Apache HttpClient 错误：javax.net.ssl.SSLPeerUnverifiedException：Peer Not Authenticated答案

【问题标题】：Apache HttpClient Error: javax.net.ssl.SSLPeerUnverifiedException: Peer Not AuthenticatedApache HttpClient 错误：javax.net.ssl.SSLPeerUnverifiedException：Peer Not Authenticated
【发布时间】：2016-05-26 14:41:08
【问题描述】：

我正在尝试配置 org.apache.http.client.HttpClient 以使用 https。这是客户端配置：

TrustManager[] trustManagers = new TrustManager[] { new DummyTrustManager() };

SSLContext sslContext = SSLContext.getInstance("TLS");
sslContext.init(keyManagers, trustManagers, null);

SSLSocketFactory sf = new SSLSocketFactory(SSLSocketFactory.ALLOW_ALL_HOSTNAME_VERIFIER);

Scheme scheme = new Scheme("https", 443, sf);
SchemeRegistry registry = new SchemeRegistry();
registry.register(scheme);

ThreadSafeClientConnManager cm = new ThreadSafeClientConnManager(registry);

DefaultHttpClient client = new DefaultHttpClient(cm, httpParameters);

这是DummyTrustManager的代码：

public static class DummyTrustManager implements X509TrustManager {

    @Override
    public void checkClientTrusted(X509Certificate[] chain, String authType) throws CertificateException {
    }

    @Override
    public void checkServerTrusted(X509Certificate[] chain, String authType) throws CertificateException {
    }

    @Override
    public X509Certificate[] getAcceptedIssuers() {
        return null;
    }
}

当我发送请求时，我得到了

 `javax.net.ssl.SSLPeerUnverifiedException: peer not authenticated`

可能是什么问题？

【问题讨论】：

标签： java https apache-httpclient-4.x

【解决方案1】：

你还需要调整TrustStrategy：

TrustStrategy acceptingTrustStrategy = new TrustStrategy() {
    @Override
    public boolean isTrusted(X509Certificate[] certificate, String authType) {
        return true;
    }
};
SSLSocketFactory sf = new SSLSocketFactory(acceptingTrustStrategy, SSLSocketFactory.ALLOW_ALL_HOSTNAME_VERIFIER);
...

查看完整示例：http://www.baeldung.com/httpclient-ssl

【讨论】：