java - 在没有证书的情况下通过 ssl 连接

Question

我试图在没有证书的情况下通过 SSL 端口 443 连接到我的服务器。

我收到一个错误:

javax.net.ssl.SSLException: Not trusted server certificate

阅读其他问题来解决问题，下面的代码应该可以工作，但我仍然收到错误消息。我可能做错了什么？

HostnameVerifier hostnameVerifier = org.apache.http.conn.ssl.SSLSocketFactory.ALLOW_ALL_HOSTNAME_VERIFIER;
DefaultHttpClient client = new DefaultHttpClient();
SchemeRegistry registry = new SchemeRegistry();
SSLSocketFactory socketFactory = SSLSocketFactory.getSocketFactory();
socketFactory.setHostnameVerifier((X509HostnameVerifier) hostnameVerifier);
registry.register(new Scheme("https", socketFactory, 443));
SingleClientConnManager mgr = new SingleClientConnManager(client.getParams(), registry);
httpclient = new DefaultHttpClient(mgr, client.getParams());

// Set verifier     
HttpsURLConnection.setDefaultHostnameVerifier(hostnameVerifier);
HttpGet httpget = new HttpGet(this.requestedURL);
httpget.addHeader(new BasicScheme().authenticate(creds, httpget));

try
{
    response = httpclient.execute(httpget);
}
catch(java.lang.Throwable t) {}

Answer 1

您的客户端信任库不信任服务器证书。它可能是一个自签名证书，因此您需要将其导入到您的客户信任库中。或者让它由 CA 签名。忽略服务器证书是不安全的，您最好根本不使用 HTTPS。