如何修复证书中的主机名不匹配

Question

I'm making HTTP request to a https website using Unirest for Java, but I have problem with SSL certificate. Exception message - javax.net.ssl.SSLException: hostname in certificate didn't match:

Page: www.ceskereality.cz

If I open it in browser (I'm using Google Chrome on Windows 10), it works...

I tried this, but it isn't working

SSLContext sslcontext = SSLContexts.custom()
                .loadTrustMaterial(null, new TrustSelfSignedStrategy())
                .build();

SSLConnectionSocketFactory sslsf = new SSLConnectionSocketFactory(sslcontext,SSLConnectionSocketFactory.ALLOW_ALL_HOSTNAME_VERIFIER);
CloseableHttpClient httpclient = HttpClients.custom()
                .setSSLSocketFactory(sslsf)
                .build();
Unirest.setHttpClient(httpclient);

Answer 1

下载服务器证书并将其放在您的cacert中，然后重新启动Java应用程序。

Answer 2

The server requires that the client uses Server Name Indication (SNI) in order to get the correct certificate. If no SNI is used a certificate for ci.cz instead of ceskereality.cz is returned which causes the error you see.

I'm not familiar with Unirest but it is likely that the library you use does not support SNI or that you are using it with an older Java version which does not have SNI enabled.