java jdk11高版本访问https报ssl认证异常

异常提示：

javax.nex.ssl.SSLHandshakeException:No appropriate protocol(protocol is disabled or cipher suites are inappropriate)

原因：远程服务认证失败

解决方案：

方案一：修改jdk配置

jdk -> conf -> security ->java.security文件

将 jdk.tls.disabledAlgorithms=SSLv3, TLSv1, TLSv1.1, RC4, ...

替换为 jdk.tls.disabledAlgorithms=SSLv3, RC4...

（删除SSLv3，TLSv1）

方案二：代码实现（添加证书信任认证）

import javax.net.ssl.X509TrustManager;

import java.security.cert.CertificateException;

import java.security.cert.X509Certificate;

public class TrustAllManager implements X509TrustManager {

@Override

public void checkClientTrusted(X509Certificate[] certs, String authType) throws CertificateException {

// 不对客户端进行验证

}

@Override

public void checkServerTrusted(X509Certificate[] certs, String authType) throws CertificateException {

// 信任所有服务器证书，不抛出异常

}

@Override

public X509Certificate[] getAcceptedIssuers() {

return new X509Certificate[0];

}

}

import javax.net.ssl.SSLContext;

import javax.net.ssl.TrustManager;

import javax.net.ssl.HttpsURLConnection;

import java.security.KeyManagementException;

import java.security.NoSuchAlgorithmException;

public class SSLTrustExample {

public static void main(String[] args) {

// 创建自定义 TrustManager

TrustManager[] trustAllCerts = new TrustManager[] { new TrustAllManager() };

try {

// 获取默认的 SSLContext

SSLContext sslContext = SSLContext.getInstance("TLS");

// 初始化 SSLContext，使用自定义 TrustManager

sslContext.init(null, trustAllCerts, new java.security.SecureRandom());

// 在 HttpsURLConnection 中设置 SSLContext

HttpsURLConnection.setDefaultSSLSocketFactory(sslContext.getSocketFactory());

// 可选：禁用主机名验证（可信任所有服务器主机名）

HttpsURLConnection.setDefaultHostnameVerifier((hostname, session) -> true);

// 发送 HTTPS 请求

// ...

} catch (NoSuchAlgorithmException | KeyManagementException e) {

e.printStackTrace();

}

}

}

相关阅读