httpclient 中使用SSL连接 ，信任任何证书和连接的实现

项目中需要连接SSL服务器，但是不需要客户端安装任何证书，也不校验任何服务器证书的正确与否。代码如下：

protected ConnectionSocketFactory createDefaultSecureSocketFactory() 

{

try {

SSLContext ctx = SSLContext.getInstance("SSL");

X509TrustManager tm = new X509TrustManager() {  

public X509Certificate[] getAcceptedIssuers() {

return null;

}

public void checkServerTrusted(X509Certificate[] certs, String authType)

throws CertificateException {

return;

}

public void checkClientTrusted(X509Certificate[] certs, String authType)

throws CertificateException {

return;

} 

       };  

ctx.init(null, new TrustManager[] { tm }, null);

final SSLConnectionSocketFactory ssf = new SSLConnectionSocketFactory(ctx,SSLConnectionSocketFactory.ALLOW_ALL_HOSTNAME_VERIFIER);

       return ssf;

} catch (NoSuchAlgorithmException e) {

DCALogManager.Error("SSL Connection Failure!",10003,e);

} catch (KeyManagementException e) {

DCALogManager.Error("SSL Connection Failure!",10003,e);

}  

  return SSLConnectionSocketFactory.getSocketFactory();

}

其实httpClient中的SSLConnectionSocketFactory是专门管理SSL的工程类，仔细研读一下就可以名表其中的大部分原理。

本文出自 “java技术” 博客，转载请与作者联系！