结合使用Elasticsearch Java REST API和自签名证书

问题描述：

我想使用Java REST API(RestHighLevelClient)通过HTTPS与Elasticsearch 5.6服务器通信.但是，服务器的证书是自签名的，当我尝试连接时会抛出SSLHandshakeException.

I want to use the Java REST API (RestHighLevelClient) to communicate with an Elasticsearch 5.6 server over HTTPS. However, the certificate for the server is self signed and when I try to connect it throws a SSLHandshakeException.

是否可以将REST客户端配置为接受自签名证书?

Is there a way of configuring the REST client to accept self signed certificates?

答

我使用自定义Java密钥库来完成此工作.这是我的代码:

I got this working using a custom Java Key Store. Here's my code:

CredentialsProvider credentialsProvider = new BasicCredentialsProvider(); credentialsProvider.setCredentials(AuthScope.ANY, new UsernamePasswordCredentials(username, password));

final SSLContext sslContext = SSLContexts.custom()
        .loadTrustMaterial(new File("my_keystore.jks"), keystorePassword.toCharArray(),
            new TrustSelfSignedStrategy())
        .build();


RestClient client = RestClient.builder(new HttpHost(host, port, scheme)).setHttpClientConfigCallback(httpClientBuilder -> httpClientBuilder
        .setDefaultCredentialsProvider(credentialsProvider)
        .setSSLContext(sslContext)
).build();

要创建密钥库，我通过Firefox下载了该域的证书，并使用:

To create the keystore, I downloaded the cert for the domain through Firefox, and used:

keytool -import -v -trustcacerts -file my_domain.crt -keystore my_keystore.jks -keypass password -storepass password

结合使用Elasticsearch Java REST API和自签名证书

相关推荐