java教程

java 远程下载图片https PKIX path building failed: sun.security错误问题

位置:首页 > java教程 > java技巧,2019-02-22 18:17
java 远程下载图片 sun.security.validator.ValidatorException: PKIX path building faile

Java在请求某些不受信任的https网站时会报:
发送GET请求出现异常!javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target


解决方法

新建一个工具类SslUtil.java  在打开连接之前调用此类 ignoreSsl()方法

package huan.lin.help;
import java.security.cert.CertificateException;
import java.security.cert.X509Certificate;
import javax.net.ssl.HostnameVerifier;
import javax.net.ssl.HttpsURLConnection;
import javax.net.ssl.SSLContext;
import javax.net.ssl.SSLSession;
import javax.net.ssl.TrustManager;
import javax.net.ssl.X509TrustManager;
 
public class SslUtil {
	private static void trustAllHttpsCertificates() throws Exception {  
	    TrustManager[] trustAllCerts = new TrustManager[1];  
	    TrustManager tm = new miTM();  
	    trustAllCerts[0] = tm;  
	    SSLContext sc = SSLContext.getInstance("SSL");  
	    sc.init(null, trustAllCerts, null);  
	    HttpsURLConnection.setDefaultSSLSocketFactory(sc.getSocketFactory());  
	}  
	  
	static class miTM implements TrustManager,X509TrustManager {  
	    public X509Certificate[] getAcceptedIssuers() {  
	        return null;  
	    }  
	  
	    public boolean isServerTrusted(X509Certificate[] certs) {  
	        return true;  
	    }  
	  
	    public boolean isClientTrusted(X509Certificate[] certs) {  
	        return true;  
	    }  
	  
	    public void checkServerTrusted(X509Certificate[] certs, String authType)  
	            throws CertificateException {  
	        return;  
	    }  
	  
	    public void checkClientTrusted(X509Certificate[] certs, String authType)  
	            throws CertificateException {  
	        return;  
	    }  
	}  
	   
	/** 
	 * 忽略HTTPS请求的SSL证书,必须在openConnection之前调用 
	 * @throws Exception 
	 */  
	public static void ignoreSsl() throws Exception{  
	    HostnameVerifier hv = new HostnameVerifier() {  
	        public boolean verify(String urlHostName, SSLSession session) {  
	            System.out.println("Warning: URL Host: " + urlHostName + " vs. " + session.getPeerHost());  
	            return true;  
	        }  
	    };  
	    trustAllHttpsCertificates();  
	    HttpsURLConnection.setDefaultHostnameVerifier(hv);  
	}  
}

调用例子



 SslUtil.ignoreSsl();
 con=u.openConnection();
以下就是java  远程下载图片https PKIX path building failed: sun.security错误问题方法。


TAGS:

猜你喜欢

NewHot