javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed

1.使用HttpClient4.3 调用https出现如下错误：

javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

当使用网上其他的方式的时候，出现错误：javax.net.ssl.SSLException: hostname in certificate didn't match: <openapi.ysepay.com> != <default.ssl.cdn.jiasule.com>

原因：这是SSL证书请求问题。

2.原来的代码：

     /**
      * 拼接请求参数，发起请求
      * @param request
      * @param sParaTemp
      * @param strMethod
      * @param strButtonName
      * @return
      */
     public static String sendRequest(String mch_id,HttpServletRequest request, Map<String, String> paraTemp) {
         String result = null;// 返回的结果
         CloseableHttpResponse response = null;
         CloseableHttpClient client = null;
 
         HttpPost httpPost = new HttpPost(SwiftpassConfig.yinsheng_YSEPAY_GATEWAY_URL); //创建HttpPost对象
         // 存参列表
         List <NameValuePair> params = new ArrayList<NameValuePair>();
         // 参数不为空
         if(!paraTemp.isEmpty()) {
             // 遍历map，保存到List中
             for (Map.Entry<String, String> entry : paraTemp.entrySet()) {
                 params.add(new BasicNameValuePair(entry.getKey(), entry.getValue()));
             }
             try {
                 httpPost.setEntity(new UrlEncodedFormEntity(params ,HTTP.UTF_8));
                 // 创建 CloseableHttpClient 对象
                 client = HttpClients.createDefault();
                 response = client.execute(httpPost);
                 if(response.getStatusLine().getStatusCode() == 200) {
                     HttpEntity httpEntity = response.getEntity();
                     //取出应答字符串
                     result = EntityUtils.toString(httpEntity);
                 }
             } catch (Exception e) {
                 e.printStackTrace();
                 result = e.getMessage().toString();
             }
         }
         return result;
     }    

使用上诉代码调用https接口，出现上述的错误。

3.修改之后的代码：

    /**
     * buildSSLCloseableHttpClient:(设置允许所有主机名称都可以，忽略主机名称验证)
     * @author xbq
     * @return
     * @throws Exception
     */
    private static CloseableHttpClient buildSSLCloseableHttpClient() throws Exception {
        SSLContext sslContext = new SSLContextBuilder().loadTrustMaterial(null, new TrustStrategy() {
            // 信任所有
            public boolean isTrusted(X509Certificate[] chain, String authType) throws CertificateException {
                return true;
            }
        }).build();
        // ALLOW_ALL_HOSTNAME_VERIFIER:这个主机名验证器基本上是关闭主机名验证的,实现的是一个空操作，并且不会抛出javax.net.ssl.SSLException异常。
        SSLConnectionSocketFactory sslsf = new SSLConnectionSocketFactory(sslContext, new String[] { "TLSv1" }, null,
                SSLConnectionSocketFactory.ALLOW_ALL_HOSTNAME_VERIFIER);
        return HttpClients.custom().setSSLSocketFactory(sslsf).build();
    }
 
        /**
     * 拼接请求参数，发起请求
     * @param request
     * @param sParaTemp
     * @param strMethod
     * @param strButtonName
     * @return
     */
    public static String sendRequest(String mch_id,HttpServletRequest request, Map<String, String> paraTemp) {
        String result = null;// 返回的结果
        CloseableHttpResponse response = null;
        CloseableHttpClient client = null;
 
        HttpPost httpPost = new HttpPost(SwiftpassConfig.yinsheng_YSEPAY_GATEWAY_URL); //创建HttpPost对象
        // 存参列表
        List <NameValuePair> params = new ArrayList<NameValuePair>();
        // 参数不为空
        if(!paraTemp.isEmpty()) {
            // 遍历map，保存到List中
            for (Map.Entry<String, String> entry : paraTemp.entrySet()) {
                params.add(new BasicNameValuePair(entry.getKey(), entry.getValue()));
            }
            try {
                httpPost.setEntity(new UrlEncodedFormEntity(params ,HTTP.UTF_8));
                // 调用方法，创建 CloseableHttpClient 对象
                client = buildSSLCloseableHttpClient();
                response = client.execute(httpPost);
                if(response.getStatusLine().getStatusCode() == 200) {
                    HttpEntity httpEntity = response.getEntity();
                    //取出应答字符串
                    result = EntityUtils.toString(httpEntity);
                }
            } catch (Exception e) {
                e.printStackTrace();
                result = e.getMessage().toString();
            }
        }
        return result;
    }