使用AWS Java SDK访问S3遇TLS证书错误，如何强制用HTTP？

问题描述 #

我近期使用AWS Java SDK集成S3对象存储，已成功创建AmazonS3客户端实现文档的上传与下载功能，但测试阶段遇到了TLS证书相关的NoClassDefFoundError错误。希望通过强制SDK仅使用HTTP而非HTTPS的方式，绕开TLS相关逻辑以避免该错误。

当前Maven依赖 #

<groupId>com.amazonaws</groupId>
<artifactId>aws-java-sdk-bundle</artifactId>
<version>1.12.261</version>

错误栈信息 #

java.lang.NoClassDefFoundError: Could not initialize class sun.security.ssl.SSLContextImpl$TLSContext
    at java.base/java.lang.Class.forName0(Native Method)
    at java.base/java.lang.Class.forName(Class.java:315)
    at java.base/java.security.Provider$Service.getImplClass(Provider.java:1918)
    at java.base/java.security.Provider$Service.newInstance(Provider.java:1894)
    at java.base/sun.security.jca.GetInstance.getInstance(GetInstance.java:236)
    at java.base/sun.security.jca.GetInstance.getInstance(GetInstance.java:164)
    at java.base/javax.net.ssl.SSLContext.getInstance(SSLContext.java:168)
    at com.amazonaws.internal.SdkSSLContext.getPreferredSSLContext(SdkSSLContext.java:36)
    at com.amazonaws.http.apache.client.impl.ApacheConnectionManagerFactory.getPreferredSocketFactory(ApacheConnectionManagerFactory.java:92)
    at com.amazonaws.http.apache.client.impl.ApacheConnectionManagerFactory.create(ApacheConnectionManagerFactory.java:66)
    at com.amazonaws.http.apache.client.impl.ApacheConnectionManagerFactory.create(ApacheConnectionManagerFactory.java:59)
    at com.amazonaws.http.apache.client.impl.ApacheHttpClientFactory.create(ApacheHttpClientFactory.java:50)
    at com.amazonaws.http.apache.client.impl.ApacheHttpClientFactory.create(ApacheHttpClientFactory.java:38)
    at com.amazonaws.http.AmazonHttpClient.<init>(AmazonHttpClient.java:347)
    at com.amazonaws.http.AmazonHttpClient.<init>(AmazonHttpClient.java:331)
    at com.amazonaws.AmazonWebServiceClient.<init>(AmazonWebServiceClient.java:239)
    at com.amazonaws.AmazonWebServiceClient.<init>(AmazonWebServiceClient.java:225)
    at com.amazonaws.services.s3.AmazonS3Client.<init>(AmazonS3Client.java:723)
    at com.amazonaws.services.s3.AmazonS3Builder$1.apply(AmazonS3Builder.java:35)
    at com.amazonaws.services.s3.AmazonS3Builder$1.apply(AmazonS3Builder.java:32)
    at com.amazonaws.services.s3.AmazonS3ClientBuilder.build(AmazonS3ClientBuilder.java:64)
    at com.amazonaws.services.s3.AmazonS3ClientBuilder.build(AmazonS3ClientBuilder.java:28)
    at com.amazonaws.client.builder.AwsSyncClientBuilder.build(AwsSyncClientBuilder.java:46)

解决方案 #

可以通过在构建AmazonS3客户端时明确指定HTTP端点并禁用SSL来强制SDK使用HTTP协议，具体步骤如下：

1. 在客户端构建代码中，使用withEndpointConfiguration指定HTTP协议的S3服务端点
2. 调用disableSsl()方法禁用SSL/TLS加密

代码示例 #

import com.amazonaws.services.s3.AmazonS3;
import com.amazonaws.services.s3.AmazonS3ClientBuilder;
import com.amazonaws.client.builder.EndpointConfiguration;

public class S3ClientExample {
    public static void main(String[] args) {
        // 替换为实际的S3服务端点和区域
        String s3Endpoint = "http://your-s3-service-endpoint";
        String region = "your-region-id";

        AmazonS3 s3Client = AmazonS3ClientBuilder.standard()
                .withEndpointConfiguration(new EndpointConfiguration(s3Endpoint, region))
                .disableSsl()
                .build();
        
        // 使用s3Client进行上传下载操作
    }
}

注意事项 #

• 该方式仅适合测试环境或内部可信网络使用，生产环境强烈建议保留HTTPS加密，避免数据传输过程中的安全风险
• 确保指定的S3服务端点支持HTTP协议（部分S3兼容存储服务默认开启HTTP支持）

内容的提问来源于stack exchange，提问作者user2585494