Java发送HTTPS请求

2023-03-08 07:32:41

前言

上篇文章介绍了 java 发送 http 请求，大家都知道发送http是不安全的。我也是由于对接了其他企业后总结了一套发送 https的工具。大家网上找方法很多的，但是可不是你粘过来就能用啊，我也是踩过坑的，所以我这个工具，只要粘贴到你们自己项目里就可以用。我的工具跟网上没什么区别，唯一的区别是我亲身实战过，把需要注意的细节列出来，不让大家浪费时间。

正文

本文只介绍发送 post 请求，既然选择了 https 就不会用get，因为get也是不安全的。

读前须知

我会把需要依赖的包和引入的包先贴给大家，防止大家引用错误。

<dependency>

            <groupId>org.apache.httpcomponents</groupId>

            <artifactId>httpcore</artifactId>

            <version>4.4.8</version>

        </dependency>

        <dependency>

            <groupId>org.apache.httpcomponents</groupId>

            <artifactId>httpclient</artifactId>

            <version>4.5.3</version>

        </dependency>

        <dependency>

            <groupId>org.testng</groupId>

            <artifactId>testng</artifactId>

            <version>6.11</version>

            <scope>test</scope>

        </dependency>

import org.apache.http.conn.ClientConnectionManager;

import org.apache.http.conn.scheme.Scheme;

import org.apache.http.conn.scheme.SchemeRegistry;

import org.apache.http.conn.ssl.SSLSocketFactory;

import org.apache.http.impl.client.DefaultHttpClient;

import javax.net.ssl.SSLContext;

import javax.net.ssl.TrustManager;

import javax.net.ssl.X509TrustManager;

import java.security.cert.CertificateException;

import java.security.cert.X509Certificate;

<----工具类---->

import org.apache.http.HttpEntity;

import org.apache.http.HttpResponse;

import org.apache.http.HttpStatus;

import org.apache.http.NameValuePair;

import org.apache.http.client.entity.UrlEncodedFormEntity;

import org.apache.http.client.methods.HttpPost;

import org.apache.http.entity.StringEntity;

import org.apache.http.impl.client.DefaultHttpClient;

import org.apache.http.message.BasicNameValuePair;

import org.apache.http.util.EntityUtils;

import org.slf4j.Logger;

import org.slf4j.LoggerFactory;

import java.util.ArrayList;

import java.util.Iterator;

import java.util.List;

import java.util.Map;

HTTPS 发送 POST 请求

一共需要两个类，不要问为什么，复制过去就能用。

public class SSLClient extends DefaultHttpClient {

    public SSLClient() throws Exception {

        super();

        //传输协议需要根据自己的判断

        SSLContext ctx = SSLContext.getInstance("TLS");

        X509TrustManager tm = new X509TrustManager() {

            @Override

            public void checkClientTrusted(X509Certificate[] chain,

                                           String authType) throws CertificateException {

            }

            @Override

            public void checkServerTrusted(X509Certificate[] chain,

                                           String authType) throws CertificateException {

            }

            @Override

            public X509Certificate[] getAcceptedIssuers() {

                return null;

            }

        };

        ctx.init(null, new TrustManager[]{tm}, null);

        SSLSocketFactory ssf = new SSLSocketFactory(ctx, SSLSocketFactory.ALLOW_ALL_HOSTNAME_VERIFIER);

        ClientConnectionManager ccm = this.getConnectionManager();

        SchemeRegistry sr = ccm.getSchemeRegistry();

        sr.register(new Scheme("https", 443, ssf));

    }

}

这里发送 https 的操作有两个，一个是传 json ，一个是传 map ，大家根据自己需要自行复制使用

第一种是传 json 作为参数

参数说明：

url：url

map：json参数

charset：写死 utf-8

public String doPost(String url, String map, String charset) {

        org.apache.http.client.HttpClient httpClient = null;

        HttpPost httpPost = null;

        String result = null;

        try {

            httpClient = new SSLClient();

            httpPost = new HttpPost(url);

            //设置参数

            httpPost.addHeader("Accept", "application/json");

httpPost.addHeader("Content-Type", "application/json;charset=UTF-8");

            StringEntity stringEntity = new StringEntity(map);

            stringEntity.setContentEncoding("UTF-8");

            stringEntity.setContentType("application/json");

            httpPost.setEntity(stringEntity);

            HttpResponse response = httpClient.execute(httpPost);

            if (response != null) {

                HttpEntity resEntity = response.getEntity();

                if (resEntity != null) {

                  result = EntityUtils.toString(resEntity, charset);

                }

            }

        } catch (Exception ex) {

            ex.printStackTrace();

        }

        return result;

    }

测试类，送大家一个MD5加密，其实我就懒得删掉了。

private String url = "https://www.xxxxxxxx.com/openapi/page/gettoken";

private String charset = "utf-8";

private HttpClient httpClientUtil = new HttpClient();

@Test

    public void HttpsPostTest() throws Exception {

        String ver = "1.0";

        String msgId = "91b024e3-06ca-4a79-9993-1472d0fdb973";

        String appId = "300011853779";

        String timestamp = new SimpleDateFormat("yyyyMMddHHmmssSSS").format(new Date());

        String appKey = "A0702827F21C9CC7DDC93AEF24B6B16B";

        String sign = md5(ver + appId + msgId + timestamp + appKey).toUpperCase();

        result.put("ver", ver);

        result.put("msgId", msgId);

        result.put("appId", appId);

        result.put("timestamp", timestamp);

        result.put("openType", "1");

        result.put("message", "");

        result.put("abilityId", "");

        result.put("expandParams", "");

        result.put("signType", "1");

        result.put("sign", sign);

        String encryptStr = result.toString();

        System.out.println("encryptStr：" + encryptStr);

        String httpOrgCreateTestRtn = httpClientUtil.doPost(url, encryptStr, charset);

        System.out.println("result:" + httpOrgCreateTestRtn);

    }

    public static String md5(String text) {

        String result="";

        try {

            MessageDigest md = MessageDigest.getInstance("MD5");

            md.update(text.getBytes("UTF-8"));

            byte b[] = md.digest();

            int i;

            StringBuffer buf = new StringBuffer("");

            for (int offset = 0; offset < b.length; offset++) {

                i = b[offset];

                if (i < 0)

                    i += 256;

                if (i < 16)

                    buf.append("0");

                buf.append(Integer.toHexString(i));

            }

            result = buf.toString();

//       System.out.println("result: " + buf.toString());// 32位的加密

//       System.out.println("result: " + buf.toString().substring(8, 24));// 16位的加密

        } catch (NoSuchAlgorithmException e) {

            // TODO Auto-generated catch block

        } catch (UnsupportedEncodingException e) {

            // TODO Auto-generated catch block

        }

        return result;

    }

第二种传map作为参数

public String doPost(String url, Map<String,String> map, String charset) {

        org.apache.http.client.HttpClient httpClient = null;

        HttpPost httpPost = null;

        String result = null;

        try {

            httpClient = new SSLClient();

            httpPost = new HttpPost(url);

            //设置参数

            List<NameValuePair> list = new ArrayList<NameValuePair>();

            Iterator iterator = map.entrySet().iterator();

            while (iterator.hasNext()) {

                Map.Entry<String, String> elem = (Map.Entry<String, String>) iterator.next();

       list.add(new BasicNameValuePair(elem.getKey(), elem.getValue()));

            }

            if (list.size() > 0) {

      UrlEncodedFormEntity entity = new UrlEncodedFormEntity(list, charset);

                entity.setContentType("application/json");

                httpPost.setHeader("Accept", "application/json");

  httpPost.setHeader("Content-type", "application/json;charset=utf-8");

                httpPost.setEntity(entity);

            }

            HttpResponse response = httpClient.execute(httpPost);

            if (response != null) {

                HttpEntity resEntity = response.getEntity();

                if (resEntity != null) {

                    result = EntityUtils.toString(resEntity, charset);

                }

            }

        } catch (Exception ex) {

            ex.printStackTrace();

        }

        return result;

    }

发送的时候大家把上面 json 测试的demo 中 JSONObject 改成Map 就可以。

码农公寓

前言

正文

HTTPS 发送 POST 请求

相关文章