[Http]跳过SSL认证

package com.pccw.hktdcb.apiserver.util;

import it.sauronsoftware.base64.Base64;

import java.io.IOException;
import java.security.KeyManagementException;
import java.security.NoSuchAlgorithmException;
import java.security.cert.CertificateException;
import java.security.cert.X509Certificate;

import javax.net.ssl.SSLContext;
import javax.net.ssl.SSLException;
import javax.net.ssl.SSLSession;
import javax.net.ssl.SSLSocket;
import javax.net.ssl.TrustManager;
import javax.net.ssl.X509TrustManager;

import org.apache.http.HttpEntity;
import org.apache.http.HttpResponse;
import org.apache.http.HttpStatus;
import org.apache.http.client.ClientProtocolException;
import org.apache.http.client.HttpClient;
import org.apache.http.client.methods.HttpGet;
import org.apache.http.conn.ClientConnectionManager;
import org.apache.http.conn.scheme.PlainSocketFactory;
import org.apache.http.conn.scheme.Scheme;
import org.apache.http.conn.scheme.SchemeRegistry;
import org.apache.http.conn.ssl.SSLSocketFactory;
import org.apache.http.conn.ssl.X509HostnameVerifier;
import org.apache.http.impl.client.DefaultHttpClient;
import org.apache.http.params.CoreConnectionPNames;
import org.apache.http.util.EntityUtils;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;

public class HttpsRequestUtil {
	protected static final Logger logger = LoggerFactory
			.getLogger(HttpsRequestUtil.class);
	private static final int TIME_OUT = Integer.parseInt(SystemConfig
			.getProperty("https_client_timeout")) * 1000;

	public static HttpClient getHttpClient() {

		@SuppressWarnings("deprecation")
		HttpClient httpclient = new DefaultHttpClient();
		try {
			// Secure Protocol implementation.
			SSLContext ctx = SSLContext.getInstance("SSL");

			// Implementation of a trust manager for X509 certificates
			X509TrustManager tm = new X509TrustManager() {

				public void checkClientTrusted(X509Certificate[] xcs,
						String string) throws CertificateException {

				}

				public void checkServerTrusted(X509Certificate[] xcs,
						String string) throws CertificateException {
				}

				public X509Certificate[] getAcceptedIssuers() {
					return null;
				}
			};

			X509HostnameVerifier hostnameVerifier = new X509HostnameVerifier() {

				public boolean verify(String hostname, SSLSession session) {
					// TODO Auto-generated method stub
					return true;
				}

				public void verify(String arg0, SSLSocket arg1)
						throws IOException {
					// TODO Auto-generated method stub

				}

				public void verify(String arg0, X509Certificate arg1)
						throws SSLException {
					// TODO Auto-generated method stub

				}

				public void verify(String arg0, String[] arg1, String[] arg2)
						throws SSLException {
					// TODO Auto-generated method stub

				}
			};

			ctx.init(null, new TrustManager[] { tm }, null);
			SSLSocketFactory ssf = new SSLSocketFactory(ctx, hostnameVerifier);

			ClientConnectionManager ccm = httpclient.getConnectionManager();
			// register https protocol in httpclient's scheme registry
			SchemeRegistry sr = ccm.getSchemeRegistry();
			sr.register(new Scheme("https", 443, ssf));
			sr.register(new Scheme("http", 80, PlainSocketFactory
					.getSocketFactory()));

			// set Time out
			httpclient.getParams().setParameter(
					CoreConnectionPNames.CONNECTION_TIMEOUT, TIME_OUT);
			httpclient.getParams().setParameter(
					CoreConnectionPNames.SO_TIMEOUT, TIME_OUT);

		} catch (NoSuchAlgorithmException e) {
			// TODO Auto-generated catch block
			e.printStackTrace();
		} catch (KeyManagementException e) {
			// TODO Auto-generated catch block
			e.printStackTrace();
		}

		return httpclient;

	}

	public static String getHTTPSRequest(String url, String userName,
			String password) {

		logger.info("HttpsRequestUtil : getHTTPSRequest start............");
		logger.debug("url : " + url);
		String result = null;

		HttpGet httpget = new HttpGet(url);
		try {

			String authString = userName + ":" + password;
			String authStringEnc = new String(Base64.encode(authString
					.getBytes()));

			httpget.addHeader("Authorization", "Basic " + authStringEnc);
			httpget.addHeader("content-type", "application/json");
			httpget.addHeader("accept", "application/json");

			HttpClient httpclient = getHttpClient();
			HttpResponse response = httpclient.execute(httpget);
			if (response != null) {
				HttpEntity resEntity = response.getEntity();
				if (resEntity != null) {
					int httpStatus = response.getStatusLine().getStatusCode();
					if (httpStatus == HttpStatus.SC_OK) {
						result = EntityUtils.toString(resEntity, "UTF-8");
					} else {
						logger.error(
								"HttpsRequestUtil : getHTTPSRequest failed,  http status code is [{}]",
								httpStatus);
					}
				}
			}

			logger.debug("HttpsRequestUtil : getHTTPSRequest;result = "
					+ result);

		} catch (ClientProtocolException e) {
			logger.error(
					"HttpsRequestUtil : getHTTPSRequest error occur, Exception is [{}]",
					e.getMessage());
		} catch (IOException e) {
			logger.error(
					"HttpsRequestUtil : getHTTPSRequest error occur, Exception is [{}]",
					e.getMessage());
		} finally {
			httpget.releaseConnection();
		}

		logger.info("HttpsRequestUtil : getHTTPSRequest end........");
		return result;
	}

}