当前位置：首页 > news >正文

JDK 8调用HTTPS POST接口的SSL配置

news 2025/9/16 5:54:59

对于JDK 8调用HTTPS接口，需要进行适当的SSL配置。以下是针对JDK 8的修改方案：

java

import org.apache.http.HttpEntity;
import org.apache.http.HttpResponse;
import org.apache.http.client.config.RequestConfig;
import org.apache.http.client.methods.HttpPost;
import org.apache.http.conn.ssl.SSLConnectionSocketFactory;
import org.apache.http.conn.ssl.TrustStrategy;
import org.apache.http.entity.StringEntity;
import org.apache.http.impl.client.CloseableHttpClient;
import org.apache.http.impl.client.HttpClients;
import org.apache.http.ssl.SSLContexts;
import org.apache.http.util.EntityUtils;import javax.net.ssl.SSLContext;
import java.nio.charset.Charset;
import java.security.cert.X509Certificate;public static String getResult(String url, String param) {String returnValue = null;try {// 创建SSL上下文，信任所有证书（适用于测试环境）SSLContext sslContext = SSLContexts.custom().loadTrustMaterial(null, new TrustStrategy() {@Overridepublic boolean isTrusted(X509Certificate[] chain, String authType) {return true; // 信任所有证书}}).build();// JDK 8 不支持 TLSv1.3，只使用 TLSv1.2SSLConnectionSocketFactory sslSocketFactory = new SSLConnectionSocketFactory(sslContext,new String[]{"TLSv1.2"}, // JDK 8 只支持到 TLSv1.2null,SSLConnectionSocketFactory.getDefaultHostnameVerifier());// 创建HTTP客户端CloseableHttpClient httpclient = HttpClients.custom().setSSLSocketFactory(sslSocketFactory).build();try {RequestConfig config = RequestConfig.custom().setConnectTimeout(60000).setSocketTimeout(60000).build();HttpPost httppost = new HttpPost(url);httppost.addHeader("Content-type", "application/json; charset=utf-8");httppost.setHeader("Accept", "application/json");httppost.addHeader("User-Agent", "");httppost.setConfig(config);StringEntity entity = new StringEntity(param, Charset.forName("UTF-8"));httppost.setEntity(entity);HttpResponse resp = httpclient.execute(httppost);if (resp.getStatusLine().getStatusCode() == 200) {HttpEntity he = resp.getEntity();String respContent = EntityUtils.toString(he, "UTF-8");returnValue = respContent;}} catch (Exception e) {e.printStackTrace();} finally {try {httpclient.close();} catch (Exception e) {e.printStackTrace();}}} catch (Exception e) {e.printStackTrace();returnValue = "SSL configuration failed";}return returnValue;
}

JDK 8 特有的注意事项

TLS版本限制：
- JDK 8 最高支持到 TLSv1.2，不支持 TLSv1.3
- 在代码中明确指定只使用 TLSv1.2，避免尝试使用 TLSv1.3

密码套件配置：

如果需要，可以指定特定的密码套件：

java

SSLConnectionSocketFactory sslSocketFactory = new SSLConnectionSocketFactory(sslContext,new String[]{"TLSv1.2"},new String[]{"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","TLS_RSA_WITH_AES_128_GCM_SHA256","TLS_RSA_WITH_AES_256_GCM_SHA384"}, // 指定密码套件SSLConnectionSocketFactory.getDefaultHostnameVerifier());

系统属性配置：

可以通过设置系统属性来全局配置SSL：

java

System.setProperty("https.protocols", "TLSv1.2");
System.setProperty("jdk.tls.client.protocols", "TLSv1.2");

生产环境配置

对于生产环境，建议使用更安全的配置：

java

// 加载信任库
KeyStore trustStore = KeyStore.getInstance(KeyStore.getDefaultType());
try (InputStream is = new FileInputStream("truststore.jks")) {trustStore.load(is, "changeit".toCharArray());
}// 创建SSL上下文
SSLContext sslContext = SSLContexts.custom().loadTrustMaterial(trustStore, null).build();// 创建SSL连接工厂
SSLConnectionSocketFactory sslSocketFactory = new SSLConnectionSocketFactory(sslContext,new String[]{"TLSv1.2"},null,SSLConnectionSocketFactory.getDefaultHostnameVerifier());// 创建HTTP客户端
CloseableHttpClient httpclient = HttpClients.custom().setSSLSocketFactory(sslSocketFactory).build();