使用 PoolingNHttpClientConnectionManager 在 HttpClient 上禁用 SSL

debugcn 发表于 Dev

用户 3

我正在尝试在我的CloseableHttpAsyncClient. 下面是我使用的代码：

private synchronized CloseableHttpAsyncClient getCloseableClient() throws Exception {
    if (closeableHttpAsyncClient == null) {
        logger.info("New Async Client created ");
        closeableHttpAsyncClient = HttpAsyncClientBuilder.create()
                .setDefaultRequestConfig(createConnConfig())
                .setSSLHostnameVerifier(NoopHostnameVerifier.INSTANCE)
                .setSSLContext(new SSLContextBuilder().loadTrustMaterial(null, new TrustStrategy() {
                            @Override
                            public boolean isTrusted(java.security.cert.X509Certificate[] x509Certificates, String s) throws CertificateException {
                                return true;
                            }
                        }).build())
                // .setKeepAliveStrategy(kepAliveStrategy) TODO
                .setConnectionManager(createPoolingConnManager()).build();

        closeableHttpAsyncClient.start();
    }
    return closeableHttpAsyncClient;
}

但是，当我运行上述命令时，我仍然得到：

javax.net.ssl.SSLHandshakeException: General SSLEngine problem

这里可能有什么问题，我想我也必须修改我的PoolingNHttpClientConnectionManager。但是我不知道如何做到这一点。任何指针都会有所帮助

ok2c

您的代码的问题在于#setConnectionManager调用覆盖#setSSLContext使SSLContext实例无效。

要么让我们HttpAsyncClientBuilder在内部创建一个连接管理器

SSLContext sslContext = new SSLContextBuilder()
        .loadTrustMaterial(null, (x509Certificates, s) -> true)
        .build();

HttpAsyncClientBuilder.create()
        .setSSLHostnameVerifier(NoopHostnameVerifier.INSTANCE)
        .setSSLContext(sslContext)
        .build();

或者将SSLContext实例PoolingNHttpClientConnectionManager作为构造函数参数传递给。

SSLContext sslContext = new SSLContextBuilder()
        .loadTrustMaterial(null, (x509Certificates, s) -> true)
        .build();

Registry<SchemeIOSessionStrategy> registry = RegistryBuilder.<SchemeIOSessionStrategy>create()
    .register("http", NoopIOSessionStrategy.INSTANCE)
    .register("https", new SSLIOSessionStrategy(sslContext, NoopHostnameVerifier.INSTANCE))
    .build();

DefaultConnectingIOReactor ioReactor = new DefaultConnectingIOReactor();
HttpAsyncClientBuilder.create()
        .setConnectionManager(new PoolingNHttpClientConnectionManager(ioReactor, registry))
        .build();

本文收集自互联网，转载请注明来源。

如有侵权，请联系[email protected] 删除。