java调用百度api接口报错javax.net.ssl.SSLHandshakeException PKIX path building failed unable to find valid certification path to requested target
报错信息
javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
解决方法
如果是百度的sdk，则原源码中有AipHttpClient这个类，打开post方法
public static AipResponse post(AipRequest request) {
String url;
String charset = request.getContentEncoding();
String content = request.getBodyStr();
HashMap<String, String> header = request.getHeaders();
AipResponse response = new AipResponse();
DataOutputStream out = null;
InputStream is = null;
try {
if (request.getParams().isEmpty()) {
url = request.getUri().toString();
}
else {
url = String.format("%s?%s", request.getUri().toString(), request.getParamStr());
}
URL console = new URL(url);
Proxy proxy = request.getConfig() == null ? Proxy.NO_PROXY : request.getConfig().getProxy();
HttpURLConnection conn = (HttpURLConnection) console.openConnection(proxy);
// set timeout
if (request.getConfig() != null) {
conn.setConnectTimeout(request.getConfig().getConnectionTimeoutMillis());
conn.setReadTimeout(request.getConfig().getSocketTimeoutMillis());
}
conn.setDoOutput(true);
// 添加header
for (Map.Entry<String, String> entry : header.entrySet()) {
conn.setRequestProperty(entry.getKey(), entry.getValue());
}
conn.connect();
out = new DataOutputStream(conn.getOutputStream());
out.write(content.getBytes(charset));
out.flush();
int statusCode = conn.getResponseCode();
response.setHeader(conn.getHeaderFields());
response.setStatus(statusCode);
response.setCharset(charset);
if (statusCode != 200) {
return response;
}
is = conn.getInputStream();
if (is != null) {
ByteArrayOutputStream outStream = new ByteArrayOutputStream();
byte[] buffer = new byte[1024];
int len = 0;
while ((len = is.read(buffer)) != -1) {
outStream.write(buffer, 0, len);
}
response.setBody(outStream.toByteArray());
}
return response;
} catch (MalformedURLException e) {
e.printStackTrace();
} catch (UnsupportedEncodingException e) {
e.printStackTrace();
} catch (IOException e) {
e.printStackTrace();
} finally {
if (out != null) {
try {
out.close();
} catch (IOException e) {
e.printStackTrace();
}
}
if (is != null) {
try {
is.close();
} catch (IOException e) {
e.printStackTrace();
}
}
}
return response;
}
修改为：
/*
* Copyright 2017 Baidu, Inc.
*
* Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with
* the License. You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on
* an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the
* specific language governing permissions and limitations under the License.
*/
package com.baidu.aip.http;
import java.io.ByteArrayOutputStream;
import java.io.DataOutputStream;
import java.io.IOException;
import java.io.InputStream;
import java.io.UnsupportedEncodingException;
import java.net.HttpURLConnection;
import java.net.MalformedURLException;
import java.net.Proxy;
import java.net.URL;
import java.util.HashMap;
import java.util.Map;
import javax.net.ssl.HttpsURLConnection;
import com.baidu.aip.util.SSL;
public class AipHttpClient {
/**
* post方式请求服务器(https协议)
*
* @param request 请求内容
* @return AipResponse
*/
public static AipResponse post(AipRequest request) {
String url;
String charset = request.getContentEncoding();
String content = request.getBodyStr();
HashMap<String, String> header = request.getHeaders();
AipResponse response = new AipResponse();
DataOutputStream out = null;
InputStream is = null;
try {
if (request.getParams().isEmpty()) {
url = request.getUri().toString();
}
else {
url = String.format("%s?%s", request.getUri().toString(), request.getParamStr());
}
URL console= new URL(null, url, new sun.net.www.protocol.https.Handler());
Proxy proxy = request.getConfig() == null ? Proxy.NO_PROXY : request.getConfig().getProxy();
HttpURLConnection conn = (HttpURLConnection) console.openConnection(proxy);
SSL addSSL = new SSL();
addSSL.trustAllHosts((HttpsURLConnection)conn);
((HttpsURLConnection) conn).setHostnameVerifier(addSSL.DO_NOT_VERIFY);
// set timeout
if (request.getConfig() != null) {
conn.setConnectTimeout(request.getConfig().getConnectionTimeoutMillis());
conn.setReadTimeout(request.getConfig().getSocketTimeoutMillis());
}
conn.setDoOutput(true);
// 添加header
for (Map.Entry<String, String> entry : header.entrySet()) {
conn.setRequestProperty(entry.getKey(), entry.getValue());
}
conn.connect();
out = new DataOutputStream(conn.getOutputStream());
out.write(content.getBytes(charset));
out.flush();
int statusCode = conn.getResponseCode();
response.setHeader(conn.getHeaderFields());
response.setStatus(statusCode);
response.setCharset(charset);
if (statusCode != 200) {
return response;
}
is = conn.getInputStream();
if (is != null) {
ByteArrayOutputStream outStream = new ByteArrayOutputStream();
byte[] buffer = new byte[1024];
int len = 0;
while ((len = is.read(buffer)) != -1) {
outStream.write(buffer, 0, len);
}
response.setBody(outStream.toByteArray());
}
return response;
} catch (MalformedURLException e) {
e.printStackTrace();
} catch (UnsupportedEncodingException e) {
e.printStackTrace();
} catch (IOException e) {
e.printStackTrace();
} finally {
if (out != null) {
try {
out.close();
} catch (IOException e) {
e.printStackTrace();
}
}
if (is != null) {
try {
is.close();
} catch (IOException e) {
e.printStackTrace();
}
}
}
return response;
}
}
修改的内容为：
将
URL console = new URL(url);
Proxy proxy = request.getConfig() == null ? Proxy.NO_PROXY : request.getConfig().getProxy();
HttpURLConnection conn = (HttpURLConnection) console.openConnection(proxy);
替换为：
URL console= new URL(null, url, new sun.net.www.protocol.https.Handler());
Proxy proxy = request.getConfig() == null ? Proxy.NO_PROXY : request.getConfig().getProxy();
HttpURLConnection conn = (HttpURLConnection) console.openConnection(proxy);
SSL addSSL = new SSL();
addSSL.trustAllHosts((HttpsURLConnection)conn);
((HttpsURLConnection) conn).setHostnameVerifier(addSSL.DO_NOT_VERIFY);
要用到的一个类SSL如下：
package com.baidu.aip.util;
import javax.net.ssl.HostnameVerifier;
import javax.net.ssl.HttpsURLConnection;
import javax.net.ssl.SSLContext;
import javax.net.ssl.SSLSession;
import javax.net.ssl.SSLSocketFactory;
import javax.net.ssl.TrustManager;
import javax.net.ssl.X509TrustManager;
public class SSL {
private static final TrustManager[] trustAllCerts = new TrustManager[]{new X509TrustManager() {
public java.security.cert.X509Certificate[] getAcceptedIssuers() {
return new java.security.cert.X509Certificate[]{};
}
@Override
public void checkClientTrusted(java.security.cert.X509Certificate[] arg0, String arg1)
throws java.security.cert.CertificateException {
// TODO Auto-generated method stub
}
@Override
public void checkServerTrusted(java.security.cert.X509Certificate[] arg0, String arg1)
throws java.security.cert.CertificateException {
// TODO Auto-generated method stub
}
}};
/**
* 设置不验证主机
*/
public static final HostnameVerifier DO_NOT_VERIFY = new HostnameVerifier() {
public boolean verify(String hostname, SSLSession session) {
return true;
}
};
/**
* 信任所有
*
* @param connection
* @return
*/
public static SSLSocketFactory trustAllHosts(HttpsURLConnection connection) {
SSLSocketFactory oldFactory = connection.getSSLSocketFactory();
try {
SSLContext sc = SSLContext.getInstance("TLS");
sc.init(null, trustAllCerts, new java.security.SecureRandom());
SSLSocketFactory newFactory = sc.getSocketFactory();
connection.setSSLSocketFactory(newFactory);
} catch (Exception e) {
e.printStackTrace();
}
return oldFactory;
}
}
fixed
没有一个冬天不可逾越，没有一个春天不会来临。最慢的步伐不是跬步，而是徘徊，最快的脚步不是冲刺，而是坚持。