springcloud openFeign客户端禁用SSL验证

import feign.Client;
import feign.httpclient.ApacheHttpClient;
import org.apache.http.conn.ssl.NoopHostnameVerifier;
import org.apache.http.conn.ssl.TrustSelfSignedStrategy;
import org.apache.http.ssl.SSLContexts;
import org.springframework.context.annotation.Bean;
import javax.net.ssl.SSLContext;
import javax.net.ssl.SSLSocketFactory;

public class DisableSslConfig {

    @Bean
    public Client feignClient() throws Exception {
        // 创建信任所有证书的SSL上下文
        SSLContext sslContext = SSLContexts.custom()
                .loadTrustMaterial(null, new TrustSelfSignedStrategy())
                .build();

        // 创建自定义Socket工厂
        SSLSocketFactory socketFactory = sslContext.getSocketFactory();

        // 构建禁用SSL验证的HttpClient
        return new ApacheHttpClient(
                org.apache.http.impl.client.HttpClients.custom()
                        .setSSLContext(sslContext)
                        .setSSLHostnameVerifier(NoopHostnameVerifier.INSTANCE)
                        .build()
        );
    }
}

import org.springframework.cloud.openfeign.FeignClient;

@FeignClient(
    name = "your-service",
    url = "https://your-service-url",
    configuration = DisableSslConfig.class // 应用自定义配置
)
public interface YourServiceClient {
    // 你的Feign接口方法
    @GetMapping("/endpoint")
    String getData();
}

keytool -import -alias mycert -file server.crt -keystore truststore.jks

server:
  ssl:
    trust-store: classpath:truststore.jks
    trust-store-password: changeit

feign:
  client:
    config:
      default: # 作用于所有客户端
        disable-ssl-validation: true
  httpclient:
    disable-ssl-validation: true # 确保HTTP客户端生效

@Bean
public Client feignClient() throws Exception {
    log.warn("⚠️ SSL验证已禁用 - 仅限测试环境使用!");
    // ... 同上 ...
}