spring resttemplate 如何在調用的時候忽略證書

您可以使用以下代码来忽略证书：

RestTemplate restTemplate = new RestTemplate();
HttpComponentsClientHttpRequestFactory requestFactory = new HttpComponentsClientHttpRequestFactory();
requestFactory.setHttpClient(HttpClientBuilder.create().setSSLContext(new SSLContextBuilder().loadTrustMaterial(null, (certificate, authType) -> true).build()).build());
restTemplate.setRequestFactory(requestFactory);

这将创建一个忽略证书的 RestTemplate 对象，您可以使用它来进行调用。

相关问题

resttemplate发送post请求忽略证书

如果你想在使用 RestTemplate 发送 POST 请求时忽略证书，可以通过创建一个自定义的 RestTemplate 来实现。下面是一个示例代码：

import org.springframework.http.client.SimpleClientHttpRequestFactory;
import org.springframework.web.client.RestTemplate;

import javax.net.ssl.*;
import java.security.cert.CertificateException;
import java.security.cert.X509Certificate;

public class CustomRestTemplate extends RestTemplate {

    public CustomRestTemplate() {
        super();
        setRequestFactory(new SimpleClientHttpRequestFactory() {
            @Override
            protected void prepareConnection(HttpURLConnection connection, String httpMethod) throws IOException {
                if (connection instanceof HttpsURLConnection) {
                    ((HttpsURLConnection) connection).setHostnameVerifier(new HostnameVerifier() {
                        @Override
                        public boolean verify(String hostname, SSLSession session) {
                            return true;
                        }
                    });
                    ((HttpsURLConnection) connection).setSSLSocketFactory(createSslSocketFactory());
                }
                super.prepareConnection(connection, httpMethod);
            }
        });
    }

    private static SSLSocketFactory createSslSocketFactory() {
        SSLSocketFactory sslSocketFactory = null;
        try {
            TrustManager[] trustAllCerts = new TrustManager[]{new X509TrustManager() {
                @Override
                public void checkClientTrusted(X509Certificate[] x509Certificates, String s) throws CertificateException {
                }

                @Override
                public void checkServerTrusted(X509Certificate[] x509Certificates, String s) throws CertificateException {
                }

                @Override
                public X509Certificate[] getAcceptedIssuers() {
                    return null;
                }
            }};
            SSLContext sslContext = SSLContext.getInstance("TLS");
            sslContext.init(null, trustAllCerts, new java.security.SecureRandom());
            sslSocketFactory = sslContext.getSocketFactory();
        } catch (Exception e) {
            e.printStackTrace();
        }
        return sslSocketFactory;
    }

}

在上面的代码中，我们创建了一个自定义的 RestTemplate，其中重写了 prepareConnection 方法，在发送 HTTPS 请求时忽略了证书。

使用这个自定义的 RestTemplate，只需要在代码中实例化它并使用即可：

CustomRestTemplate restTemplate = new CustomRestTemplate();
String result = restTemplate.postForObject(url, request, String.class);

restTemplate.exchange忽略ssl证书

对于使用 RestTemplate 发起 HTTPS 请求时忽略 SSL 证书验证，你可以通过创建自定义的 HttpClient 来实现。下面是一个示例：

import org.springframework.http.HttpMethod;
import org.springframework.http.client.HttpComponentsClientHttpRequestFactory;
import org.springframework.web.client.RequestCallback;
import org.springframework.web.client.ResponseExtractor;
import org.springframework.web.client.RestTemplate;

import javax.net.ssl.SSLContext;
import javax.net.ssl.TrustManager;
import javax.net.ssl.X509TrustManager;
import java.security.cert.CertificateException;
import java.security.cert.X509Certificate;

public class SSLIgnoreRestTemplate extends RestTemplate {
    
    public SSLIgnoreRestTemplate() {
        super();
        initialize();
    }

    public SSLIgnoreRestTemplate(HttpComponentsClientHttpRequestFactory requestFactory) {
        super(requestFactory);
        initialize();
    }

    private void initialize() {
        try {
            // 创建信任所有证书的 SSLContext
            SSLContext sslContext = SSLContext.getInstance("TLS");
            sslContext.init(null, new TrustManager[]{new X509TrustManager() {
                @Override
                public void checkClientTrusted(X509Certificate[] x509Certificates, String s) throws CertificateException {
                }

                @Override
                public void checkServerTrusted(X509Certificate[] x509Certificates, String s) throws CertificateException {
                }

                @Override
                public X509Certificate[] getAcceptedIssuers() {
                    return null;
                }
            }}, null);

            // 创建忽略 SSL 证书验证的 HttpClient
            HttpComponentsClientHttpRequestFactory requestFactory = new HttpComponentsClientHttpRequestFactory();
            requestFactory.setHttpClient(HttpClients.custom().setSSLContext(sslContext)
                    .setSSLHostnameVerifier((hostname, session) -> true).build());

            setRequestFactory(requestFactory);
        } catch (Exception e) {
            throw new RuntimeException("Failed to initialize SSLIgnoreRestTemplate", e);
        }
    }

    // 如果有其他需要扩展的方法，可以在这里进行覆盖

    @Override
    public <T> T execute(String url, HttpMethod method, RequestCallback requestCallback,
                         ResponseExtractor<T> responseExtractor, Object... uriVariables) {
        return super.execute(url, method, requestCallback, responseExtractor, uriVariables);
    }
    
    // ...
}

使用时，你可以像使用普通的 RestTemplate 一样进行请求。这个自定义的 RestTemplate 将会忽略 SSL 证书验证。例如：

RestTemplate restTemplate = new SSLIgnoreRestTemplate();
ResponseEntity<String> response = restTemplate.exchange("https://your-url.com", HttpMethod.GET, null, String.class);

需要注意的是，忽略 SSL 证书验证存在安全风险，因此建议仅在开发和测试环境中使用，并不推荐在生产环境中使用。