java 请求 https 跳过认证

Java 请求 HTTPS 时有几种方法可以跳过认证：

1. 关闭 SSL 验证

这种方式不建议使用，因为关闭 SSL 验证会导致安全风险。

代码如下：

TrustManager[] trustAllCerts = new TrustManager[] { new X509TrustManager() {
    public java.security.cert.X509Certificate[] getAcceptedIssuers() {
        return new java.security.cert.X509Certificate[0];
    }
    public void checkClientTrusted(X509Certificate[] certs, String authType) {
    }
    public void checkServerTrusted(X509Certificate[] certs, String authType) {
    }
} };
SSLContext sc = SSLContext.getInstance("TLS");
sc.init(null, trustAllCerts, new java.security.SecureRandom());
HttpsURLConnection.setDefaultSSLSocketFactory(sc.getSocketFactory());

2. 添加自定义证书

这种方式需要将自定义证书添加到 Java 运行环境中。

代码如下：

KeyStore keyStore = KeyStore.getInstance("JKS");
FileInputStream inputStream = new FileInputStream(new File("your_keystore_path"));
keyStore.load(inputStream, "your_keystore_password".toCharArray());

TrustManagerFactory trustManagerFactory = TrustManagerFactory.getInstance(TrustManagerFactory.getDefaultAlgorithm());
trustManagerFactory.init(keyStore);

SSLContext sslContext = SSLContext.getInstance("TLS");
sslContext.init(null, trustManagerFactory.getTrustManagers(), new SecureRandom());

HttpsURLConnection.setDefaultSSLSocketFactory(sslContext.getSocketFactory());

3. 使用 HttpURLConnection 类

如果是简单的 HTTP 请求，可以使用 HttpURLConnection 类代替 HttpsURLConnection 类，这样就不需要进行 SSL 认证。

代码如下：

URL url = new URL("your_url");
HttpURLConnection conn = (HttpURLConnection) url.openConnection();
conn.setRequestMethod("GET");
BufferedReader in = new BufferedReader(
    new InputStreamReader(conn.getInputStream()));
String inputLine;
StringBuilder response = new StringBuilder();
while ((inputLine = in.readLine()) != null) {
    response.append(inputLine);
}
in.close();