java - 如何使用ssl证书创建okhttp

Question

我创建了 2 个类:-这个扩展了 OkHttp 并有一个新方法 getUnsafeOkHttpClient()。

public class GetExampleOkHttp extends OkHttpClient {
    public OkHttpClient getUnsafeOkHttpClient() {
        try {
            // Create a trust manager that does not validate certificate chains
            final TrustManager[] trustAllCerts = new TrustManager[] { new X509TrustManager() {
                @Override
                public void checkClientTrusted(java.security.cert.X509Certificate[] chain, String authType)
                        throws CertificateException {
                }
                @Override
                public void checkServerTrusted(java.security.cert.X509Certificate[] chain, String authType)
                        throws CertificateException {
                }
                @Override
                public java.security.cert.X509Certificate[] getAcceptedIssuers() {
                    return new java.security.cert.X509Certificate[] {};
                }
            } };
            // Install the all-trusting trust manager
            final SSLContext sslContext = SSLContext.getInstance("SSL");
            sslContext.init(null, trustAllCerts, new java.security.SecureRandom());
            // Create an ssl socket factory with our all-trusting manager
            final SSLSocketFactory sslSocketFactory = sslContext.getSocketFactory();
            OkHttpClient.Builder builder = new OkHttpClient.Builder();
            builder.sslSocketFactory(sslSocketFactory);
            builder.hostnameVerifier(new HostnameVerifier() {
                @Override
                public boolean verify(String hostname, SSLSession session) {
                    return true;
                }
            });
            OkHttpClient okHttpClient = builder.build();
            return okHttpClient;
        } catch (Exception e) {
            throw new RuntimeException(e);
        }
    }
}

和其他主类:

class ExampleOkHttpMain  
    public static void main(String[] args) throws IOException {     
        GetExampleOkHttp example = new GetExampleOkHttp();          
        example.getUnsafeOkHttpClient();

             Request request = new Request.Builder()
                .url("https://lachuzhnikov.kiev.ua/test.txt")
                .build();
            Response response = example.newCall(request).execute();
            System.out.println(response.body().string());       
    }
}

但是还是报错:

Exception in thread "main" javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target at sun.security.ssl.Alerts.getSSLException(Unknown Source) at sun.security.ssl.SSLSocketImpl.fatal(Unknown Source) at sun.security.ssl.Handshaker.fatalSE(Unknown Source)

Answer 1

1:下载https://sourceforge.net/projects/portecle/
2:打开firefox进入页面导出cer
3:备份Java\jdk....\jre\lib\security\cacerts(如:C:\Program Files\Java\jdk1.7.0_79\jre\lib\security)
4:复制cacerts到另一个文件夹
5: Portecle打开文件cacerts (pass: changeit) 导入步骤2中的cer并保存
6:复制并替换新的cacerts Java\jdk....\jre\lib\security\cacerts