==null||value.equals(""))){

                        continue;

                    }

                    map.put(name,value);// 取值

                }

            }

            Class superclass = cla.getSuperclass();

            while (!superclass.equals(Object.class)) {

                Method[] superclassmethods = superclass.getDeclaredMethods();

                for (Method m : superclassmethods) {

                    String mname = m.getName();

                    if (mname.startsWith("get")) {

                        String name = mname.substring(3, mname.length());// 截取字段

                        name = name.substring(0, 1).toLowerCase()

                                + name.substring(1, name.length());// 把首字母变小写

                        String value = m.invoke(obj)==null?"":m.invoke(obj).toString();

                        if((cla.equals(OrderInfoSyncItem.class)||cla.equals(AccountPasswordInfoSyncItem.class)||cla.equals(YdOrderRelationshipInfoSyncItem.class))&&name.equals("operation"))

                            continue;

                        map.put(name,value);// 取值

                    }

                }

                superclass = superclass.getSuperclass();

            }

        } catch (Exception e) {

            e.printStackTrace();

        }

        return map;

    }


public static CloseableHttpClient createSSLClientDefault(){

        try {

            //SSLContext sslContext = new SSLContextBuilder().loadTrustMaterial(null, new TrustStrategy() {

            // 在JSSE中，证书信任管理器类就是实现了接口X509TrustManager的类。我们可以自己实现该接口，让它信任我们指定的证书。

            // 创建SSLContext对象，并使用我们指定的信任管理器初始化

            //信任所有

                X509TrustManager x509mgr = new X509TrustManager() {

                    //　　该方法检查客户端的证书，若不信任该证书则抛出异常

                    public void checkClientTrusted(X509Certificate[] xcs, String string) {

                    }

                    // 　　该方法检查服务端的证书，若不信任该证书则抛出异常

                    public void checkServerTrusted(X509Certificate[] xcs, String string) {

                    }

                    // 　返回受信任的X509证书数组。

                    public X509Certificate[] getAcceptedIssuers() {

                        return null;

                    }

                };

                SSLContext sslContext = SSLContext.getInstance("TLS");

                sslContext.init(null, new TrustManager[] { x509mgr }, null);

                ////创建HttpsURLConnection对象，并设置其SSLSocketFactory对象

                SSLConnectionSocketFactory sslsf = new SSLConnectionSocketFactory(sslContext, SSLConnectionSocketFactory.ALLOW_ALL_HOSTNAME_VERIFIER);

            //  HttpsURLConnection对象就可以正常连接HTTPS了，无论其证书是否经权威机构的验证，只要实现了接口X509TrustManager的类MyX509TrustManager信任该证书。

            return HttpClients.custom().setSSLSocketFactory(sslsf).build();

        } catch (KeyManagementException e) {

            e.printStackTrace();

        } catch (NoSuchAlgorithmException e) {

            e.printStackTrace();

        } catch (Exception e) {

            e.printStackTrace();

        }

        // 创建默认的httpClient实例.

        return  HttpClients.createDefault();

    }

}

另外，在针对http进行升级时，在HTTPS的证书未经权威机构认证的情况下，访问HTTPS站点的两种方法，一种方法是把该证书导入到Java的TrustStore文件中，另一种是自己实现并覆盖JSSE缺省的证书信任管理器类。两种方法各有优缺点，第一种方法不会影响JSSE的安全性，但需要手工导入证书；第二种方法虽然不用手工导入证书，但需要小心使用，否则会带来一些安全隐患。

参考博客：

[1]Java实现免证书访问Https请求

[2]java实现 HTTP/HTTPS请求绕过证书检测代码实现

Java实现 HTTP/HTTPS请求绕过证书检测的更多相关文章

  1. java实现 HTTP/HTTPS请求绕过证书检测代码实现

    java实现 HTTP/HTTPS请求绕过证书检测代码实现 1.开发需求 需要实现在服务端发起HTTP/HTTPS请求,访问其他程序资源. 2.URLConnection和HTTPClient的比较 ...

  2. 简述Java中Http/Https请求监听方法

    一.工欲善其事必先利其器 做Web开发的人总免不了与Http/Https请求打交道,很多时候我们都希望能够直观的的看到我们发送的请求参数和服务器返回的响应信息,这个时候就需要借助于某些工具啦.本文将采 ...

  3. java实现的https请求

    转载并修改自 http://www.blogjava.net/etlan/archive/2006/06/29/55767.html Https请求 超文本传输协议HTTP协议:被用于在Web浏览器和 ...

  4. java如何发起https请求

    1.写一个SSLClient类,继承至HttpClient import java.security.cert.CertificateException; import java.security.c ...

  5. java的https请求解决证书问题

    package sqr.srchSpider.utils; import java.security.SecureRandom; import java.security.cert.Certifica ...

  6. 【问题记录】Java服务发起HTTPS请求报错：PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException

    问题报错 今天上线了我开发的一个OAuth2单点登录客户端的实现,在测试系统验证没问题,到生产环境由于单点登录服务端HTTPS协议,报错如下: I/O error on POST request fo ...

  7. HTTPS请求 SSL证书验证

    import urllib2 url = "https://www.12306.cn/mormhweb/" headers = {"User-Agent": & ...

  8. UrlConnection doPost Https请求 、编码设置

    UrlConnection doPost Https请求 .编码设置 UrlConnection doPost方法 /** * 发送POST请求 * * @param url 请求地址url * @p ...

  9. Java爬虫--Https绕过证书

    https网站服务器都是有证书的. 是由网站自己的服务器签发的,并不被浏览器或操作系统广泛接受. 在使用CloseableHttpClient时经常遇到证书错误(知乎的网站就是这样) 现在需要SSL绕 ...

随机推荐

  1. JSON Parse error: Unexpected identifier "object";stringToAnyType报错 uni-app

    只限于uni 的局限问题,博主的报错是因为初始化某些关键数据在uni的  onLoad生命周期  和  onReady生命周期里面初始化,导致数据加载时出现个别报错的BUG JSON Parse er ...

  2. mybatis-plus查询指定字段

    show me the code :mybais-plus版本:3.1.1 1,排除某些字段,可以同时排除多个字段排除多个字段写法: .setEntity(new User()) .select(c ...

  3. 使用 @Transactional 时常犯的N种错误

    @Transactional是我们在用Spring时候几乎逃不掉的一个注解,该注解主要用来声明事务.它的实现原理是通过Spring AOP在注解修饰方法的前后织入事务管理的实现语句,所以开发者只需要通 ...

  4. 菜鸡的Java笔记 第四 - java 基础运算符

    数学运算符,逻辑运算,三目运算,位运算 double d2 = 314e2; //采用科学计数法的写法,表示10的2次方.= 31400.0 代码写的越简单越好   简化运算符 代码:x＝x+y 可以 ...

  5. Nginx server_name翻译

    http://nginx.org/en/docs/http/server_names.html#regex_names 匹配优先顺序 精确名称,无通配符,无正则. 以星号开头的最长的通配符名称,例如& ...

  6. OpenShift 本地开发环境配置(基于 Minishift)

    本文要做什么? 很多为了验证应用在 OpenShift 平台的行为是否正常,或者组成一个简单的开发环境,直接搭建一个 OpenShift/Origin 环境可能太重了,而且运行在本机可能占用内存也太多 ...

  7. [bzoj3123]森林

    首先对于询问操作可以使用可持久化线段树来维护,对于连边操作对于两颗树中选取较小的树暴力练到另一个点上,点数可以用并查集然后只修改根的点数即可. 1 #include<bits/stdc++.h& ...

  8. [atARC101E]Ribbons on Tree

    令$f(E')$表示强制$E'$中的边不被覆盖的方案数,根据容斥,$ans=\sum_{E'\subseteq E}(-1)^{|E'|}f(E')$ 对于给定的$E'$,$f(E')$即将$E'$中 ...

  9. python并行计算之mpi4py的安装与基本使用

    技术背景 在之前的博客中我们介绍过concurrent等python多进程任务的方案,而之所以我们又在考虑MPI等方案来实现python并行计算的原因,其实是将python的计算任务与并行计算的任务调 ...

  10. 洛谷 P3994 高速公路（斜率优化）

    题目链接 题意:给出一棵树,\(1\) 号点为根,边上有边权. 每个点有两个参数 \(p_i,q_i\) 如果你想从 \(i\) 号点到与其距离为 \(d\) 的 \(j\) 号点,那么你需花费 \( ...