如何为每个URL连接设置自定义SSLSocketFactory的TrustManager

从javadoc中我们可以看到javax.net.ssl.HttpsURLConnection提供了一个静态方法来用setDefaultSSLSocketFory（）方法覆盖。这样，您就可以提供一个自定义javax.net.ssl.TrustManager，它可以验证您自己的CA证书握手和验证等。但是，这将覆盖JVM中所有“ https” URL的默认值！

那么，如何仅覆盖一个https URL？再次查看javax.net.ssl.HttpsURLConnection，我们看到了setSSLSocketFactory（）的实例方法，但是我们无法直接实例化HttpsURLConnection对象！我花了一些时间才意识到java.net.URL实际上是其实现的工厂类！可以使用新的URL（“ https：// localhost”）.openConnection（）获得这样的实例。

为了完成本文，我将提供一个简单的工作示例来演示这一点。

package zemian;import java.io.BufferedReader;
import java.io.InputStream;
import java.io.InputStreamReader;
import java.net.URL;
import java.net.URLConnection;
import java.security.SecureRandom;
import java.security.cert.X509Certificate;import javax.net.ssl.HttpsURLConnection;
import javax.net.ssl.SSLContext;
import javax.net.ssl.SSLSocketFactory;
import javax.net.ssl.TrustManager;
import javax.net.ssl.X509TrustManager;public class WGetText {public static void main(String[] args) throws Exception {String urlString = System.getProperty("url", "https://google.com");URL url = new URL(urlString);URLConnection urlConnection = url.openConnection();HttpsURLConnection httpsUrlConnection = (HttpsURLConnection) urlConnection;SSLSocketFactory sslSocketFactory = createSslSocketFactory();httpsUrlConnection.setSSLSocketFactory(sslSocketFactory);try (InputStream inputStream = httpsUrlConnection.getInputStream()) {BufferedReader reader = new BufferedReader(new InputStreamReader(inputStream));String line = null;while ((line = reader.readLine()) != null) {System.out.println(line);}}}private static SSLSocketFactory createSslSocketFactory() throws Exception {TrustManager[] byPassTrustManagers = new TrustManager[] { new X509TrustManager() {public X509Certificate[] getAcceptedIssuers() {return new X509Certificate[0];}public void checkClientTrusted(X509Certificate[] chain, String authType) {}public void checkServerTrusted(X509Certificate[] chain, String authType) {}} };SSLContext sslContext = SSLContext.getInstance("TLS");sslContext.init(null, byPassTrustManagers, new SecureRandom());return sslContext.getSocketFactory();}
}