在開發https應用時，你的測試伺服器常常沒有一個（有效的）SSL證書。在你的客戶端連線測試伺服器時，如下的異常會被丟擲：”javax.net.ssl.SSLPeerUnverifiedException: peer not authenticated”。

1. 程式碼片段

通常，你會像下面那樣來建立HttpClient：

下面我們需要找到一個將TrustManager設定到我們的HttpClient的方法。TrustManager只是被SSL的Socket所使用。Socket通過SocketFactory建立。對於SSL Socket，有一個SSLSocketFactory（

首先我們需要得到一個SSLContext：

TLS是SSL的繼承者，但是它們使用相同的SSLContext。

然後我們需要使用我們上面新建立的TrustManager來初始化該上下文：

最後我們建立SSLSocketFactory：

現在我們仍然需要將SSLSocketFactory註冊到我們的HttpClient上。這是在SchemeRegistry中完成的：

我們註冊了一個新的Scheme，使用協議https，我們新建立的SSLSocketFactory包含了我們的TrustManager，然後我們告訴HttpClienthttps的預設埠是443.

2. 完整示例程式碼

下面的類接收HttpClient作為引數，然後返回一個新的接受任意SSL證書的HttpClient：

package com.vixuan.vplex;

import java.io.IOException;
import java.io.UnsupportedEncodingException;
import java.security.cert.CertificateException;
import java.security.cert.X509Certificate;
import java.util.ArrayList;
import java.util.List;

import javax.net.ssl.SSLContext;
import javax.net.ssl.TrustManager;
import javax.net.ssl.X509TrustManager;

import org.apache.http.HttpEntity;
import org.apache.http.HttpResponse;
import org.apache.http.NameValuePair;
import org.apache.http.ParseException;
import org.apache.http.client.ClientProtocolException;
import org.apache.http.client.HttpClient;
import org.apache.http.client.entity.UrlEncodedFormEntity;
import org.apache.http.client.methods.HttpPost;
import org.apache.http.conn.ClientConnectionManager;
import org.apache.http.conn.scheme.Scheme;
import org.apache.http.conn.scheme.SchemeRegistry;
import org.apache.http.conn.ssl.SSLSocketFactory;
import org.apache.http.impl.client.DefaultHttpClient;
import org.apache.http.message.BasicNameValuePair;
import org.apache.http.util.EntityUtils;






public class PostDemo {

	/**
	 * @param args
	 */
	public static void main(String[] args) {
		// TODO Auto-generated method stub
		//請求格式https://mgmt-server-ip/vplex/clusters/cluster-name
		String url="https://172.16.1.5/vplex/clusters/cluster-1";
		
		List<NameValuePair> params=new ArrayList<NameValuePair>();
		params.add(new BasicNameValuePair("Username","Service"));
		params.add(new BasicNameValuePair("Password","
 
[email protected]"));
		params.add(new BasicNameValuePair("args","cluster status"));
		
		String result=sendPost(url,params);
		System.out.println(result);
		
		
	}
	
	
	
	public static String sendPost(String url,List<NameValuePair> params){
		String result="";
		
		 HttpClient client1 = new DefaultHttpClient();
		 HttpClient client =WebClientDevWrapper.wrapClient(client1);
         HttpPost httppost = new HttpPost(url); 
         
         try {  
             // Post請求  
             // 設定引數  
             httppost.setEntity(new UrlEncodedFormEntity(params,"UTF-8"));  
             // 傳送請求  
             HttpResponse httpresponse = client.execute(httppost);  
             HttpEntity entity = httpresponse.getEntity();  
             result = EntityUtils.toString(entity);  
             System.out.println(result);  
         } catch (UnsupportedEncodingException e) {  
             // TODO Auto-generated catch block  
             e.printStackTrace();  
         } catch (ClientProtocolException e) {  
             // TODO Auto-generated catch block  
             e.printStackTrace();  
         } catch (ParseException e) {  
             // TODO Auto-generated catch block  
             e.printStackTrace();  
         } catch (IOException e) {  
             // TODO Auto-generated catch block  
             e.printStackTrace();  
         }  
		 
		return result;
	}
	<span style="color:#ff0000;"> public static class WebClientDevWrapper {
	
	public static HttpClient wrapClient(HttpClient base) 
	{
	    try {
	        SSLContext ctx = SSLContext.getInstance("TLS");
	        X509TrustManager tm = new X509TrustManager() {

	            public void checkClientTrusted(X509Certificate[] chain,
	                    String authType) throws CertificateException
	            {
	                // TODO Auto-generated method stub

	            }

	            public void checkServerTrusted(X509Certificate[] chain,
	                    String authType) throws CertificateException
	            {
	                // TODO Auto-generated method stub

	            }

	            public X509Certificate[] getAcceptedIssuers()
	            {
	                // TODO Auto-generated method stub
	                return null;
	            }

	        };
	        ctx.init(null, new TrustManager[] { tm }, null);
	        SSLSocketFactory ssf = new SSLSocketFactory(ctx);
	        ssf.setHostnameVerifier(SSLSocketFactory.ALLOW_ALL_HOSTNAME_VERIFIER);
	        ClientConnectionManager ccm = base.getConnectionManager();
	        SchemeRegistry sr = ccm.getSchemeRegistry();
	        //設定要使用的埠，預設是443
	        sr.register(new Scheme("https", ssf, 443));
	        return new DefaultHttpClient(ccm, base.getParams());
	    } catch (Exception ex) {
	        ex.printStackTrace();
	        return null;
	    }
	}</span>
	
}
	
	
	
	
	
	
	

}