调用Jenkins API时出现SocketException Connection Reset问题排查求助

嘿，我之前也碰到过几乎一模一样的情况——Java程序调用其他URL都正常，唯独这个Jenkins实例突然报连接重置，而且Postman还能正常访问。结合你的场景，大概率是Java客户端和Jenkins服务器的TLS协议/加密套件不兼容，或者请求头、认证环节有差异，给你几个具体的排查和解决方向：

1. 强制指定TLS版本 #

很多时候Jenkins会升级安全配置，禁用掉TLS 1.0/1.1这类老协议，但Java默认可能没开启高版本TLS支持。你可以在代码开头或者JVM启动参数里指定支持的TLS版本：

代码内设置： #

// 在创建URL连接前添加这行
System.setProperty("https.protocols", "TLSv1.2,TLSv1.3");

JVM启动参数设置： #

java -Dhttps.protocols=TLSv1.2,TLSv1.3 Main

2. 检查证书信任问题 #

Postman会自动信任很多证书，但Java的默认信任存储（cacerts文件）可能没有Jenkins的SSL证书。你可以：

• 临时调试用：跳过证书和主机名验证（生产环境绝对别这么干！），代码示例：

// 跳过证书验证
TrustManager[] trustAllCerts = new TrustManager[]{
    new X509TrustManager() {
        public X509Certificate[] getAcceptedIssuers() { return null; }
        public void checkClientTrusted(X509Certificate[] certs, String authType) {}
        public void checkServerTrusted(X509Certificate[] certs, String authType) {}
    }
};
SSLContext sc = SSLContext.getInstance("TLS");
sc.init(null, trustAllCerts, new SecureRandom());
HttpsURLConnection.setDefaultSSLSocketFactory(sc.getSocketFactory());

// 跳过主机名验证
HostnameVerifier allHostsValid = (hostname, session) -> true;
HttpsURLConnection.setDefaultHostnameVerifier(allHostsValid);

• 生产环境用：把Jenkins的证书导入到Java的cacerts信任存储中，具体可以用keytool工具执行导入命令，这里就不展开细节了。

3. 对齐Postman的请求头 #

Postman发送的请求头可能和你的Java程序有差异，比如Jenkins可能要求特定的Authorization（如果开启了认证）、Accept头。你可以打开Postman的请求详情，把所有请求头都复制到Java代码里：

比如添加认证和Accept头：

// Basic Auth认证（替换成你的Jenkins用户名和密码）
String credentials = "your-jenkins-username:your-jenkins-password";
String authHeader = "Basic " + Base64.getEncoder().encodeToString(credentials.getBytes());
con.setRequestProperty("Authorization", authHeader);

// 添加Accept头，匹配Jenkins返回的格式
con.setRequestProperty("Accept", "application/xml");

// 甚至可以直接用Postman的User-Agent
con.setRequestProperty("User-Agent", "PostmanRuntime/7.32.3");

4. 读取错误流排查细节 #

你的代码里只处理了HTTP_OK的情况，但连接重置或者其他错误时，一定要读取错误流——Jenkins可能会返回具体的错误信息，帮你快速定位问题：

} else {
    BufferedReader errIn = new BufferedReader(new InputStreamReader(con.getErrorStream()));
    String errLine;
    System.err.println("Error response:");
    while ((errLine = errIn.readLine()) != null) {
        System.err.println(errLine);
    }
    errIn.close();
}

修改后的完整示例代码 #

import java.io.BufferedReader;
import java.io.InputStreamReader;
import java.net.HttpURLConnection;
import java.net.URL;
import java.util.Base64;
import javax.net.ssl.HostnameVerifier;
import javax.net.ssl.HttpsURLConnection;
import javax.net.ssl.SSLContext;
import javax.net.ssl.TrustManager;
import javax.net.ssl.X509TrustManager;
import java.security.cert.X509Certificate;
import java.security.SecureRandom;

public class Main {
    public static String getReq(String URL, String serviceName) {
        StringBuffer response = new StringBuffer();
        try {
            // 指定TLS版本
            System.setProperty("https.protocols", "TLSv1.2,TLSv1.3");

            // 临时跳过证书验证（仅调试用）
            TrustManager[] trustAllCerts = new TrustManager[]{
                new X509TrustManager() {
                    public X509Certificate[] getAcceptedIssuers() { return null; }
                    public void checkClientTrusted(X509Certificate[] certs, String authType) {}
                    public void checkServerTrusted(X509Certificate[] certs, String authType) {}
                }
            };
            SSLContext sc = SSLContext.getInstance("TLS");
            sc.init(null, trustAllCerts, new SecureRandom());
            HttpsURLConnection.setDefaultSSLSocketFactory(sc.getSocketFactory());
            HostnameVerifier allHostsValid = (hostname, session) -> true;
            HttpsURLConnection.setDefaultHostnameVerifier(allHostsValid);

            URL obj = new URL("https://jenkins.abcdef.com/cid/jobs/abc/config.xml");
            HttpURLConnection con = (HttpURLConnection) obj.openConnection();
            con.setRequestMethod("GET");
            // 对齐Postman的请求头
            con.setRequestProperty("User-Agent", "PostmanRuntime/7.32.3");
            con.setRequestProperty("Accept", "application/xml");
            // 添加Basic Auth（替换成你的账号密码）
            String credentials = "your-username:your-password";
            String authHeader = "Basic " + Base64.getEncoder().encodeToString(credentials.getBytes());
            con.setRequestProperty("Authorization", authHeader);

            int responseCode = con.getResponseCode();
            System.out.println("Response Code: " + responseCode);

            if (responseCode == HttpURLConnection.HTTP_OK) {
                BufferedReader in = new BufferedReader(new InputStreamReader(con.getInputStream()));
                String inputLine;
                while ((inputLine = in.readLine()) != null) {
                    response.append(inputLine);
                }
                in.close();
            } else {
                // 读取错误流
                BufferedReader errIn = new BufferedReader(new InputStreamReader(con.getErrorStream()));
                String errLine;
                System.err.println("Error details:");
                while ((errLine = errIn.readLine()) != null) {
                    System.err.println(errLine);
                }
                errIn.close();
            }
        } catch (Exception e) {
            e.printStackTrace();
        }
        return response.toString();
    }
    public static void main(String[] args) {
        getReq(null, null);
    }
}

建议先从指定TLS版本开始试，这个是最常见的原因。如果还不行，再检查请求头和证书问题，记得一定要看错误流的输出，能帮你少走很多弯路！

内容的提问来源于stack exchange，提问作者Sree B