httpclient 4.5.2 https协议时忽略服务器证书

1maven dependence
dependency>
groupId>org.apache.httpcomponentsgroupId>
artifactId>httpclientartifactId>
version>4.5.2version>
dependency>
2. 测试类
package com.iraid.test;

import java.io.BufferedReader;
import java.io.File;
import java.io.FileInputStream;
import java.io.IOException;
import java.io.InputStream;
import java.io.InputStreamReader;
import java.security.KeyStore;

import javax.net.ssl.SSLContext;

import org.apache.http.client.methods.CloseableHttpResponse;
import org.apache.http.client.methods.HttpPost;
import org.apache.http.config.Registry;
import org.apache.http.config.RegistryBuilder;
import org.apache.http.conn.HttpClientConnectionManager;
import org.apache.http.conn.socket.ConnectionSocketFactory;
import org.apache.http.conn.socket.PlainConnectionSocketFactory;
import org.apache.http.conn.ssl.SSLConnectionSocketFactory;
import org.apache.http.conn.ssl.SSLContexts;
import org.apache.http.conn.ssl.TrustSelfSignedStrategy;
import org.apache.http.entity.ContentType;
import org.apache.http.entity.StringEntity;
import org.apache.http.impl.client.CloseableHttpClient;
import org.apache.http.impl.client.HttpClients;
import org.apache.http.impl.conn.PoolingHttpClientConnectionManager;
import org.apache.http.util.EntityUtils;

/**
* 使用 httpclient4.5 进行 https 通讯，
* 采用双向认证， 连接池管理connection
*
* @author wangfeihu
*
*/
public class HttpClientforSSL {

public static HttpClientConnectionManager CONNECTION_MANAGER = null;

/**
* 初始化 connection manager.
* @param keyStoreFile
* @param keyStorePass
* @param trustStoreFile
* @param trustStorePass
* @throws Exception
*/
public void init(String keyStoreFile, String keyStorePass,
String trustStoreFile, String trustStorePass) throws Exception {
System.out.println("init conection pool...");

InputStream ksis = new FileInputStream(new File(keyStoreFile));// 私钥证书
InputStream tsis = new FileInputStream(new File(trustStoreFile));// 信任证书库

KeyStore ks = KeyStore.getInstance("PKCS12");
ks.load(ksis, keyStorePass.toCharArray());

KeyStore ts = KeyStore.getInstance("JKS");
ts.load(tsis, trustStorePass.toCharArray());

SSLContext sslContext = SSLContexts.custom()
.loadKeyMaterial(ks, keyStorePass.toCharArray())
// 如果有 服务器证书
.loadTrustMaterial(ts, new TrustSelfSignedStrategy())
// 如果没有服务器证书，可以采用自定义 信任机制
// .loadTrustMaterial(null, new TrustStrategy() {
//
// // 信任所有
// public boolean isTrusted(X509Certificate[] arg0,
// String arg1) throws CertificateException {
// return true;
// }
//
// })
.build();
SSLConnectionSocketFactory sslsf = new SSLConnectionSocketFactory(sslContext, new String[] { "TLSv1" }, null,
SSLConnectionSocketFactory.ALLOW_ALL_HOSTNAME_VERIFIER);

Registry registry = RegistryBuilder
. create()
.register("http", PlainConnectionSocketFactory.INSTANCE)
.register("https", sslsf).build();
ksis.close();
tsis.close();
CONNECTION_MANAGER = new PoolingHttpClientConnectionManager(registry);

}

/**
* do post
* @param url
* @param params
* @throws Exception
*/
public void post(String url, String params) throws Exception {
if (CONNECTION_MANAGER == null) {
return;
}
CloseableHttpClient httpClient = HttpClients.custom()
.setConnectionManager(CONNECTION_MANAGER).build();
HttpPost httpPost = new HttpPost(url);

httpPost.setEntity(new StringEntity(params,
ContentType.APPLICATION_JSON));

CloseableHttpResponse resp = httpClient.execute(httpPost);
System.out.println(resp.getStatusLine());
InputStream respIs = resp.getEntity().getContent();
String content = convertStreamToString(respIs);
System.out.println(content);
EntityUtils.consume(resp.getEntity());
}

public static String convertStreamToString(InputStream is) {
BufferedReader reader = new BufferedReader(new InputStreamReader(is));
StringBuilder sb = new StringBuilder();

String line = null;
try {
while ((line = reader.readLine()) != null) {
sb.append(line + "/n");
}
} catch (IOException e) {
e.printStackTrace();
} finally {
try {
is.close();
} catch (IOException e) {
e.printStackTrace();
}
}
return sb.toString();
}

/**
* httpclient4.5.2版
* 忽略服务器证书，采用信任机制
* @return
*/
public static HttpClientConnectionManager init(){
try {
SSLContext sslContext  = SSLContexts.custom().loadTrustMaterial(null, new TrustStrategy() {

@Override
public boolean isTrusted(X509Certificate[] arg0, String arg1)
throws CertificateException {
// TODO Auto-generated method stub
return true;
}
}).build();
SSLConnectionSocketFactory sslsf = new SSLConnectionSocketFactory( sslContext, new String[] { "TLSv1" }, null,
SSLConnectionSocketFactory.ALLOW_ALL_HOSTNAME_VERIFIER);
Registry registry = RegistryBuilder
. create()
.register("http", PlainConnectionSocketFactory.INSTANCE)
.register("https", sslsf).build();
return new PoolingHttpClientConnectionManager(registry);
} catch (Exception e) {
e.printStackTrace();
}
return null;
}

public static void main(String[] args) {

HttpClientConnectionManager clientConnectionManager = init();
if(clientConnectionManager != null){
CloseableHttpClient httpClient = HttpClients.custom().setConnectionManager(clientConnectionManager).build();
String url = "http://admod-analyse.com:8080";
getConn(httpClient, url);
}
}