RestTemplate HttpClient 加载 SSL/PKCS12/微信API证书

最新推荐文章于 2026-06-20 12:57:32 发布

原创最新推荐文章于 2026-06-20 12:57:32 发布 · 2.3k 阅读

3 ·

本内容遵循CC 4.0 BY-SA版权协议

标签

#RestTemplate #HttpClient #SSL证书 #PKCS12证书 #微信API证书

Spring 专栏收录该内容

3 篇文章

订阅专栏

本文介绍了如何在Spring的RestTemplate和Apache HttpClient中配置并加载SSL证书，特别是PKCS12格式的证书，以及针对微信API的证书处理方法。涉及到的库版本为spring-web:5.1.8.RELEASE和httpclient:4.5.9。

版本：org.springframework:spring-web:5.1.8.RELEASE、org.apache.httpcomponents:httpclient:4.5.9

import org.apache.http.impl.client.CloseableHttpClient;
import org.apache.http.impl.client.HttpClients;
import org.apache.http.ssl.SSLContexts;
import org.springframework.beans.factory.annotation.Value;
import org.springframework.context.annotation.Bean;
import org.springframework.http.client.HttpComponentsClientHttpRequestFactory;
import org.springframework.web.client.RestTemplate;

import javax.net.ssl.SSLContext;
import java.io.IOException;
import java.io.InputStream;
import java.security.KeyManagementException;
import java.security.KeyStore;
import java.security.KeyStoreException;
import java.security.NoSuchAlgorithmException;
import java.security.UnrecoverableKeyException;
import java.security.cert.CertificateException;

@Bean
public RestTemplate restTemplate(@Value("${weixin.key.file}") String keyFile, @Value("${weixin.key.password}") String keyPassword) {
    InputStream keyStream = getClass().getResourceAsStream(keyFile);
    KeyStore keyStore;
    try {
        keyStore = KeyStore.getInstance("PKCS12");
        keyStore.load(keyStream, keyPassword.toCharArray());
    } catch (KeyStoreException | CertificateException | NoSuchAlgorithmException | IOException e) {
        throw new RuntimeException(e.getMessage(), e);
    }
    SSLContext sslContext;
    try {
        sslContext = SSLContexts.custom().loadKeyMaterial(keyStore, keyPassword.toCharArray()).build();
    } catch (NoSuchAlgorithmException | KeyManagementException | KeyStoreException | UnrecoverableKeyException e) {
        throw new RuntimeException(e.getMessage(), e);
    }
    CloseableHttpClient httpClient = HttpClients.custom().setSSLContext(sslContext).build();
    HttpComponentsClientHttpRequestFactory httpRequestFactory = new HttpComponentsClientHttpRequestFactory(httpClient);
    return new RestTemplate(httpRequestFactory);
}

（完）