Java https摘要请求失败，出现安全异常
我正在使用Aapache httpclient代码来读取具有摘要身份验证的url。我被违反了安全规定。此url/用户名/密码在浏览器中工作正常。怎么了Java https摘要请求失败，出现安全异常,java,apache-httpclient-4.x,digest-authentication,Java,Apache Httpclient 4.x,Digest Authentication,我正在使用Aapache httpclient代码来读取具有摘要身份验证的url。我被违反了安全规定。此url/用户名/密码在浏览器中工作正常。怎么了 public static void main(String[] args) throws Exception { String url = "https://httpbin.org/digest-auth/auth/user/passwd"; String username = "user"; String passw
public static void main(String[] args) throws Exception {
String url = "https://httpbin.org/digest-auth/auth/user/passwd";
String username = "user";
String password = "passwd";
CookieStore cookieStore = new BasicCookieStore();
BasicClientCookie cookie = new BasicClientCookie("fake", "fake_value");
cookie.setDomain("httpbin.org");
cookie.setPath("/");
cookieStore.addCookie(cookie);
// get the host
HttpHost httpHost = URIUtils.extractHost(new URI(url));
CredentialsProvider credsProvider = new BasicCredentialsProvider();
credsProvider.setCredentials(new AuthScope(httpHost.getHostName(), httpHost.getPort()), new UsernamePasswordCredentials(username, password));
CloseableHttpClient httpClient = HttpClients.custom()
.setDefaultCookieStore(cookieStore)
.setDefaultCredentialsProvider(credsProvider)
.setRedirectStrategy(new LaxRedirectStrategy())
.build();
// Create AuthCache instance
// Generate BASIC scheme object and add it to the local auth cache
AuthCache authCache = new BasicAuthCache();
DigestScheme digestAuth = new DigestScheme();
digestAuth.overrideParamter("realm", "support@windward.net");
digestAuth.overrideParamter("nonce", calculateNonce());
authCache.put(httpHost, digestAuth);
// Add AuthCache to the execution context
HttpClientContext localContext = HttpClientContext.create();
localContext.setAuthCache(authCache);
CloseableHttpResponse response = null;
HttpGet httpGet = new HttpGet(url);
response = httpClient.execute(httpHost, httpGet, localContext);
if (response.getStatusLine().getStatusCode() != 200)
throw new IOException("Error: " + response.getStatusLine() + ". Reading url " + url);
HttpEntity entity = response.getEntity();
InputStream stream = entity.getContent();
}
private static synchronized String calculateNonce() {
Date d = new Date();
SimpleDateFormat f = new SimpleDateFormat("yyyy:MM:dd:hh:mm:ss");
String fmtDate = f.format(d);
Random rand = new Random(100000);
Integer randomInt = rand.nextInt();
return org.apache.commons.codec.digest.DigestUtils.md5Hex(fmtDate + randomInt.toString());
}
jdk似乎不信任您在服务器上使用的tls/ssl证书。例如，自签名证书很常见。虽然浏览器通常允许您在这种情况下继续，但jdk默认情况下会删除这种连接。@korolar好的，我不明白。为什么我需要证书才能访问网站？他们需要证书，但我为什么需要证书？你不需要证书。你需要信任网站的证书。@korolar-哦，这很有道理。有没有一种方式可以说我信任任何网站，所以它会处理自签名网站？请参阅以下答案：。