Mule soft自定義代碼調用以通過更改SSL的HTTPSURLConnection

Question

我們擁有使用哪個mule進行HTTPS連接的自簽名證書。爲了使它工作，我試圖定製bean來定製HTTPSURLConnection，以不允許allHostVerification。

 import java.security.SecureRandom; 
     import java.security.cert.X509Certificate; 

     import javax.net.ssl.HostnameVerifier; 
     import javax.net.ssl.SSLSession; 
     import javax.net.ssl.HttpsURLConnection; 

     import javax.net.ssl.SSLContext; 
     import javax.net.ssl.TrustManager; 
     import javax.net.ssl.X509TrustManager; 

     public class SelfSignSSLProcessor { 


     public void workAroundSelfSignedCerts() { 
      // Create a trust manager that does not validate certificate chains 
      TrustManager[] trustAllCerts = new TrustManager[] { 

      new X509TrustManager() { 
       public X509Certificate[] getAcceptedIssuers() { 
        return null; 
       } 
      public void checkClientTrusted(X509Certificate[] certs, String authType) { } 
      public void checkServerTrusted(X509Certificate[] certs, String authType) { } 
      } 
     }; 
      // Install the all-trusting trust manager 
      System.out.println("Allow Self Signed Certificates"); 
      try { 
      SSLContext sc = SSLContext.getInstance("SSL"); 
      System.out.println("SSL Context Object" + sc.toString()); 
      sc.init(null, trustAllCerts, new SecureRandom()); 
      HttpsURLConnection.setDefaultSSLSocketFactory(sc.getSocketFactory()); 
      // Create all-trusting host name verifier 

      HostnameVerifier allHostsValid = new HostnameVerifier() { 
       public boolean verify(String hostname, SSLSession session) { 
        System.out.println("Host Name to Verify" + hostname); 
        return true; 

       } 
      }; 
      // Install the all-trusting host verifier 
      HttpsURLConnection.setDefaultHostnameVerifier(allHostsValid); 
      // System.out.println("HTTP URL Connection for all SSL" + HttpsURLConnection.getDefaultHostnameVerifier()); 
      } 
      catch (Exception e) { 
       // do something here please! 

       e.printStackTrace(); 
       } 
      } 


     } 

我試圖通過把調用函數權之前騾子HTTPS調用下面流調用此方法。

   <flow name="cprimeFlow"> 
        <poll doc:name="Poll"> 
         <fixed-frequency-scheduler frequency="2" timeUnit="SECONDS"/> 
         <dw:transform-message doc:name="Transform Message"> 
          <dw:set-payload><![CDATA[%dw 1.0 
      %output application/java 
      --- 
      { 
      }]]></dw:set-payload> 
         </dw:transform-message> 
        </poll> 
        <invoke object-ref="SelfSignSSLProcessor" method="workAroundSelfSignedCerts" doc:name="Invoke"/> 
        <http:request config-ref="CPRIME_HTTPS" path="Devices" method="GET" doc:name="HTTP"> 
         <http:request-builder> 
          <http:query-param paramName=".full" value="true"/> 

          <http:header headerName="Connection" value="close"/> 
          <http:header headerName="max-age" value="0"/> 
          <http:header headerName="Cache-Control" value="no-cache,no-store,must-revalidate"/> 
          <http:header headerName="Expires" value="0"/> 
         </http:request-builder> 
        </http:request> 
        <logger message="CPRIME OUT Call Logs - [#[message.payloadAs(java.lang.String)]" level="INFO"    doc:name="Logger"/> 
       </flow> 
      </mule> 

然而，這似乎並沒有生效，這意味着我不認爲在htttps連接器配置的HttpsURLConnection的被修改此行爲。

讓我知道如果我想用mule中的某個其他組件或將自定義HTTPSURLConnection放在mule中的正確方法是什麼。

Answer 1

這不適用於HTTP連接器。如果您使用的是Mule 3.8.0或更高版本，您可以通過讓您的請求配置使用帶有「不安全」信任存儲的TLS上下文來實現期望的結果（無驗證）。您可以閱讀更多關於here（位於「不安全選項」部分）。 HTH