我想測(cè)試 https (api) 客戶端。但我想關(guān)掉ssl validation柑橘。你能告訴我如何關(guān)閉 ssl 驗(yàn)證嗎？(httpActionBuilder -> httpActionBuilder
.client("https://localhost") .send() .get() .header(....)這是自動(dòng)檢查ssl證書。我收到以下異常：PKIX 路徑構(gòu)建失?。簊un.security.provider.certpath.SunCertPathBuilderException：無法找到請(qǐng)求目標(biāo)的有效證書路徑；嵌套異常是 javax.net.ssl.SSLHandshakeException。有沒有辦法關(guān)閉 ssl 驗(yàn)證（就像我們ssl在 postman 或任何其他框架中禁用驗(yàn)證一樣）。我將如何將上下文添加到柑橘測(cè)試的 ssl 上下文http(httpActionBuilder -> httpActionBuilder .client(" https://....com ") .send() .get() .header(....)
2 回答
largeQ
TA貢獻(xiàn)2039條經(jīng)驗(yàn) 獲得超8個(gè)贊
添加以下類
class NonValidatingTrustManager implements X509TrustManager {
@Override
public void checkClientTrusted(X509Certificate[] x509Certificates, String s) throws CertificateException {
}
@Override
public void checkServerTrusted(X509Certificate[] x509Certificates, String s) throws CertificateException {
}
@Override
public X509Certificate[] getAcceptedIssuers() {
return new X509Certificate[0];
}
}
然后在 Spring 中@Configuration通過聲明新 bean 覆蓋默認(rèn)的 SSLContext
@Bean
public SSLContext sslContext() throws KeyManagementException, NoSuchAlgorithmException {
SSLContext ctx = SSLContext.getInstance("TLS"); // or try "SSL"
ctx.init(null, new TrustManager[] { new NonValidatingTrustManager() }, null);
return ctx;
}
更新
對(duì)于測(cè)試，您創(chuàng)建單獨(dú)的配置類并將覆蓋的 SSLContext 也放在那里：
@TestConfiguration
class TestConfig {
@Bean
public SSLContext sslContext() throws Exception {
SSLContext ctx = SSLContext.getInstance("TLS"); // or try "SSL"
ctx.init(null, new TrustManager[] { new NonValidatingTrustManager() }, null);
return ctx;
}
}
并在單元測(cè)試中使用它，例如：
@SpringBootTest(classes = { TestConfig.class })
class MyTest {
...
}
繁花不似錦
TA貢獻(xiàn)1851條經(jīng)驗(yàn) 獲得超4個(gè)贊
您可以嘗試以下代碼。我正在嘗試允許所有受信任的證書，以便您可以進(jìn)行 https 調(diào)用。
try {
TrustManager[] trustAllCerts = new TrustManager[] { new X509TrustManager() {
public java.security.cert.X509Certificate[] getAcceptedIssuers() { return null; }
public void checkClientTrusted(X509Certificate[] certs, String authType) { }
public void checkServerTrusted(X509Certificate[] certs, String authType) { }
} };
SSLContext sc = SSLContext.getInstance("SSL");
sc.init(null, trustAllCerts, new java.security.SecureRandom());
SSLConnectionSocketFactory sslSocketFactory = new SSLConnectionSocketFactory(
sslcontext, NoopHostnameVerifier.INSTANCE);
HttpClients.custom()
.setSSLSocketFactory(sslSocketFactory)
.setSSLHostnameVerifier(NoopHostnameVerifier.INSTANCE)
.build();
}
catch (IOException | CertificateException | NoSuchAlgorithmException | KeyStoreException | KeyManagementException e) {
throw new BeanCreationException("Failed to create http client for ssl connection", e);
}
添加回答
舉報(bào)
0/150
提交
取消