有没有办法在柑橘框架中关闭 ssl 验证？

Question

我想测试 https (api) 客户端。

但我想关掉ssl validation柑橘。你能告诉我如何关闭 ssl 验证吗？

(httpActionBuilder -> httpActionBuilder 
.client("https://localhost") .send() .get() .header(....)

这是自动检查ssl证书。

我收到以下异常：

PKIX 路径构建失败：sun.security.provider.certpath.SunCertPathBuilderException：无法找到请求目标的有效证书路径；嵌套异常是 javax.net.ssl.SSLHandshakeException。

有没有办法关闭 ssl 验证（就像我们ssl在 postman 或任何其他框架中禁用验证一样）。

我将如何将上下文添加到柑橘测试的 ssl 上下文

http(httpActionBuilder -> httpActionBuilder .client(" https://....com ") .send() .get() .header(....)

Answer 1

添加以下类class NonValidatingTrustManager implements X509TrustManager {    @Override    public void checkClientTrusted(X509Certificate[] x509Certificates, String s) throws CertificateException {    }    @Override    public void checkServerTrusted(X509Certificate[] x509Certificates, String s) throws CertificateException {    }    @Override    public X509Certificate[] getAcceptedIssuers() {        return new X509Certificate[0];    }}然后在 Spring 中@Configuration通过声明新 bean 覆盖默认的 SSLContext@Beanpublic SSLContext sslContext() throws KeyManagementException, NoSuchAlgorithmException {    SSLContext ctx = SSLContext.getInstance("TLS"); // or try "SSL"    ctx.init(null, new TrustManager[] { new NonValidatingTrustManager() }, null);    return ctx;}更新对于测试，您创建单独的配置类并将覆盖的 SSLContext 也放在那里：@TestConfigurationclass TestConfig {    @Bean    public SSLContext sslContext() throws Exception {        SSLContext ctx = SSLContext.getInstance("TLS"); // or try "SSL"        ctx.init(null, new TrustManager[] { new NonValidatingTrustManager() }, null);        return ctx;    }}并在单元测试中使用它，例如：@SpringBootTest(classes = { TestConfig.class })class MyTest {    ...}

Answer 2

您可以尝试以下代码。我正在尝试允许所有受信任的证书，以便您可以进行 https 调用。try {TrustManager[] trustAllCerts = new TrustManager[] { new X509TrustManager() {            public java.security.cert.X509Certificate[] getAcceptedIssuers() { return null; }            public void checkClientTrusted(X509Certificate[] certs, String authType) { }            public void checkServerTrusted(X509Certificate[] certs, String authType) { }        } };SSLContext sc = SSLContext.getInstance("SSL");sc.init(null, trustAllCerts, new java.security.SecureRandom());SSLConnectionSocketFactory sslSocketFactory = new SSLConnectionSocketFactory(                sslcontext, NoopHostnameVerifier.INSTANCE);     HttpClients.custom()                .setSSLSocketFactory(sslSocketFactory)                .setSSLHostnameVerifier(NoopHostnameVerifier.INSTANCE)                .build();               }catch (IOException | CertificateException | NoSuchAlgorithmException | KeyStoreException | KeyManagementException e) {        throw new BeanCreationException("Failed to create http client for ssl connection", e);}