首页
学习
活动
专区
工具
TVP
发布
社区首页 >问答首页 >Java10中sslSocketFactory的替代方案

Java10中sslSocketFactory的替代方案
EN

Stack Overflow用户
提问于 2018-05-30 07:27:32
回答 2查看 3.1K关注 0票数 6

我使用的是OkHttp,为了调试应用程序,我需要忽略SSL错误。这曾经在Java 8中起作用。

final TrustManager[] trustAllCerts = new TrustManager[] {
            new X509TrustManager() {
                @Override
                public void checkClientTrusted(java.security.cert.X509Certificate[] chain, String authType) throws CertificateException {
                }

                @Override
                public void checkServerTrusted(java.security.cert.X509Certificate[] chain, String authType) throws CertificateException {
                }

                @Override
                public java.security.cert.X509Certificate[] getAcceptedIssuers() {
                    return new java.security.cert.X509Certificate[]{};
                }
            }
    };

    SSLContext sslContext = null;
    try {
        sslContext = SSLContext.getInstance("SSL");
        sslContext.init(null, trustAllCerts, new java.security.SecureRandom());
    } catch (Exception s) {
        s.printStackTrace();
    }
    final SSLSocketFactory sslSocketFactory = sslContext.getSocketFactory();

    //
    //.sslSocketFactory(sslSocketFactory) throws error.
    client = new OkHttpClient.Builder().sslSocketFactory(sslSocketFactory).build();

但是在Java 9和10中,我得到了这个错误。

java.lang.UnsupportedOperationException: clientBuilder.sslSocketFactory(SSLSocketFactory) not supported on JDK 9+

有没有其他方法可以在不使用sslSocketFactory的情况下忽略Java9和10中的OkHttp SSL错误?

EN

回答 2

Stack Overflow用户

回答已采纳

发布于 2018-05-30 08:24:42

使用sslSocketFactory(SSLSocketFactory sslSocketFactory,X509TrustManager trustManager)

在您的代码示例中,您构造了一个X509TrustManager,只需将其与套接字工厂一起传递即可。

票数 9
EN

Stack Overflow用户

发布于 2020-09-15 09:28:43

问题是sslSocketFactory()的单参数版本已更改为抛出上述错误。你只需要重构一些东西,并使用它的两个参数版本,但你仍然可以保留你的匿名类和被覆盖的方法。

以下是重构后的代码:

X509TrustManager x509TrustManager = new X509TrustManager() {
  @Override
  public void checkClientTrusted(java.security.cert.X509Certificate[] chain, String authType)
      throws CertificateException {
  }

  @Override
  public void checkServerTrusted(java.security.cert.X509Certificate[] chain, String authType)
      throws CertificateException {
  }

  @Override
  public java.security.cert.X509Certificate[] getAcceptedIssuers() {
    return new java.security.cert.X509Certificate[]{};
  }
};
     
final TrustManager[] trustAllCerts = new TrustManager[] {x509TrustManager};

SSLContext sslContext = null;
try {
  sslContext = SSLContext.getInstance("SSL");
  sslContext.init(null, trustAllCerts, new java.security.SecureRandom());
} catch (Exception s) {
  s.printStackTrace();
}
final SSLSocketFactory sslSocketFactory = sslContext.getSocketFactory();


// Since sslSocketFactory(sslSocketFactory) throws an error 
//  use sslSocketFactory(sslSocketFactory, x509TrustManager)
client = new OkHttpClient.Builder().sslSocketFactory(sslSocketFactory, x509TrustManager).build();
票数 -1
EN
页面原文内容由Stack Overflow提供。腾讯云小微IT领域专用引擎提供翻译支持
原文链接:

https://stackoverflow.com/questions/50594350

复制
相关文章

相似问题

领券
问题归档专栏文章快讯文章归档关键词归档开发者手册归档开发者手册 Section 归档