有没有办法在柑橘框架中关闭 ssl 验证？

Question

我想测试 https (api) 客户端。但我想关掉ssl validation柑橘。你能告诉我如何关闭 ssl 验证吗？(httpActionBuilder -> httpActionBuilder  .client("https://localhost") .send() .get() .header(....)这是自动检查ssl证书。我收到以下异常：PKIX 路径构建失败：sun.security.provider.certpath.SunCertPathBuilderException：无法找到请求目标的有效证书路径；嵌套异常是 javax.net.ssl.SSLHandshakeException。有没有办法关闭 ssl 验证（就像我们ssl在 postman 或任何其他框架中禁用验证一样）。我将如何将上下文添加到柑橘测试的 ssl 上下文http(httpActionBuilder -> httpActionBuilder .client(" https://....com ") .send() .get() .header(....)

Answer 1

添加以下类

class NonValidatingTrustManager implements X509TrustManager {

    @Override

    public void checkClientTrusted(X509Certificate[] x509Certificates, String s) throws CertificateException {

    }

    @Override

    public void checkServerTrusted(X509Certificate[] x509Certificates, String s) throws CertificateException {

    }

    @Override

    public X509Certificate[] getAcceptedIssuers() {

        return new X509Certificate[0];

    }

}

然后在 Spring 中@Configuration通过声明新 bean 覆盖默认的 SSLContext

@Bean

public SSLContext sslContext() throws KeyManagementException, NoSuchAlgorithmException {

    SSLContext ctx = SSLContext.getInstance("TLS"); // or try "SSL"

    ctx.init(null, new TrustManager[] { new NonValidatingTrustManager() }, null);

    return ctx;

}

更新

对于测试，您创建单独的配置类并将覆盖的 SSLContext 也放在那里：

@TestConfiguration

class TestConfig {

    @Bean

    public SSLContext sslContext() throws Exception {

        SSLContext ctx = SSLContext.getInstance("TLS"); // or try "SSL"

        ctx.init(null, new TrustManager[] { new NonValidatingTrustManager() }, null);

        return ctx;

    }

}

并在单元测试中使用它，例如：

@SpringBootTest(classes = { TestConfig.class })

class MyTest {

    ...

}

Answer 2

您可以尝试以下代码。我正在尝试允许所有受信任的证书，以便您可以进行 https 调用。

try {

TrustManager[] trustAllCerts = new TrustManager[] { new X509TrustManager() {

            public java.security.cert.X509Certificate[] getAcceptedIssuers() { return null; }

            public void checkClientTrusted(X509Certificate[] certs, String authType) { }

            public void checkServerTrusted(X509Certificate[] certs, String authType) { }

        } };

SSLContext sc = SSLContext.getInstance("SSL");

sc.init(null, trustAllCerts, new java.security.SecureRandom());

SSLConnectionSocketFactory sslSocketFactory = new SSLConnectionSocketFactory(

                sslcontext, NoopHostnameVerifier.INSTANCE);     

HttpClients.custom()

                .setSSLSocketFactory(sslSocketFactory)

                .setSSLHostnameVerifier(NoopHostnameVerifier.INSTANCE)

                .build();               

}

catch (IOException | CertificateException | NoSuchAlgorithmException | KeyStoreException | KeyManagementException e) {

        throw new BeanCreationException("Failed to create http client for ssl connection", e);

}