由于项目需要，需要调用第三方的API接口，为了简单方便与快速开发，便采用了httpClient来进行调用。

org.apache.httpcomponents

httpclient

4.5.6

但在第三方的一个HTTPS的接口时，IDE中报了如下错误。

javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

解决办法：

将httpClient中关于证书认证的实现机制注释掉，即不对任何https的证书进行校验。代码如下：

import org.apache.http.config.Registry;

import org.apache.http.config.RegistryBuilder;

import org.apache.http.conn.socket.ConnectionSocketFactory;

import org.apache.http.conn.socket.PlainConnectionSocketFactory;

import org.apache.http.conn.ssl.NoopHostnameVerifier;

import org.apache.http.conn.ssl.SSLConnectionSocketFactory;

import org.apache.http.impl.client.CloseableHttpClient;

import org.apache.http.impl.client.HttpClients;

import org.apache.http.impl.conn.PoolingHttpClientConnectionManager;

import javax.net.ssl.SSLContext;

import javax.net.ssl.TrustManager;

import javax.net.ssl.X509TrustManager;

import java.security.KeyManagementException;

import java.security.NoSuchAlgorithmException;

import java.security.cert.X509Certificate;

/**

* 信任https证书

*

* @author puhaiyang

* @date 2018/11/14

*/

public class SslUtil {

public static CloseableHttpClient SslHttpClientBuild() {

Registry socketFactoryRegistry = RegistryBuilder.create()

.register("http", PlainConnectionSocketFactory.INSTANCE)

.register("https", trustAllHttpsCertificates())

.build();

//创建ConnectionManager，添加Connection配置信息

PoolingHttpClientConnectionManager connectionManager = new PoolingHttpClientConnectionManager(socketFactoryRegistry);

CloseableHttpClient httpClient = HttpClients.custom().setConnectionManager(connectionManager).build();

return httpClient;

}

/**

* 信任所有证书

*/

private static SSLConnectionSocketFactory trustAllHttpsCertificates() {

SSLConnectionSocketFactory socketFactory = null;

TrustManager[] trustAllCerts = new TrustManager[1];

TrustManager tm = new miTM();

trustAllCerts[0] = tm;

SSLContext sc = null;

try {

sc = SSLContext.getInstance("TLS");//sc = SSLContext.getInstance("TLS")

sc.init(null, trustAllCerts, null);

socketFactory = new SSLConnectionSocketFactory(sc, NoopHostnameVerifier.INSTANCE);

//HttpsURLConnection.setDefaultSSLSocketFactory(sc.getSocketFactory());

} catch (NoSuchAlgorithmException e) {

e.printStackTrace();

} catch (KeyManagementException e) {

e.printStackTrace();

}

return socketFactory;

}

static class miTM implements TrustManager, X509TrustManager {

public X509Certificate[] getAcceptedIssuers() {

return null;

}

public void checkServerTrusted(X509Certificate[] certs, String authType) {

//don't check

}

public void checkClientTrusted(X509Certificate[] certs, String authType) {

//don't check

}

}

}

然后将以前的httpClient生成的代码用上写刚刚写的这个来进行生成就可以了！

// 创建httpClient对象

// CloseableHttpClient httpClient = HttpClients.createDefault();

CloseableHttpClient httpClient = SslUtil.SslHttpClientBuild();