无根证书时访问 https（httpclient）

1. httpclient 4.2.3

1.1 download url
http://archive.apache.org/dist/httpcomponents/httpclient/binary/

1.2 依赖 jar
commons-logging-1.1.1.jar
httpclient-4.2.3.jar
httpcore-4.2.2.jar

1.3 示例代码

import java.io.IOException;
import java.net.Socket;
import java.security.cert.CertificateException;
import java.security.cert.X509Certificate;

import javax.net.ssl.SSLContext;
import javax.net.ssl.SSLSocket;
import javax.net.ssl.TrustManager;
import javax.net.ssl.X509TrustManager;

import org.apache.http.HttpResponse;
import org.apache.http.client.HttpClient;
import org.apache.http.client.methods.HttpGet;
import org.apache.http.conn.scheme.PlainSocketFactory;
import org.apache.http.conn.scheme.Scheme;
import org.apache.http.conn.scheme.SchemeRegistry;
import org.apache.http.conn.ssl.SSLSocketFactory;
import org.apache.http.impl.client.DefaultHttpClient;
import org.apache.http.impl.conn.PoolingClientConnectionManager;
import org.apache.http.params.HttpParams;
import org.apache.http.util.EntityUtils;

public class HttpsClient {

	public static void main(String[] args) throws Exception {
		SSLContext sslContext = SSLContext.getInstance("TLS");
		sslContext.init(null, new TrustManager[]{new MyTrustManager()}, null);
		SSLSocketFactory sslSocketFactory = new MySSLSocketFactory(sslContext);
		
		SchemeRegistry schemeRegister = new SchemeRegistry();
		schemeRegister.register(new Scheme("http", 80, PlainSocketFactory.getSocketFactory()));
		schemeRegister.register(new Scheme("https", 443, sslSocketFactory));
		
		PoolingClientConnectionManager cm = new PoolingClientConnectionManager(schemeRegister);
		cm.setMaxTotal(200);                // 所有主机的最大并发连接数
		cm.setDefaultMaxPerRoute(100);      // 单个主机的最大并发连接数
		
		HttpGet get = new HttpGet("https://kyfw.12306.cn/otn/login/init");
		HttpClient httpClient = new DefaultHttpClient(cm);
		HttpResponse response = httpClient.execute(get);
		String respStr = EntityUtils.toString(response.getEntity());
		System.out.println(respStr);
	}

}
class MyTrustManager implements X509TrustManager {
	@Override
	public void checkClientTrusted(X509Certificate[] chain, String authType)
			throws CertificateException {
	}
	
	@Override
	public void checkServerTrusted(X509Certificate[] chain, String authType)
			throws CertificateException {
	}
	@Override
	public X509Certificate[] getAcceptedIssuers() {
		return null;
	}
}
class MySSLSocketFactory extends SSLSocketFactory {
	public MySSLSocketFactory(SSLContext sslContext) {
		super(sslContext, ALLOW_ALL_HOSTNAME_VERIFIER);
	}
	
	@Override
	public Socket createSocket(HttpParams params) throws IOException {
		Socket socket = super.createSocket(params);
		if (socket instanceof SSLSocket) {
			// Allow TLSv1 protocol only
			((SSLSocket)socket).setEnabledProtocols(new String[]{"TLSv1"});
		}
		return socket;
	}
}

2. httpclient 4.3.6
2.1 download url
http://archive.apache.org/dist/httpcomponents/httpclient/binary/

2.2 依赖 jar
commons-logging-1.1.3.jar
httpclient-4.3.6.jar
httpcore-4.3.3.jar

2.3 示例代码

import java.security.cert.CertificateException;
import java.security.cert.X509Certificate;

import javax.net.ssl.SSLContext;
import javax.net.ssl.TrustManager;
import javax.net.ssl.X509TrustManager;

import org.apache.http.HttpResponse;
import org.apache.http.client.methods.HttpGet;
import org.apache.http.config.Registry;
import org.apache.http.config.RegistryBuilder;
import org.apache.http.conn.socket.ConnectionSocketFactory;
import org.apache.http.conn.socket.PlainConnectionSocketFactory;
import org.apache.http.conn.ssl.SSLConnectionSocketFactory;
import org.apache.http.impl.client.CloseableHttpClient;
import org.apache.http.impl.client.HttpClients;
import org.apache.http.impl.conn.PoolingHttpClientConnectionManager;
import org.apache.http.util.EntityUtils;

public class HttpsClient {

	public static void main(String[] args) throws Exception {
		SSLContext sslContext = SSLContext.getInstance("TLS");
		sslContext.init(null, new TrustManager[]{new MyTrustManager()}, null);
		SSLConnectionSocketFactory sslSocketFactory = new SSLConnectionSocketFactory(
                sslContext, new String[]{"TLSv1"}, null, SSLConnectionSocketFactory.ALLOW_ALL_HOSTNAME_VERIFIER);
		
		Registry<ConnectionSocketFactory> register = RegistryBuilder.<ConnectionSocketFactory>create()
		        .register("http", PlainConnectionSocketFactory.getSocketFactory())
		        .register("https", sslSocketFactory).build();
		
		PoolingHttpClientConnectionManager cm = new PoolingHttpClientConnectionManager(register);
		cm.setMaxTotal(200);                // 所有主机的最大并发连接数
		cm.setDefaultMaxPerRoute(100);      // 单个主机的最大并发连接数
		
		HttpGet get = new HttpGet("https://kyfw.12306.cn/otn/login/init");
		CloseableHttpClient httpClient = HttpClients.custom().setConnectionManager(cm).build();
		HttpResponse response = httpClient.execute(get);
		String respStr = EntityUtils.toString(response.getEntity());
		System.out.println(respStr);
	}
}
class MyTrustManager implements X509TrustManager {
	@Override
	public void checkClientTrusted(X509Certificate[] chain, String authType)
			throws CertificateException {
	}
	
	@Override
	public void checkServerTrusted(X509Certificate[] chain, String authType)
			throws CertificateException {
	}
	@Override
	public X509Certificate[] getAcceptedIssuers() {
		return null;
	}
}

-- END