解决JDK7调用https报：java.net.SocketException: Connection reset错误

原因分析：

大多数现代的 HTTPS 连接将使用 TLS 1.2协议或 TLS 1.3协议，具体取决于服务器和客户端支持的版本以及其之间的协商，而JDK7及以下版本默认使用是TLS v1协议，所以在调用HTTPS接口时，会出现java.net.SocketException: Connection reset报错；

下面是不同JDK版本的默认TLS协议：

java">JDK 6SSL v3TLS v1(默认)TLS v1.1(JDK6 update 111 及以上)
JDK 7SSLv3TLS v1(默认)TLS v1.1TLS v1.2
JDK 8SSL v3TLS v1TLS v1.1TLS v1.2(默认)

解决方案：

手动设置TLS协议为v1.2版本，下面我提供了POST+JSON+用户认证请求（如果不需要用户认证的，可以去掉）代码示例供参考：

java">import com.alibaba.fastjson.JSONObject;
import org.apache.commons.codec.binary.Base64;
import org.apache.http.HttpEntity;
import org.apache.http.HttpResponse;
import org.apache.http.client.methods.HttpPost;
import org.apache.http.conn.ssl.SSLConnectionSocketFactory;
import org.apache.http.entity.StringEntity;
import org.apache.http.impl.client.CloseableHttpClient;
import org.apache.http.impl.client.HttpClients;
import org.apache.http.util.EntityUtils;import javax.net.ssl.SSLContext;
import javax.net.ssl.TrustManager;
import javax.net.ssl.X509TrustManager;
import java.security.cert.CertificateException;
import java.security.cert.X509Certificate;public class HttpClientUtils {public static void main(String[] args) {try {String path = "https>https://XXXXXXXXXX";JSONObject param = new JSONObject();param.put("param1", "参数1");param.put("param2", "参数2");String resStr = HttpClientUtils.sendHttpsPostTLSAdd(path, param.toJSONString(), "用户账号", "用户密码", "UTF-8");System.out.println(resStr);} catch (Exception e) {e.printStackTrace();}}/*** post请求，设置TLS协议* @param url* @param json* @param username 用户名* @param password 密码* @param charSet 请求编码（UTF-8）* @return* @throws Exception*/public static String sendHttpsPostTLSAdd(String url, String json, String username, String password, String charSet) throws Exception {// 实现一个X509TrustManager接口，用于绕过验证，不用修改里面的方法X509TrustManager trustManager = new X509TrustManager() {@Overridepublic X509Certificate[] getAcceptedIssuers() {return null;}@Overridepublic void checkClientTrusted(X509Certificate[] arg0, String arg1)throws CertificateException {}@Overridepublic void checkServerTrusted(X509Certificate[] arg0, String arg1)throws CertificateException {}};// 设置TLS协议版本为TLSv1.2SSLContext sc = SSLContext.getInstance("TLSv1.2");sc.init(null, new TrustManager[] { trustManager }, null);SSLConnectionSocketFactory sslsf = new SSLConnectionSocketFactory(sc);// 得到httpClient对象CloseableHttpClient httpClient = null;HttpPost httpPost = null;String result = null;httpClient = HttpClients.custom().setSSLSocketFactory(sslsf).build();httpPost = new HttpPost(url);// 用户认证String authString = username + ":" + password;String encodedAuthString = Base64.encodeBase64String(authString.getBytes());httpPost.setHeader("Authorization", "Basic " + encodedAuthString);// 推送配置StringEntity entity = new StringEntity(json, charSet);entity.setContentEncoding(charSet); // 设置编码格式entity.setContentType("application/json"); // 设置JSON请求httpPost.setEntity(entity);// 执行HttpResponse response = httpClient.execute(httpPost);if (response != null) {HttpEntity resEntity = response.getEntity();if (resEntity != null) {result = EntityUtils.toString(resEntity, charSet);}}return result;}
}