java实现 HTTP/HTTPS请求绕过证书检测

一、Java实现免证书访问Https请求

创建证书管理器类

import java.security.cert.CertificateException;

import java.security.cert.X509Certificate;

import javax.net.ssl.X509TrustManager;

/**

 * 证书信任管理器（用于https请求）

 *

 */

public class MyX509TrustManager implements X509TrustManager {

	public void checkClientTrusted(X509Certificate[] chain, String authType) throws CertificateException {

	}

	public void checkServerTrusted(X509Certificate[] chain, String authType) throws CertificateException {

	}

	public X509Certificate[] getAcceptedIssuers() {

		return null;

	}

}

服务器主机名校验类

import javax.net.ssl.HostnameVerifier;

import javax.net.ssl.SSLSession;

public class NullHostNameVerifier implements HostnameVerifier{

    @Override

    public boolean verify(String hostname, SSLSession session) {

        return true;

    }

}

调用测试

import java.io.BufferedReader;

import java.io.InputStreamReader;

import java.io.OutputStreamWriter;

import java.io.PrintWriter;

import java.net.URL;

import javax.net.ssl.HttpsURLConnection;

import javax.net.ssl.SSLContext;

import javax.net.ssl.SSLSocketFactory;

import javax.net.ssl.TrustManager;

import cn.com.goevent.weixin.util.MyX509TrustManager;

public class HttpsTest {

	public static void main(String[] args) throws Exception {

	    //设置可通过ip地址访问https请求

	    HttpsURLConnection.setDefaultHostnameVerifier(new NullHostNameVerifier());

	    TrustManager[] tm = {new MyX509TrustManager()};

	    SSLContext sslContext = SSLContext.getInstance("TLS");

	    sslContext.init(null, tm, new java.security.SecureRandom());

	    // 从上述SSLContext对象中得到SSLSocketFactory对象

	    SSLSocketFactory ssf = sslContext.getSocketFactory();

    	    String urlStr = "https://192.168.1.10/login_queryLkBySfmc.htm";

    	    URL url = new URL(urlStr);

	    HttpsURLConnection con = (HttpsURLConnection) url.openConnection();

	    con.setSSLSocketFactory(ssf);

    	    con.setRequestMethod("POST"); // 设置以POST方式提交数据

    	    con.setDoInput(true); // 打开输入流，以便从服务器获取数据

    	    con.setDoOutput(true);// 打开输出流，以便向服务器提交数据

	    //设置发送参数

            String param = "sfmc=测试";

            PrintWriter out = new PrintWriter(new OutputStreamWriter(con.getOutputStream(),"UTF-8"));

            out.print(param);

            out.flush();

            out.close();

            //读取请求返回值

	    InputStreamReader in = new InputStreamReader(con.getInputStream(),"UTF-8");

	    BufferedReader bfreader = new BufferedReader(in);

	    String result = "";

	    String line = "";

	    while ((line = bfreader.readLine()) != null) {

	    	result += line;

	    }

	    System.out.println("result:"+result);

	}

}

二、java实现 HTTP/HTTPS请求绕过证书检测代码实现

使用Apache的HttpClient发送GET和POST请求

1.使用帮助类HttpClients创建CloseableHttpClient对象.

2.基于要发送的HTTP请求类型创建HttpGet或者HttpPost实例.

3.使用addHeader方法添加请求头部,诸如User-Agent, Accept-Encoding等参数.

4.对于POST请求,创建NameValuePair列表,并添加所有的表单参数.然后把它填充进HttpPost实体.

5.通过执行此HttpGet或者HttpPost请求获取CloseableHttpResponse实例

6.从此CloseableHttpResponse实例中获取状态码,错误信息,以及响应页面等等.

7.最后关闭HttpClient资源.

POST请求封装的工具类



import java.io.BufferedOutputStream;

import java.io.BufferedReader;

import java.io.IOException;

import java.io.InputStream;

import java.io.InputStreamReader;

import java.lang.reflect.Method;

import java.net.URLDecoder;

import java.net.URLEncoder;

import java.security.KeyManagementException;

import java.security.KeyStoreException;

import java.security.NoSuchAlgorithmException;

import java.security.cert.CertificateException;

import java.security.cert.X509Certificate;

import java.util.ArrayList;

import java.util.HashMap;

import java.util.List;

import java.util.Map;

import java.util.Map.Entry;

import com.sun.corba.se.impl.orbutil.threadpool.TimeoutException;

import org.apache.commons.httpclient.util.TimeoutController;

import org.apache.http.NameValuePair;

import org.apache.http.client.config.RequestConfig;

import org.apache.http.client.entity.UrlEncodedFormEntity;

import org.apache.http.client.methods.CloseableHttpResponse;

import org.apache.http.client.methods.HttpPost;

import org.apache.http.conn.ssl.SSLConnectionSocketFactory;

import org.apache.http.entity.StringEntity;

import org.apache.http.impl.client.CloseableHttpClient;

import org.apache.http.impl.client.HttpClients;

import org.apache.http.message.BasicNameValuePair;

import org.apache.http.util.EntityUtils;

import org.apache.log4j.Logger;

import cn.qtone.hjy.service.bean.yd.sync.AccountPasswordInfoSyncItem;

import cn.qtone.hjy.service.bean.yd.sync.OrderInfoSyncItem;

import cn.qtone.hjy.service.bean.yd.sync.YdOrderRelationshipInfoSyncItem;

import cn.qtone.hjy.service.core.DES;

import cn.qtone.hjy.service.dao.YdEduDao;

import cn.qtone.util.SpringUtil;

import com.alibaba.fastjson.JSONObject;

import javax.net.ssl.SSLContext;

import javax.net.ssl.TrustManager;

import javax.net.ssl.X509TrustManager;

public class HttpClientUtil {

    static Logger log = Logger.getLogger(HttpClientUtil.class) ;

    private static  RequestConfig requestConfig = RequestConfig.custom().setSocketTimeout(10000).setConnectTimeout(10000).build();//设置请求和传输超时时间

    private static CloseableHttpClient httpclient = HttpClients.createDefault();

    public static String send(String httpUrl, String message) throws IOException {

        String result = null ;

        HttpPost httpPost = new HttpPost(httpUrl);

        //设置数据读取超时5s   传输超时5s    链接请求超时5s

        RequestConfig requestConfig = RequestConfig.custom()

                    .setSocketTimeout(5000)

                    .setConnectTimeout(5000)

                    .setConnectionRequestTimeout(5000)

                    .build();

        httpPost.setConfig(requestConfig) ;

        message = URLEncoder.encode(message, "UTF-8") ;

        StringEntity entity = new StringEntity(message);

        httpPost.setEntity(entity);

        CloseableHttpResponse response = httpclient.execute(httpPost);

        BufferedReader in = null ;

        try {

            InputStream content = response.getEntity().getContent() ;

            in = new BufferedReader(new InputStreamReader(content));

            StringBuilder sb = new StringBuilder();

            String line = "" ;

            while ((line = in.readLine()) != null) {

                sb.append(line);

            }

            result = sb.toString() ;

            System.out.println("接收原始报文：" + URLDecoder.decode(result, "UTF-8")) ;

        } finally {

            EntityUtils.consume(response.getEntity());

            response.close();

        }

        return result ;

    }

    public static String post(String httpUrl, String message) throws Exception {

        String result = null ;

        CloseableHttpClient httpclient = HttpClients.createDefault();

        BufferedReader in = null ;

        HttpPost httpPost = new HttpPost(httpUrl);

        httpPost.setConfig(requestConfig);

        List <NameValuePair> nvps = new ArrayList <NameValuePair>();

        nvps.add(new BasicNameValuePair("tokenId", DES.encrypt(message)));

        httpPost.setEntity(new UrlEncodedFormEntity(nvps));

        try {

            System.out.println("发送报文：" + message);

            System.out.println("发送报文：" + DES.encrypt(message)) ;

            CloseableHttpResponse response = httpclient.execute(httpPost);

            InputStream content = response.getEntity().getContent() ;

            in = new BufferedReader(new InputStreamReader(content, "UTF-8"));

            StringBuilder sb = new StringBuilder();

            String line = "" ;

            while ((line = in.readLine()) != null) {

                sb.append(line);

            }

            System.out.println("响应报文：" + sb.toString()) ;

            //result = URLDecoder.decode(sb.toString(), "UTF-8") ;

            //result = DES.decrypt(result) ;

            //System.out.println("完成：" + JSONObject.parseObject(result) + "\n");

            return result ;

        } catch (Exception e) {

            e.printStackTrace() ;

        } finally {

            httpclient.close();

        }

        return null ;

    }

    /**

     * 发起post请求，请求参数以Map集合形式传入，封装到List <NameValuePair> 发起post请求

     * @param httpUrl

     * @param params

     * @return

     * @throws Exception

     */

    public static String post(String httpUrl, Map<String, String> params) throws Exception {

        String result = null ;

        CloseableHttpClient httpclient = createSSLClientDefault();

        //httpclient.

        //httpclient.

        BufferedReader in = null ;

        HttpPost httpPost = new HttpPost(httpUrl);

        httpPost.setConfig(requestConfig);

        List <NameValuePair> nvps = new ArrayList <NameValuePair>();

        StringBuffer paramsBuf = new StringBuffer() ;

        for(Entry<String, String> e : params.entrySet()) {

            nvps.add(new BasicNameValuePair(e.getKey(), e.getValue()));

            paramsBuf.append("&").append(e.getKey()).append("=").append(e.getValue()) ;

        }

        httpPost.setEntity(new UrlEncodedFormEntity(nvps, "UTF-8"));

        try {

//          报文参数27：&id=jn-3-767744&groupPlatProTerminalId=119667&extend=uwJZ8j3CkpGPL4rM5J6KJhjR99O7yAe3BAGLS8ooI8ijNqKHfzTaK6W9wQvjZEVOmWJ3HxFb2O9D

//          wDbe3++UiQ==&xxtCode=370000&terminalType=1&role=3&type=3

            System.out.println("post请求报文地址：" + httpUrl+"?"+paramsBuf.toString()) ;

            CloseableHttpResponse response = httpclient.execute(httpPost);

            InputStream content = response.getEntity().getContent() ;

            in = new BufferedReader(new InputStreamReader(content, "UTF-8"));

//          in = new BufferedReader(new InputStreamReader(content, "GBK"));

//          in = new BufferedReader(new InputStreamReader(content));

            StringBuilder sb = new StringBuilder();

            String line = "" ;

            while ((line = in.readLine()) != null) {

                sb.append(line);

            }

            result = sb.toString() ;

            System.out.println("响应报文：" + result) ;

            //  响应报文：{"ret":0,"msg":"成功","callbackurl":"https://edu.10086.cn/test-sso/login?service=http%3A%2F%2F112.35.7.169%3A9010%2Feducloud%2Flogin%2Flogin%3Ftype%3D3%26mode%3D1%26groupId%3D4000573%26provincePlatformId%3D54","accesstoken":"2467946a-bee9-4d8c-8cce-d30181073b75"}Í

            //记录报文日志

            YdEduDao dao = SpringUtil.getBean(YdEduDao.class);

            dao.saveCallLog(httpUrl, paramsBuf.toString(), result);    // HJY_SERVICE_LOG

            return result ;

        } catch (Exception e) {

            e.printStackTrace() ;

        } finally {

            httpclient.close();

        }

        return null ;

    }

    public static JSONObject postData(String httpUrl, Object obj) throws Exception {

        JSONObject json = null;

        try{

        String result = post(httpUrl,obj);

             json = JSONObject.parseObject(result);

        }catch(TimeoutException e){

            System.out.println("请求超时了："+httpUrl);

            throw e;

        }finally {

            return json ;

        }

    }

    public static String post(String httpUrl, Object obj) throws Exception {

        Map<String, String>  params = getParamData(obj);

        String result = null ;

        try {

            result = post(httpUrl,params);

            return result ;

        } catch (Exception e) {

            e.printStackTrace() ;

        } finally {

            httpclient.close();

        }

        return null ;

    }

    private static Map<String, String>  getParamData(Object obj) {

        Class cla = obj.getClass();

        Map<String, String> map = new HashMap<String, String>();

        Method[] methods = cla.getDeclaredMethods();

        try {

            for (Method m : methods) {

                String mname = m.getName();

                if (mname.startsWith("get")) {

                    String name = mname.substring(3, mname.length());// 截取字段

                    name = name.substring(0, 1).toLowerCase()

                            + name.substring(1, name.length());// 把首字母变小写

                    String value = m.invoke(obj)==null?"":m.invoke(obj).toString();

                    if(cla.equals(YdOrderRelationshipInfoSyncItem.class)&&name.equals("unionId")&&(value==null||value.equals(""))){

                        continue;

                    }

                    map.put(name,value);// 取值

                }

            }

            Class superclass = cla.getSuperclass();

            while (!superclass.equals(Object.class)) {

                Method[] superclassmethods = superclass.getDeclaredMethods();

                for (Method m : superclassmethods) {

                    String mname = m.getName();

                    if (mname.startsWith("get")) {

                        String name = mname.substring(3, mname.length());// 截取字段

                        name = name.substring(0, 1).toLowerCase()

                                + name.substring(1, name.length());// 把首字母变小写

                        String value = m.invoke(obj)==null?"":m.invoke(obj).toString();

                        if((cla.equals(OrderInfoSyncItem.class)||cla.equals(AccountPasswordInfoSyncItem.class)||cla.equals(YdOrderRelationshipInfoSyncItem.class))&&name.equals("operation"))

                            continue;

                        map.put(name,value);// 取值

                    }

                }

                superclass = superclass.getSuperclass();

            }

        } catch (Exception e) {

            e.printStackTrace();

        }

        return map;

    }


public static CloseableHttpClient createSSLClientDefault(){

        try {

            //SSLContext sslContext = new SSLContextBuilder().loadTrustMaterial(null, new TrustStrategy() {

            // 在JSSE中，证书信任管理器类就是实现了接口X509TrustManager的类。我们可以自己实现该接口，让它信任我们指定的证书。

            // 创建SSLContext对象，并使用我们指定的信任管理器初始化

            //信任所有

                X509TrustManager x509mgr = new X509TrustManager() {

                    //　　该方法检查客户端的证书，若不信任该证书则抛出异常

                    public void checkClientTrusted(X509Certificate[] xcs, String string) {

                    }

                    // 　　该方法检查服务端的证书，若不信任该证书则抛出异常

                    public void checkServerTrusted(X509Certificate[] xcs, String string) {

                    }

                    // 　返回受信任的X509证书数组。

                    public X509Certificate[] getAcceptedIssuers() {

                        return null;

                    }

                };

                SSLContext sslContext = SSLContext.getInstance("TLS");

                sslContext.init(null, new TrustManager[] { x509mgr }, null);

                ////创建HttpsURLConnection对象，并设置其SSLSocketFactory对象

                SSLConnectionSocketFactory sslsf = new SSLConnectionSocketFactory(sslContext, SSLConnectionSocketFactory.ALLOW_ALL_HOSTNAME_VERIFIER);

            //  HttpsURLConnection对象就可以正常连接HTTPS了，无论其证书是否经权威机构的验证，只要实现了接口X509TrustManager的类MyX509TrustManager信任该证书。

            return HttpClients.custom().setSSLSocketFactory(sslsf).build();

        } catch (KeyManagementException e) {

            e.printStackTrace();

        } catch (NoSuchAlgorithmException e) {

            e.printStackTrace();

        } catch (Exception e) {

            e.printStackTrace();

        }

        // 创建默认的httpClient实例.

        return  HttpClients.createDefault();

    }

}

另外，在针对http进行升级时，在HTTPS的证书未经权威机构认证的情况下，访问HTTPS站点的两种方法，一种方法是把该证书导入到Java的TrustStore文件中，另一种是自己实现并覆盖JSSE缺省的证书信任管理器类。两种方法各有优缺点，第一种方法不会影响JSSE的安全性，但需要手工导入证书；第二种方法虽然不用手工导入证书，但需要小心使用，否则会带来一些安全隐患。

参考博客：

[1]Java实现免证书访问Https请求

[2]java实现 HTTP/HTTPS请求绕过证书检测代码实现

Java实现 HTTP/HTTPS请求绕过证书检测的更多相关文章

  1. java实现 HTTP/HTTPS请求绕过证书检测代码实现

    java实现 HTTP/HTTPS请求绕过证书检测代码实现 1.开发需求 需要实现在服务端发起HTTP/HTTPS请求,访问其他程序资源. 2.URLConnection和HTTPClient的比较 ...

  2. 简述Java中Http/Https请求监听方法

    一.工欲善其事必先利其器 做Web开发的人总免不了与Http/Https请求打交道,很多时候我们都希望能够直观的的看到我们发送的请求参数和服务器返回的响应信息,这个时候就需要借助于某些工具啦.本文将采 ...

  3. java实现的https请求

    转载并修改自 http://www.blogjava.net/etlan/archive/2006/06/29/55767.html Https请求 超文本传输协议HTTP协议:被用于在Web浏览器和 ...

  4. java如何发起https请求

    1.写一个SSLClient类,继承至HttpClient import java.security.cert.CertificateException; import java.security.c ...

  5. java的https请求解决证书问题

    package sqr.srchSpider.utils; import java.security.SecureRandom; import java.security.cert.Certifica ...

  6. 【问题记录】Java服务发起HTTPS请求报错：PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException

    问题报错 今天上线了我开发的一个OAuth2单点登录客户端的实现,在测试系统验证没问题,到生产环境由于单点登录服务端HTTPS协议,报错如下: I/O error on POST request fo ...

  7. HTTPS请求 SSL证书验证

    import urllib2 url = "https://www.12306.cn/mormhweb/" headers = {"User-Agent": & ...

  8. UrlConnection doPost Https请求 、编码设置

    UrlConnection doPost Https请求 .编码设置 UrlConnection doPost方法 /** * 发送POST请求 * * @param url 请求地址url * @p ...

  9. Java爬虫--Https绕过证书

    https网站服务器都是有证书的. 是由网站自己的服务器签发的,并不被浏览器或操作系统广泛接受. 在使用CloseableHttpClient时经常遇到证书错误(知乎的网站就是这样) 现在需要SSL绕 ...

随机推荐

  1. 【数据结构&算法】05-线性表之数组

    目录 前言 线性结构与非线性结构 数组 数组的两个限制 数组的随机访问特性 数组的操作 插入操作 删除操作 数组越界 容器 数组下标 前言 本笔记主要记录数组的一些基础特性及操作. 顺便解答下为什么大 ...

  2. pycharm安装指导教程

    pycharm下载安装教程 1.pycharm下载官网 http://www.jetbrains.com/pycharm/ 2.下载好安装包后双击点开安装包文件,这边以专业版为例 按以上图片所示教程, ...

  3. Java操作MongoDB之mongodb-driver(一)

    1. mongodb-driver是mongo官方推出的java连接mongoDB的驱动包,相当于JDBC驱动. (1)通过maven仓库导入:https://mvnrepository.com/ar ...

  4. 【数据结构&算法】09-队列概念&参考源码

    目录 前言 队列的定义 队列的抽象数据类型 循环队列与链式队列对比 循环队列 特点 定义 循环队列相关计算 链式队列 定义 阻塞队列 并发队列 代码实现 循环队列代码 链式队列实现 前言 李柱明博客: ...

  5. win10各版本激活码

    win + x进入Power shell(管理员),依次输入 Win10专业版 slmgr.vbs /upk slmgr /ipk W269N-WFGWX-YVC9B-4J6C9-T83GX slmg ...

  6. js运算符 及 运算符优先级

    「运算符」是用于实现赋值.比较和执行算数运算等功能的符号.常用运算符分类如下符号 算数运算符 递增和递减运算符 比较运算符 逻辑运算符 赋值运算符 算数运算符 运算符 描述 案例 + 加 10+20= ...

  7. 解决虚拟机安装linux系统无法全屏问题 & vmtools安装

    修改设置 1) 如下图右单击虚拟机名,选择[settings-],调出虚拟机设置界面. 2) 在设置界面选择[hardware]->[CD/DVD2(IDE)]->[Connection] ...

  8. 如何提高C# StringBuilder的性能

    本文探讨使用C# StringBuilder 的最佳实践,用于减少内存分配,提高字符串操作的性能. 在 .NET 中,字符串是不可变的类型.每当你在 .NET 中修改一个字符串对象时,就会在内存中创建 ...

  9. 如何看待 SAE 在2014 年 3 月 24 日发生的的大面积宕机事故？

    3 月 24 日晚间大约 23 点左右,新浪云 SAE 一处核心机柜掉电,导致 SAE 平台下大量应用无法正常访问,并在 10 小时后才陆续修复.这次事故暴露 SAE 的哪些缺陷?SAE 运维人员又是 ...

  10. COS 音视频实践 | 多种姿势让你的视频“跑”起来

    导语 随着4G/5G时代的到来,短视频/直播行业开始流行,音视频逐渐成为信息传播中流量占比最大的部分.腾讯云对象存储(COS)作为可容纳海量数据且支持 HTTP/HTTPS 协议访问的分布式存储服务, ...