1. 解决SSLException: Certificate for ＜域名＞ doesn‘t match any of the subject alternative报错问题

1.1 问题描述

最近在做一个智能问答客服项目，对接的是云问接口，然后云问接口对接使用的是https方式，之前一直是http方式，突然的改变，使得项目访问报错。报错信息如标题所示。就是SSL证书的问题。

1.2 解决方案

第一种解决方案：

遇到问题首先debug一下，发现是在项目中的一个工具类中引起的报错，好像是因为没有规定使用默认证书之类的吧，不知道理解的对不对，反正根据下面的代码改了之后就可以了，但是还是会有一些其它的问题，具体可以往下看。

在之前的代码上，也就是发送http请求的代码那里，增加下面两条语句。作用主要是配置带有SSL/TSL安全连接的HttpClient。

SSLConnectionSocketFactory scsf = new SSLConnectionSocketFactory(SSLContexts.custom().loadTrustMaterial(null, new TrustSelfSignedStrategy()).build(), NoopHostnameVerifier.INSTANCE);
httpclient = HttpClients.custom().setSSLSocketFactory(scsf).build();

修正之后的代码如下：

public static String doGet(String url, Map<String, Object> params) throws IOException {  String apiUrl = url;  StringBuffer param = new StringBuffer();  int i = 0;  for (String key : params.keySet()) {  if (i == 0)  param.append("?");  else  param.append("&");  param.append(key).append("=").append(params.get(key));  i++;  }  apiUrl += param;  String result = null;  CloseableHttpClient httpclient = HttpClients.createDefault();try {SSLConnectionSocketFactory scsf = new SSLConnectionSocketFactory(SSLContexts.custom().loadTrustMaterial(null, new TrustSelfSignedStrategy()).build(), NoopHostnameVerifier.INSTANCE);httpclient = HttpClients.custom().setSSLSocketFactory(scsf).build();HttpGet httpPost = new HttpGet(apiUrl);  HttpResponse response = httpclient.execute(httpPost);HttpEntity entity = response.getEntity();  if (entity != null) {  InputStream instream = entity.getContent();  result = IOUtils.toString(instream, "UTF-8");  }  } catch (Exception e) {  e.printStackTrace();  }} finally {if(httpclient!=null) {httpclient.close();}}return result;  }  

第二种解决方案：

这种解决方案是ChatGPT给的，我没有验证其正确性。

import org.apache.http.client.HttpClient;
import org.apache.http.client.methods.HttpGet;
import org.apache.http.client.methods.CloseableHttpResponse;
import org.apache.http.conn.ssl.NoopHostnameVerifier;
import org.apache.http.conn.ssl.SSLConnectionSocketFactory;
import org.apache.http.impl.client.CloseableHttpClient;
import org.apache.http.impl.client.HttpClients;
import org.apache.http.ssl.SSLContextBuilder;import javax.net.ssl.SSLContext;
import java.io.BufferedReader;
import java.io.IOException;
import java.io.InputStreamReader;public class HTTPSRequestExample {public static void main(String[] args) {try {// 创建自定义SSLContextSSLContext sslContext = SSLContextBuilder.create().loadTrustMaterial((chain, authType) -> true).build();// 创建SSLConnectionSocketFactory并禁用主机名验证SSLConnectionSocketFactory sslSocketFactory = new SSLConnectionSocketFactory(sslContext, NoopHostnameVerifier.INSTANCE);// 使用自定义SSLConnectionSocketFactory创建HttpClientCloseableHttpClient httpClient = HttpClients.custom().setSSLSocketFactory(sslSocketFactory).build();// 创建要发送的GET请求HttpGet request = new HttpGet("https://example.com");// 发送请求并获取响应CloseableHttpResponse response = httpClient.execute(request);// 读取响应内容BufferedReader reader = new BufferedReader(new InputStreamReader(response.getEntity().getContent()));String line;StringBuilder content = new StringBuilder();while ((line = reader.readLine()) != null) {content.append(line);}// 输出响应内容System.out.println("Response Content: " + content.toString());} catch (Exception e) {e.printStackTrace();} finally {if (response != null) {response.close();}if (httpClient != null) {httpClient.close();}}}
}

1.3 参考文献

stackoverflow参考文档

CSDN参考文档

2. 出现新问题

根据上面的修改代码后，又会出现新的问题，图片，音频，视频似乎不行，f12看控制台会有报错，好像是与证书相关的报错，同时也会改变请求的路径为本地路径。如下图所示的报错。