httpclient-simple/src/test/java/com/baeldung/httpclient/HttpsClientSslLiveTest.java - master - NikolayIvkin/tutorials1

httpclient-simple/src/test/java/com/baeldung/httpclient/HttpsClientSslLiveTest.java
103 строки4 KB
panos-kakos
Java 15035 (#13421)
07 фев 2023, 18:39
07 фев 2023, 18:3916d0529
package com.baeldung.httpclient;

import static org.junit.jupiter.api.Assertions.assertThrows;

import java.io.IOException;
import java.security.GeneralSecurityException;

import javax.net.ssl.SSLContext;
import javax.net.ssl.SSLHandshakeException;

import org.apache.hc.client5.http.classic.methods.HttpGet;
import org.apache.hc.client5.http.impl.classic.CloseableHttpClient;
import org.apache.hc.client5.http.impl.classic.CloseableHttpResponse;
import org.apache.hc.client5.http.impl.classic.HttpClients;
import org.apache.hc.client5.http.impl.io.PoolingHttpClientConnectionManagerBuilder;
import org.apache.hc.client5.http.io.HttpClientConnectionManager;
import org.apache.hc.client5.http.ssl.NoopHostnameVerifier;
import org.apache.hc.client5.http.ssl.SSLConnectionSocketFactory;
import org.apache.hc.client5.http.ssl.TrustSelfSignedStrategy;
import org.apache.hc.core5.http.HttpResponse;
import org.apache.hc.core5.http.HttpStatus;
import org.apache.hc.core5.ssl.SSLContextBuilder;
import org.apache.hc.core5.ssl.SSLContexts;
import org.apache.hc.core5.ssl.TrustStrategy;
import org.hamcrest.MatcherAssert;
import org.hamcrest.Matchers;
import org.junit.jupiter.api.Test;

import com.baeldung.handler.CustomHttpClientResponseHandler;

/**
 * This test requires a localhost server over HTTPS <br>
 * It should only be manually run, not part of the automated build
 * */
class HttpsClientSslLiveTest {

    // "https://localhost:8443/spring-security-rest-basic-auth/api/bars/1" // local
    // "https://mms.nw.ru/" // hosted
    private static final String HOST_WITH_SSL = "https://mms.nw.ru/";

    @Test
    void whenHttpsUrlIsConsumed_thenException() {
        final HttpGet getMethod = new HttpGet(HOST_WITH_SSL);

        assertThrows(SSLHandshakeException.class, () -> {
            CloseableHttpClient httpClient = HttpClients.createDefault();
            HttpResponse response = httpClient.execute(getMethod, new CustomHttpClientResponseHandler());
            MatcherAssert.assertThat(response.getCode(), Matchers.equalTo(200));
        });

    }

    @Test
    void whenAcceptingAllCertificates_thenCanConsumeHttpsUriWithSelfSignedCertificate() throws IOException, GeneralSecurityException {
        final TrustStrategy acceptingTrustStrategy = (certificate, authType) -> true;
        final SSLContext sslContext = SSLContexts.custom()
            .loadTrustMaterial(null, acceptingTrustStrategy)
            .build();

        final SSLConnectionSocketFactory sslsf = new SSLConnectionSocketFactory(sslContext, NoopHostnameVerifier.INSTANCE);

        final HttpClientConnectionManager cm = PoolingHttpClientConnectionManagerBuilder.create()
            .setSSLSocketFactory(sslsf)
            .build();

        final HttpGet getMethod = new HttpGet(HOST_WITH_SSL);
        try (CloseableHttpClient client = HttpClients.custom()
            .setConnectionManager(cm)
            .build();

            CloseableHttpResponse response = (CloseableHttpResponse) client
                .execute(getMethod, new CustomHttpClientResponseHandler())) {

            final int statusCode = response.getCode();
            MatcherAssert.assertThat(statusCode, Matchers.equalTo(HttpStatus.SC_OK));
        }
    }

    @Test
    void usingBuilder_whenAcceptingAllCertificates_thenCanConsumeHttpsUriWithSelfSignedCertificate() throws IOException, GeneralSecurityException {
        final SSLContext sslContext = new SSLContextBuilder().loadTrustMaterial(null, new TrustSelfSignedStrategy())
            .build();
        final NoopHostnameVerifier hostnameVerifier = new NoopHostnameVerifier();

        final SSLConnectionSocketFactory sslsf = new SSLConnectionSocketFactory(sslContext, hostnameVerifier);
        final HttpClientConnectionManager cm = PoolingHttpClientConnectionManagerBuilder.create()
            .setSSLSocketFactory(sslsf)
            .build();

        final HttpGet getMethod = new HttpGet(HOST_WITH_SSL);
        try (CloseableHttpClient client = HttpClients.custom()
            .setConnectionManager(cm)
            .build();

            CloseableHttpResponse response = (CloseableHttpResponse) client
                .execute(getMethod, new CustomHttpClientResponseHandler())) {

            final int statusCode = response.getCode();
            MatcherAssert.assertThat(statusCode, Matchers.equalTo(HttpStatus.SC_OK));
        }
    }

}