秒懂HTTPS接口（接口测试篇）

举报
zuozewei 发表于 2021/09/24 12:12:47 2021/09/24
【摘要】 前言 具体实现 引包 采用绕过证书验证测试HTTPS接口 采用设置信任自签名证书测试HTTPS接口 验证数据库 完整项目结构 前言下面我们来测试下我们秒懂HTTPS接口（实现篇)写的HTTPS接口（Java版）技术选型：HTTP工具包：HttpClient 4.5.5测试框架：TestNGJson序列化库：fastjson 具体实现 引包引入相关包<!--引入接口测试相关包--> ...

前言

下面我们来测试下我们秒懂HTTPS接口（实现篇)写的HTTPS接口（Java版）

技术选型：

  • HTTP工具包：HttpClient 4.5.5
  • 测试框架：TestNG
  • Json序列化库：fastjson

具体实现

引包

引入相关包

<!--引入接口测试相关包-->
        <dependency>
            <groupId>org.apache.httpcomponents</groupId>
            <artifactId>httpclient</artifactId>
            <version>4.5.5</version>
        </dependency>
        <dependency>
            <groupId>org.testng</groupId>
            <artifactId>testng</artifactId>
            <version>6.14.3</version>
        </dependency>
        <dependency>
            <groupId>com.alibaba</groupId>
            <artifactId>fastjson</artifactId>
            <version>1.2.47</version>
        </dependency>
        <dependency>
            <groupId>org.springframework.boot</groupId>
            <artifactId>spring-boot-configuration-processor</artifactId>
            <optional>true</optional>
        </dependency>

测试HTTPS接口可以通过以下两种方式：

  • 采用绕过证书验证实现HTTPS
  • 采用设置信任自签名证书实现HTTPS

采用绕过证书验证测试HTTPS接口

在src/test/util下创建HttpUtil工具类

实现绕过SSL验证方法

/**
	 * 绕过SSL验证
	 *
	 * @return
	 * @throws NoSuchAlgorithmException
	 * @throws KeyManagementException
	 */
	public static SSLContext createIgnoreVerifySSL() throws NoSuchAlgorithmException, KeyManagementException {
		SSLContext sslContext = SSLContext.getInstance("SSLv3");

		// 实现一个X509TrustManager接口，用于绕过验证，不用修改里面的方法
		X509TrustManager trustManager = new X509TrustManager() {
			@Override
			public void checkClientTrusted(
					java.security.cert.X509Certificate[] paramArrayOfX509Certificate,
					String paramString) throws CertificateException {
			}

			@Override
			public void checkServerTrusted(
					java.security.cert.X509Certificate[] paramArrayOfX509Certificate,
					String paramString) throws CertificateException {
			}

			@Override
			public java.security.cert.X509Certificate[] getAcceptedIssuers() {
				return null;
			}
		};

		sslContext.init(null, new TrustManager[] { trustManager }, null);
		return sslContext;
	}

实现绕过SSL证书，发送Get请求方法

/**
	 * 绕过SSL证书，发送Get请求
	 * @param url
	 * @param params
	 * @return
	 * @throws IOException
	 * @throws KeyManagementException
	 * @throws NoSuchAlgorithmException
	 */
	public static String doIgnoreVerifySSLGet(String url, Map<String,Object> params)
			throws IOException, KeyManagementException, NoSuchAlgorithmException {
		//采用绕过验证的方式处理https请求
		SSLContext sslContext = createIgnoreVerifySSL();
		final SSLConnectionSocketFactory sslsf;

		//设置协议http和https对应的处理socket链接工厂的对象
		sslsf = new SSLConnectionSocketFactory(sslContext, NoopHostnameVerifier.INSTANCE);
		final Registry<ConnectionSocketFactory> registry = RegistryBuilder.<ConnectionSocketFactory>create()
				.register("http", new PlainConnectionSocketFactory())
				.register("https", sslsf)
				.build();

		final PoolingHttpClientConnectionManager cm = new PoolingHttpClientConnectionManager(registry);
		cm.setMaxTotal(100);

		//创建自定义的httpclient对象
		CloseableHttpClient httpClient = HttpClients.custom()
				.setSSLSocketFactory(sslsf)
				.setConnectionManager(cm)
				.build();

		String result = null;
		//装填参数
		StringBuffer param = new StringBuffer();
		if (params != null && !params.isEmpty()) {
			int i = 0;
			for (String key : params.keySet()) {
				if (i == 0) {
					param.append("?");
				} else {
					param.append("&");
				}
				param.append(key).append("=").append(params.get(key));
				i++;
			}
			url += param;
		}
		//创建get方式请求对象
		HttpGet httpGet = new HttpGet(url);
		//执行请求操作，并拿到结果（同步阻塞）
		CloseableHttpResponse response = httpClient.execute(httpGet);
		if (response.getStatusLine().getStatusCode() == 200){
			//获取结果实体
			HttpEntity httpEntity = response.getEntity();
			//按指定编码转换结果实体为String类型
			result = EntityUtils.toString(httpEntity,"UTF-8");
		}

		//释放链接
		response.close();

		return result;
	}

实现绕过SSL证书，发送Post请求（Json形式）方法

/**
	 * 绕过SSL证书，发送Post请求（Json形式）
	 * @param url
	 * @param param
	 * @return
	 * @throws IOException
	 * @throws KeyManagementException
	 * @throws NoSuchAlgorithmException
	 */
	public static String doIgnoreVerifySSLPost(String url, JSONObject param)
			throws IOException, KeyManagementException, NoSuchAlgorithmException {
		//采用绕过验证的方式处理https请求
		SSLContext sslContext = createIgnoreVerifySSL();
		final SSLConnectionSocketFactory sslsf;

		//设置协议http和https对应的处理socket链接工厂的对象
		sslsf = new SSLConnectionSocketFactory(sslContext, NoopHostnameVerifier.INSTANCE);
		final Registry<ConnectionSocketFactory> registry = RegistryBuilder.<ConnectionSocketFactory>create()
				.register("http", new PlainConnectionSocketFactory())
				.register("https", sslsf)
				.build();

		final PoolingHttpClientConnectionManager cm = new PoolingHttpClientConnectionManager(registry);
		cm.setMaxTotal(100);

		//创建自定义的httpclient对象
		CloseableHttpClient httpClient = HttpClients.custom()
				.setSSLSocketFactory(sslsf)
				.setConnectionManager(cm)
				.build();

		String result = null;
		//创建post方式请求对象
		HttpPost httpPost = new HttpPost(url);
		//装填参数
		StringEntity entity = new StringEntity(param.toString(),"utf-8");
		entity.setContentEncoding("UTF-8");
		entity.setContentType("application/json");
		//设置参数到请求对象中
		httpPost.setEntity(entity);

		//执行请求操作，并拿到结果（同步阻塞）
		CloseableHttpResponse response = httpClient.execute(httpPost);
		if (response.getStatusLine().getStatusCode() == 200){
			//获取结果实体
			HttpEntity httpEntity = response.getEntity();
			//按指定编码转换结果实体为String类型
			result = EntityUtils.toString(httpEntity,"UTF-8");
		}

		//释放链接
		response.close();

		return result;
	}

在src/test/cases下创建HttpTest测试类
实现测试方法

@Test(enabled = true,description = "测试绕过SSL证书Post方法")
	public void doIgnoreVerifySSLPostTest() throws IOException, NoSuchAlgorithmException, KeyManagementException {
		String url = "https://localhost/springboot/person";
		//装填参数
		JSONObject param = new JSONObject();
		param.put("name","doIgnoreVerifySSLPost");
		param.put("age",20);
		//调用方法
		String response = HttpUtil.doIgnoreVerifySSLPost(url,param);
		//断言返回结果是否为空
		Assert.assertNotNull(response);
		System.out.println("【doIgnoreVerifySSLPost】"+response);
	}

	@Test(enabled = true,description = "测试绕过SSL证书Get方法")
	public void doIgnoreVerifySSLGetTest() throws IOException, NoSuchAlgorithmException, KeyManagementException {
		String url = "https://localhost/springboot/person";
		//调用方法
		String response = HttpUtil.doIgnoreVerifySSLGet(url,null);
		//断言返回结果是否为空
		Assert.assertNotNull(response);
		System.out.println("【doIgnoreVerifySSLGet】"+response);
	}

运行测试结果
在这里插入图片描述

采用设置信任自签名证书测试HTTPS接口

在HttpUtil工具类实现验证SSL证书，发送Get请求方法

/**
	 * 验证SSL证书，发送Get请求
	 * @param url
	 * @param params
	 * @return
	 * @throws IOException
	 */
	public static String doVerifySSLGet(String url, Map<String,Object> params) throws IOException {
		//采用验证的SSL证书方式处理https请求
		SSLContext sslContext = SSLCustom("./src/main/resources/keystore.p12","zuozewei");
		final SSLConnectionSocketFactory sslsf;

		// 设置协议http和https对应的处理socket链接工厂的对象
		sslsf = new SSLConnectionSocketFactory(sslContext, NoopHostnameVerifier.INSTANCE);
		final Registry<ConnectionSocketFactory> registry = RegistryBuilder.<ConnectionSocketFactory>create()
				.register("http", new PlainConnectionSocketFactory())
				.register("https", sslsf)
				.build();

		final PoolingHttpClientConnectionManager cm = new PoolingHttpClientConnectionManager(registry);
		cm.setMaxTotal(100);

		//创建自定义的httpclient对象
		CloseableHttpClient httpClient = HttpClients.custom()
				.setSSLSocketFactory(sslsf)
				.setConnectionManager(cm)
				.build();

		String result = null;
		//装填参数
		StringBuffer param = new StringBuffer();
		if (params != null && !params.isEmpty()) {
			int i = 0;
			for (String key : params.keySet()) {
				if (i == 0) {
					param.append("?");
				} else {
					param.append("&");
				}
				param.append(key).append("=").append(params.get(key));
				i++;
			}
			url += param;
		}

		//创建get方式请求对象
		HttpGet httpGet = new HttpGet(url);
		//执行请求操作，并拿到结果（同步阻塞）
		CloseableHttpResponse response = httpClient.execute(httpGet);
		if (response.getStatusLine().getStatusCode() == 200){
			//获取结果实体
			HttpEntity httpEntity = response.getEntity();
			//按指定编码转换结果实体为String类型
			result = EntityUtils.toString(httpEntity,"UTF-8");
		}

		//释放链接
		response.close();

		return result;
	}

实现验证SSL证书，发送Post请求（Json形式）方法

/**
	 * 验证SSL证书，发送Post请求（Json形式）
	 * @param url
	 * @param param
	 * @return
	 * @throws IOException
	 */
	public static String doVerifySSLPost(String url, JSONObject param) throws IOException {
		//采用验证的SSL证书方式处理https请求
		SSLContext sslContext = SSLCustom("./src/main/resources/keystore.p12","zuozewei");
		final SSLConnectionSocketFactory sslsf;

		//设置协议http和https对应的处理socket链接工厂的对象
		sslsf = new SSLConnectionSocketFactory(sslContext, NoopHostnameVerifier.INSTANCE);
		final Registry<ConnectionSocketFactory> registry = RegistryBuilder.<ConnectionSocketFactory>create()
				.register("http", new PlainConnectionSocketFactory())
				.register("https", sslsf)
				.build();

		final PoolingHttpClientConnectionManager cm = new PoolingHttpClientConnectionManager(registry);
		cm.setMaxTotal(100);

		//创建自定义的httpclient对象
		CloseableHttpClient httpClient = HttpClients.custom()
				.setSSLSocketFactory(sslsf)
				.setConnectionManager(cm)
				.build();

		String result = null;

		//创建post方式请求对象
		HttpPost httpPost = new HttpPost(url);
		//装填参数
		StringEntity entity = new StringEntity(param.toString(),"utf-8");
		entity.setContentEncoding("UTF-8");
		entity.setContentType("application/json");
		//设置参数到请求对象中
		httpPost.setEntity(entity);
		//执行请求操作，并拿到结果（同步阻塞）
		CloseableHttpResponse response = httpClient.execute(httpPost);
		if (response.getStatusLine().getStatusCode() == 200){
			//获取结果实体
			HttpEntity httpEntity = response.getEntity();
			//按指定编码转换结果实体为String类型
			result = EntityUtils.toString(httpEntity,"UTF-8");
		}
		//释放链接
		response.close();

		return result;
	}

在HttpTest测试类，实现测试方法

@Test(enabled = true,description = "测试验证SSL证书Post方法")
	public void doVerifySSLPostTest() throws IOException {
		String url = "https://localhost/springboot/person";
		//装填参数
		JSONObject param = new JSONObject();
		param.put("name","doVerifySSLPost");
		param.put("age",20);
		//调用方法
		String response = HttpUtil.doVerifySSLPost(url,param);
		//断言返回结果是否为空
		Assert.assertNotNull(response);
		System.out.println("【doVerifySSLPost】"+response);
	}

	@Test(enabled = true,description = "测试验证SSL证书Get方法")
	public void doVerifySSLGetTest() throws IOException {
		String url = "https://localhost/springboot/person";
		//调用方法
		String response = HttpUtil.doVerifySSLGet(url,null);
		//断言返回结果是否为空
		Assert.assertNotNull(response);
		System.out.println("【doVerifySSLGet】"+response);
	}

运行测试结果
在这里插入图片描述

验证数据库

查询数据库结果
在这里插入图片描述

完整项目结构

在这里插入图片描述

秒懂HTTPS接口系列源码：

相关系列：

【版权声明】本文为华为云社区用户原创内容，转载时必须标注文章的来源（华为云社区）、文章链接、文章作者等基本信息， 否则作者和本社区有权追究责任。如果您发现本社区中有涉嫌抄袭的内容，欢迎发送邮件进行举报，并提供相关证据，一经查实，本社区将立刻删除涉嫌侵权内容，举报邮箱： cloudbbs@huaweicloud.com
https 自动化测试
  • 点赞
  • 收藏
  • 关注作者

评论（0）

0/1000
抱歉，系统识别当前为高风险访问，暂不支持该操作

全部回复

上滑加载中

设置昵称

在此一键设置昵称，即可参与社区互动！

*长度不超过10个汉字或20个英文字符，设置后3个月内不可修改。

*长度不超过10个汉字或20个英文字符，设置后3个月内不可修改。

确认 取消

加入云驻计划，成为创作者

  • 华为云周边好礼
  • 免费体验产品
  • 特殊身份标识
  • 线下官方门票
  • 内部专家零距离
  • 与10000+优质创作者共同成长
立即加入