201206030/novel
1
0
Fork 0
mirror of https://github.com/201206030/novel.git synced 2025-04-26 23:20:51 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

fix: fix sun.security.validator.ValidatorException for Elasticsearc

Browse Source 
PKIX path building
failed:
sun.security.provider.certpath.SunCertPathBuilderException:
unable to
find valid certification path to requested target
This commit is contained in:
xiongxiaoyang 2023-03-28 08:50:22 +08:00
parent afeadde581
commit 46d62d6aa6
1 changed files with 59 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

60
src/main/java/io/github/xxyopen/novel/core/config/EsConfig.java
View File

@ -1,16 +1,33 @@
package io.github.xxyopen.novel.core.config;
import co.elastic.clients.json.jackson.JacksonJsonpMapper;
import lombok.extern.slf4j.Slf4j;
import org.apache.http.impl.nio.client.HttpAsyncClientBuilder;
import org.elasticsearch.client.RestClient;
import org.elasticsearch.client.RestClientBuilder;
import org.springframework.beans.factory.ObjectProvider;
import org.springframework.boot.autoconfigure.condition.ConditionalOnProperty;
import org.springframework.boot.autoconfigure.elasticsearch.RestClientBuilderCustomizer;
import org.springframework.context.annotation.Bean;
import org.springframework.context.annotation.Configuration;
import javax.net.ssl.SSLContext;
import javax.net.ssl.TrustManager;
import javax.net.ssl.X509TrustManager;
import java.security.KeyManagementException;
import java.security.NoSuchAlgorithmException;
import java.security.SecureRandom;
import java.security.cert.X509Certificate;
/**
* elasticsearch 相关配置
* Elasticsearch 相关配置
*
* @author xiongxiaoyang
* @date 2022/5/23
*/
@ConditionalOnProperty(value = "spring.elasticsearch.enabled", havingValue = "true")
@Configuration
@Slf4j
public class EsConfig {
/**
@ -21,4 +38,45 @@ public class EsConfig {
return new JacksonJsonpMapper();
}
/**
* fix `sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException:
* unable to find valid certification path to requested target`
*/
@Bean
RestClient elasticsearchRestClient(RestClientBuilder restClientBuilder,
ObjectProvider<RestClientBuilderCustomizer> builderCustomizers) {
restClientBuilder.setHttpClientConfigCallback((HttpAsyncClientBuilder clientBuilder) -> {
TrustManager[] trustAllCerts = new TrustManager[]{new X509TrustManager() {
@Override
public void checkClientTrusted(X509Certificate[] chain, String authType) {
}
@Override
public void checkServerTrusted(X509Certificate[] chain, String authType) {
}
@Override
public X509Certificate[] getAcceptedIssuers() {
return new X509Certificate[0];
}
}};
SSLContext sc = null;
try {
sc = SSLContext.getInstance("SSL");
sc.init(null, trustAllCerts, new SecureRandom());
} catch (KeyManagementException | NoSuchAlgorithmException e) {
log.error("Elasticsearch RestClient 配置失败！", e);
}
assert sc != null;
clientBuilder.setSSLContext(sc);
clientBuilder.setSSLHostnameVerifier((hostname, session) -> true);
builderCustomizers.orderedStream().forEach((customizer) -> customizer.customize(clientBuilder));
return clientBuilder;
});
return restClientBuilder.build();
}
}