如何使用证书认证发起POST请求？OkHttp依赖库问题求助

OkHttp 4.x是目前官方维护的稳定版本，不存在依赖被移除的问题，直接用它就能实现需求，以下是完整可行的方案：

步骤说明与代码实现 #

• 先确保引入最新的OkHttp依赖（以Gradle为例）：

implementation "com.squareup.okhttp3:okhttp:4.12.0"

• 核心实现代码：

import okhttp3.MediaType;
import okhttp3.OkHttpClient;
import okhttp3.Request;
import okhttp3.RequestBody;
import okhttp3.Response;

import javax.net.ssl.KeyManagerFactory;
import javax.net.ssl.SSLContext;
import javax.net.ssl.TrustManagerFactory;
import java.io.FileInputStream;
import java.security.KeyStore;
import java.util.concurrent.TimeUnit;

public class P12CertPostRequest {
    public static void main(String[] args) throws Exception {
        // 配置证书路径、密码、目标接口地址及请求体
        String p12Path = "/path/to/your/file.p12";
        String p12Password = "your-cert-password";
        String targetUrl = "https://your-target-server.com/api/post-endpoint";
        String postBody = "{\"key\": \"value\"}";

        // 加载PKCS12证书到KeyStore
        KeyStore keyStore = KeyStore.getInstance("PKCS12");
        try (FileInputStream fis = new FileInputStream(p12Path)) {
            keyStore.load(fis, p12Password.toCharArray());
        }

        // 初始化密钥管理器与信任管理器
        KeyManagerFactory keyManagerFactory = KeyManagerFactory.getInstance(KeyManagerFactory.getDefaultAlgorithm());
        keyManagerFactory.init(keyStore, p12Password.toCharArray());

        TrustManagerFactory trustManagerFactory = TrustManagerFactory.getInstance(TrustManagerFactory.getDefaultAlgorithm());
        trustManagerFactory.init(keyStore);

        // 构建SSL上下文
        SSLContext sslContext = SSLContext.getInstance("TLS");
        sslContext.init(keyManagerFactory.getKeyManagers(), trustManagerFactory.getTrustManagers(), null);

        // 配置OkHttpClient
        OkHttpClient client = new OkHttpClient.Builder()
                .sslSocketFactory(sslContext.getSocketFactory(), (javax.net.ssl.X509TrustManager) trustManagerFactory.getTrustManagers()[0])
                .connectTimeout(30, TimeUnit.SECONDS)
                .readTimeout(30, TimeUnit.SECONDS)
                .build();

        // 构建并发送POST请求
        RequestBody body = RequestBody.create(postBody, MediaType.parse("application/json"));
        Request request = new Request.Builder()
                .url(targetUrl)
                .post(body)
                .build();

        try (Response response = client.newCall(request).execute()) {
            if (response.isSuccessful()) {
                System.out.println("请求成功，响应内容：" + response.body().string());
            } else {
                System.out.println("请求失败，状态码：" + response.code());
            }
        }
    }
}

注意事项 #

• 确保file.p12路径正确，程序拥有该文件的读取权限
• 如果服务器的CA根证书不在你的p12文件中，需额外处理信任逻辑（比如将服务器CA证书导入p12，或调整TrustManager的信任规则）
• 证书密码需与p12文件设置的完全一致，注意大小写区分

内容的提问来源于stack exchange，提问作者AdrianM