Java - unable to find valid certification path to requested target

這是在實作HTTP GET請求時，遇到了認證上的問題導致的錯誤訊息，由於做請求需要以登入的身分才有權限，同時它又是HTTPS傳輸協定，因此還有SSL相關的設定。在這裡主要是利用Apache HttpClient來完成這個實作!

用到的相關Library如下：
org.apache.commons.httpclient_3.1.0.v201012070820.jar
org.apache.httpcomponents.httpclient_4.5.5.v20180409-1525.jar
org.apache.httpcomponents.httpcore_4.4.9.v20180409-1525.jar
commons-codec-1.15.jar
commons-logging-1.2.jar

#版本一：認證只做帳號、密碼設置
  2. CredentialsProvider credentialsPovider = new BasicCredentialsProvider();
  4. Credentials credentials = new UsernamePasswordCredentials("acc", "pwd");
  5. credentialsPovider.setCredentials(AuthScope.ANY, credentials);
  6.           
  7. HttpClientBuilder clientbuilder = HttpClients.custom();
  9. CloseableHttpClient httpclient = clientbuilder.build();
  11. HttpHost targetHost = new HttpHost("xxx.xxx.xxx", 443, "https");
  12. 	      
  13. AuthCache authCache = new BasicAuthCache();
  14. authCache.put(targetHost, new BasicScheme());
  15. HttpClientContext context = HttpClientContext.create();
  16. context.setCredentialsProvider(credentialsPovider);
  17. context.setAuthCache(authCache);
  19. HttpGet httpget = new HttpGet("https://xxx.xxx.xxx/xxx/xxx");
  20. httpget.addHeader("Content-Type", "application/json");
  22. HttpResponse response = httpclient.execute(httpget, context);
  23. if(response != null){
  24.     HttpEntity resEntity = response.getEntity();
  25.     if(resEntity != null){
  26.        //byte[] data = EntityUtils.toByteArray(resEntity);
  27.        System.out.println(EntityUtils.toString(resEntity, "utf-8"));
  28.     }
  29. }
  30. httpclient.close();

在做HTTP GET請求的回應時，除了HttpUriRequest外，還需要一個HttpContext，這個部分就會設置setCredentialsProvider的部分，provider又可以包含帳號、密碼的設置!
只是執行之後會發生unable to find valid certification path to requested target exception

#版本二：包含SSL配置
  2. CredentialsProvider credentialsPovider = new BasicCredentialsProvider();
  4. Credentials credentials = new UsernamePasswordCredentials("acc", "pwd");
  5. credentialsPovider.setCredentials(AuthScope.ANY, credentials);
  6.           
  7. HttpClientBuilder clientbuilder = HttpClients.custom();
  9. SSLContext sslContext=SSLContext.getInstance("SSL");
  10. TrustManager[] tm={new MyX509TrustManager()};
  11. sslContext.init(null, tm, new java.security.SecureRandom());
  13. clientbuilder = clientbuilder.setDefaultCredentialsProvider(credentialsPovider);
  14. clientbuilder.setSSLContext(sslContext);
  16. CloseableHttpClient httpclient = clientbuilder.build();
  18. HttpHost targetHost = new HttpHost("xxx.xxx.xxx", 443, "https");
  19. 	      
  20. AuthCache authCache = new BasicAuthCache();
  21. authCache.put(targetHost, new BasicScheme());
  22. HttpClientContext context = HttpClientContext.create();
  23. //context.setCredentialsProvider(credentialsPovider);
  24. context.setAuthCache(authCache);
  26. HttpGet httpget = new HttpGet("https://xxx.xxx.xxx/xxx/xxx");
  27. httpget.addHeader("Content-Type", "application/json");
  29. HttpResponse response = httpclient.execute(httpget, context);
  30. if(response != null){
  31.     HttpEntity resEntity = response.getEntity();
  32.     if(resEntity != null){
  33.        //byte[] data = EntityUtils.toByteArray(resEntity);
  34.        System.out.println(EntityUtils.toString(resEntity, "utf-8"));
  35.     }
  36. }
  37. httpclient.close();
  2. class MyX509TrustManager implements X509TrustManager{
  4. 	@Override
  5. 	public void checkClientTrusted(X509Certificate[] arg0, String arg1) throws CertificateException {
  6. 		// TODO Auto-generated method stub
  7. 		
  8. 	}
  10. 	@Override
  11. 	public void checkServerTrusted(X509Certificate[] arg0, String arg1) throws CertificateException {
  12. 		// TODO Auto-generated method stub
  13. 		
  14. 	}
  16. 	@Override
  17. 	public X509Certificate[] getAcceptedIssuers() {
  18. 		// TODO Auto-generated method stub
  19. 		return null;
  20. 	}
  21. 	
  22. }

改由HttpClientBuilder設置setDefaultCredentialsProvider、setSSLContext

執行結果如下:

留言

張貼留言