如何在 Java 中忽略客户端-服务器认证？

2024-03-07 16:11:31

在 Java 中忽略客户端-服务器认证

问题

在尝试从 HTTPS 服务器下载文件时，你可能会遇到以下错误：

sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

这表明存在证书问题，阻止了客户端与服务器之间的身份验证。

解决方案

要忽略客户端-服务器身份验证，需要在 HttpAsyncClient 中禁用 SSL 证书验证。以下是详细步骤：

创建 HttpAsyncClientBuilder 对象：

HttpAsyncClientBuilder clientBuilder = HttpAsyncClientBuilder.create();

禁用 SSL 证书验证：

clientBuilder.setSSLContext(SSLContexts.createDefault());
clientBuilder.disableCookieManagement();
clientBuilder.disableAuthCaching();

构建 HttpAsyncClient：

HttpAsyncClient httpclient = clientBuilder.build();

使用已禁用 SSL 证书验证的 HttpAsyncClient 执行请求：

HttpResponse response = httpclient.execute(request, new ResponseCallback()).get();

代码示例

以下修改后的代码示例禁用了 SSL 证书验证：

import org.apache.http.HttpResponse;
import org.apache.http.client.methods.HttpAsyncGet;
import org.apache.http.client.methods.HttpAsyncPost;
import org.apache.http.client.utils.URIUtils;
import org.apache.http.concurrent.FutureCallback;
import org.apache.http.entity.StringEntity;
import org.apache.http.impl.nio.client.DefaultHttpAsyncClient;
import org.apache.http.impl.nio.client.HttpAsyncClientBuilder;
import org.apache.http.nio.client.HttpAsyncClient;
import org.apache.http.nio.entity.NStringEntity;

import java.io.FileOutputStream;
import java.net.URI;

public class RSDDownloadFile {
    static FileOutputStream fos;

    public void DownloadFile(String URI, String Request) throws Exception {
        java.net.URI uri = URIUtils.createURI("https", "176.66.3.69:6443", -1, "download.aspx",
                "Lang=EN&AuthToken=package", null);
        System.out.println("URI Query: " + uri.toString());

        // 创建 HttpAsyncClientBuilder 对象
        HttpAsyncClientBuilder clientBuilder = HttpAsyncClientBuilder.create();

        // 禁用 SSL 证书验证
        clientBuilder.setSSLContext(SSLContexts.createDefault());
        clientBuilder.disableCookieManagement();
        clientBuilder.disableAuthCaching();

        // 构建 HttpAsyncClient
        HttpAsyncClient httpclient = clientBuilder.build();

        try {
            // 使用已禁用 SSL 证书验证的 HttpAsyncClient 执行请求
            FutureCallback<HttpResponse> callback = new ResponseCallback();
            httpclient.execute(new HttpAsyncGet(uri), callback);

            // 等待响应
            HttpResponse response = callback.get();
            if (response.getStatusLine().getStatusCode() == 200) {
                System.out.println("\nRequest successfully executed");
                fos = new FileOutputStream("Response.html");
            } else {
                System.out.println("Request failed: " + response.getStatusLine());
            }
        } catch (Exception e) {
            System.out.println("[DownloadFile] Exception: " + e.getMessage());
        } finally {
            System.out.println("Shutting down");
            httpclient.shutdown();
        }
        System.out.println("Done");
    }

    static class ResponseCallback implements FutureCallback<HttpResponse> {

        @Override
        public void completed(final HttpResponse response) {
            System.out.println("Response: " + response.getStatusLine());
            try {
                while (response.getEntity().getContent().read() != -1) {
                    fos.write(response.getEntity().getContent().read());
                }
            } catch (Exception e) {
                System.out.println("[onResponseReceived] Exception: " + e.getMessage());
            }
        }

        @Override
        public void failed(final Exception e) {
            System.out.println("Request failed: " + e.getMessage());
        }

        @Override
        public void cancelled() {
            System.out.println("Request cancelled");
        }
    }
}