feign接口调用对方接口的时候，可能对方的证书什么的有问题，ssl验证不通过，需要关闭ssl校验，记录一下。

    1. import feign.Feign;
    2. import okhttp3.ConnectionPool;
    3. import org.springframework.boot.autoconfigure.AutoConfigureBefore;
    4. import org.springframework.boot.autoconfigure.condition.ConditionalOnClass;
    5. import org.springframework.boot.autoconfigure.condition.ConditionalOnProperty;
    6. import org.springframework.boot.context.properties.EnableConfigurationProperties;
    7. import org.springframework.cloud.openfeign.FeignAutoConfiguration;
    8. import org.springframework.context.annotation.Bean;
    10. import javax.net.ssl.*;
    11. import java.security.GeneralSecurityException;
    12. import java.security.KeyStore;
    13. import java.security.cert.CertificateException;
    14. import java.security.cert.X509Certificate;
    15. import java.util.concurrent.TimeUnit;
    18. @ConditionalOnProperty(value = "okhttp.client.max-idle-connections")
    19. @ConditionalOnClass(Feign.class)
    20. @AutoConfigureBefore(FeignAutoConfiguration.class)
    21. @EnableConfigurationProperties(OkHttpClientProperties.class)
    22. public class DefaultFeignOkHttpConfig {
    24.     @Bean
    25.     public okhttp3.OkHttpClient okHttpClient(OkHttpClientProperties okHttpClientProperties) {
    26.         X509TrustManager x509TrustManager = systemDefaultTrustManager();
    27.         SSLSocketFactory sslSocketFactory = systemDefaultSslSocketFactory(x509TrustManager);
    28.         HostnameVerifier notVerify = (hostname, session) -> true;
    29.         return new okhttp3.OkHttpClient.Builder()
    30.                 .sslSocketFactory(sslSocketFactory, x509TrustManager)
    31.                 .hostnameVerifier(notVerify)
    32.                 //  设置读超时
    33.                 .readTimeout(okHttpClientProperties.getReadTimeout(), TimeUnit.SECONDS)
    34.                 //  设置连接超时
    35.                 .connectTimeout(okHttpClientProperties.getConnectTimeout(), TimeUnit.SECONDS)
    36.                 //  设置写超时
    37.                 .writeTimeout(okHttpClientProperties.getWriteTimeout(), TimeUnit.SECONDS)
    38.                 //  是否自动重连
    39.                 .retryOnConnectionFailure(okHttpClientProperties.isRetryOnConnectionFailure())
    40.                 // 默认创建5个线程，保持5分钟长连接
    41.                 .connectionPool(new ConnectionPool(okHttpClientProperties.getMaxIdleConnections(),
    42.                         okHttpClientProperties.getKeepAliveDuration(), TimeUnit.MINUTES))
    43.                 .build();
    44.     }
    46.     private X509TrustManager systemDefaultTrustManager() {
    47.         try {
    48.             TrustManagerFactory trustManagerFactory = TrustManagerFactory.getInstance(
    49.                     TrustManagerFactory.getDefaultAlgorithm());
    50.             trustManagerFactory.init((KeyStore) null);
    51.             TrustManager[] trustManagers = trustManagerFactory.getTrustManagers();
    52.             trustManagers[0] = new X509TrustManager(){
    53.                 @Override
    54.                 public void checkClientTrusted(X509Certificate[] x509Certificates, String s) throws CertificateException {
    56.                 }
    58.                 @Override
    59.                 public void checkServerTrusted(X509Certificate[] x509Certificates, String s) throws CertificateException {
    61.                 }
    63.                 @Override
    64.                 public X509Certificate[] getAcceptedIssuers() {
    65.                     return new X509Certificate[0];
    66.                 }
    67.             };
    68.             return (X509TrustManager) trustManagers[0];
    69.         } catch (GeneralSecurityException e) {
    70.             // The system has no TLS. Just give up.
    71.             throw new AssertionError();
    72.         }
    73.     }
    75.     private SSLSocketFactory systemDefaultSslSocketFactory(X509TrustManager trustManager) {
    76.         try {
    77.             SSLContext sslContext = SSLContext.getInstance("TLS");
    78.             sslContext.init(null, new TrustManager[]{trustManager}, null);
    79.             return sslContext.getSocketFactory();
    80.         } catch (GeneralSecurityException e) {
    81.             // The system has no TLS. Just give up.
    82.             throw new AssertionError();
    83.         }
    84.     }
    86.     /**
    87.      * fegin远程调用时为请求添加jwt-token的header
    88.      *
    89.      * @return
    90.      */
    91.     @Bean
    92.     public FeignRequestInterceptor feignRequestInterceptor() {
    93.         return new FeignRequestInterceptor();
    94.     }
    95. }