HttpClient同时设置SSLHostnameVerifier和ConnectionManager

Question

Registry<ConnectionSocketFactory> reg =RegistryBuilder<ConnectionSocketFactory>create().register("https", new  
SSLConnectionSocketFactory(ctx)).register("http", new PlainConnectionSocketFactory())
            .build();

    PoolingHttpClientConnectionManager cm = newPoolingHttpClientConnectionManager(reg);

    client = HttpClients.custom()
            .setConnectionManager(cm)
            .setDefaultRequestConfig(config)
            .setSSLHostnameVerifier(new NoopHostnameVerifier())
            .build();

我使用NoopH​​ostnameVerifier是因为我不想验证SSL，但是在我的ConnectionManager中存在必不可少的逻辑，并且没有机会忘记ConnectionManager。

问题是，如果我有ConnectionManager和SSLHostnameVerifier（NoopH​​ostnameVerifier），则会收到以下错误：

javax.net.ssl.SSLPeerUnverifiedException：对等方未通过身份验证

是什么导致此问题？

Answer 1

这对我有用。 我在这里找到的。

PoolingHttpClientConnectionManager cm;
        try {
            SSLContext sslContext = new SSLContextBuilder().loadTrustMaterial(null, new TrustSelfSignedStrategy()).build();
            clientBuilder.setSslcontext(sslContext);
            SSLConnectionSocketFactory sslSocketFactory = new SSLConnectionSocketFactory(sslContext, new AllowAllHostnameVerifier());
            Registry<ConnectionSocketFactory> socketFactoryRegistry = RegistryBuilder.<ConnectionSocketFactory>create()
                .register("http", PlainConnectionSocketFactory.getSocketFactory())
                .register("https", sslSocketFactory)
                .build();
            cm = new PoolingHttpClientConnectionManager(socketFactoryRegistry);
        } catch (NoSuchAlgorithmException | KeyManagementException | KeyStoreException e) {
            cm = new PoolingHttpClientConnectionManager();
        }

Answer 2

您需要使用NoopHostnameVerifier的单例

因此，将new NoopHostnameVerifier()更改为NoopHostnameVerifier.INSTANCE