ssl 忽略主机验证

ssl 忽略主机验证

 

javax.net.ssl.SSLException: Certificate for <103.xx.xx.xx> doesn't match common name of the certificate subject: *.xx.com.cn

 

 

可以：

SSLConnectionSocketFactory sslf = new SSLConnectionSocketFactory(sslcontext, new String[] { "TLSv1" },null, SSLConnectionSocketFactory.ALLOW_ALL_HOSTNAME_VERIFIER);

 

 

 in httpcliet4.3.3 ：

SSLConnectionSocketFactory sslsf =newSSLConnectionSocketFactory(sslContext,SSLConnectionSocketFactory.ALLOW_ALL_HOSTNAME_VERIFIER);CloseableHttpClient httpclient =HttpClients.custom().setSSLSocketFactory(sslsf).build();

 

 

参考：

https://stackoverflow.com/questions/7256955/java-sslexception-hostname-in-certificate-didnt-match