Java okHttp 3 忽略Https的SSL最佳方案

okHttp是Java平台下方便的HTTP客戶端工具，最近筆者在實際項目中使用時，發現於客戶第三方應用集成時，對方提供的API采用自簽名的HTTPS，直接導致項目運行報錯，並且客戶方面因為經常變更證書，要求忽略證書，為解決該問題，筆者在網絡上搜索現成的方案，並不能完全滿足自己的業務需求或對代碼的輕度潔癖。

參考部分網絡上瀏覽量較高的方案，筆者在其思路引領下進行修改。廢話不多說，直接貼代碼。

代碼 1. 工具類 OkHttpUtil.java

import java.security.KeyManagementException;
import java.security.NoSuchAlgorithmException;
import java.security.SecureRandom;
import java.security.cert.X509Certificate;

import javax.net.ssl.HostnameVerifier;
import javax.net.ssl.SSLContext;
import javax.net.ssl.SSLSession;
import javax.net.ssl.TrustManager;
import javax.net.ssl.X509TrustManager;

/**
 * 
 * @author Vania
 *
 */
public class OkHttpUtil {
    /**
     * X509TrustManager instance which ignored SSL certification
     */
    public static final X509TrustManager IGNORE_SSL_TRUST_MANAGER_X509 = new X509TrustManager() {
        @Override
        public void checkClientTrusted(X509Certificate[] chain, String authType) {
        }

        @Override
        public void checkServerTrusted(X509Certificate[] chain, String authType) {
        }

        @Override
        public X509Certificate[] getAcceptedIssuers() {
            return new X509Certificate[] {};
        }
    };

    /**
     * Get initialized SSLContext instance which ignored SSL certification
     * 
     * @return
     * @throws NoSuchAlgorithmException
     * @throws KeyManagementException
     */
    public static SSLContext getIgnoreInitedSslContext() throws NoSuchAlgorithmException, KeyManagementException {
        var sslContext = SSLContext.getInstance("SSL");
        sslContext.init(null, new TrustManager[] { IGNORE_SSL_TRUST_MANAGER_X509 }, new SecureRandom());
        return sslContext;
    }

    /**
     * Get HostnameVerifier which ignored SSL certification
     * 
     * @return
     */
    public static HostnameVerifier getIgnoreSslHostnameVerifier() {
        return new HostnameVerifier() {
            @Override
            public boolean verify(String arg0, SSLSession arg1) {
                return true;
            }
        };
    }
}

代碼 2 業務代碼片段

client = new OkHttpClient()
     .newBuilder()
     .sslSocketFactory(OkHttpUtil.getIgnoreInitedSslContext().getSocketFactory(), OkHttpUtil.IGNORE_SSL_TRUST_MANAGER_X509)
     .hostnameVerifier(OkHttpUtil.getIgnoreSslHostnameVerifier())
     .build();