Eureka RestTemplate 和 SSL

在使用Eureka RestTemplate与SSL时，你可以使用RestTemplateCustomizer来配置RestTemplate以接受自签名的SSL证书。以下是一个示例代码：

首先，创建一个TrustAllManager以接受所有SSL证书：

import javax.net.ssl.X509TrustManager;
import java.security.cert.CertificateException;
import java.security.cert.X509Certificate;

public class TrustAllManager implements X509TrustManager {

    @Override
    public void checkClientTrusted(X509Certificate[] x509Certificates, String s) throws CertificateException {
        // Accept all client certificates
    }

    @Override
    public void checkServerTrusted(X509Certificate[] x509Certificates, String s) throws CertificateException {
        // Accept all server certificates
    }

    @Override
    public X509Certificate[] getAcceptedIssuers() {
        return null;
    }
}

然后，创建一个RestTemplateCustomizer以将TrustAllManager应用于RestTemplate：

import org.springframework.boot.web.client.RestTemplateCustomizer;
import org.springframework.http.client.ClientHttpRequestFactory;
import org.springframework.http.client.HttpComponentsClientHttpRequestFactory;
import org.springframework.web.client.RestTemplate;

import javax.net.ssl.SSLContext;
import javax.net.ssl.TrustManager;
import javax.net.ssl.X509TrustManager;

public class TrustAllRestTemplateCustomizer implements RestTemplateCustomizer {

    @Override
    public void customize(RestTemplate restTemplate) {
        // Trust all SSL certificates
        SSLContext sslContext;
        try {
            sslContext = SSLContext.getInstance("TLS");
            sslContext.init(null, new TrustManager[]{new TrustAllManager()}, null);
        } catch (Exception e) {
            throw new RuntimeException("Failed to initialize SSL context", e);
        }

        // Apply the SSL context to the RestTemplate
        ClientHttpRequestFactory factory = new HttpComponentsClientHttpRequestFactory(HttpClientBuilder.create()
                .setSSLContext(sslContext)
                .build());

        restTemplate.setRequestFactory(factory);
    }
}

最后，在你的应用程序中，将RestTemplateCustomizer添加到RestTemplateBuilder：

import org.springframework.boot.SpringApplication;
import org.springframework.boot.autoconfigure.SpringBootApplication;
import org.springframework.boot.web.client.RestTemplateBuilder;
import org.springframework.context.annotation.Bean;
import org.springframework.web.client.RestTemplate;

@SpringBootApplication
public class YourApplication {

    public static void main(String[] args) {
        SpringApplication.run(YourApplication.class, args);
    }

    @Bean
    public RestTemplateCustomizer restTemplateCustomizer() {
        return new TrustAllRestTemplateCustomizer();
    }

    @Bean
    public RestTemplate restTemplate(RestTemplateBuilder restTemplateBuilder) {
        return restTemplateBuilder.build();
    }
}

现在，你可以在你的代码中使用RestTemplate来进行Eureka的调用，并接受自签名的SSL证书：

import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.stereotype.Component;
import org.springframework.web.client.RestTemplate;

@Component
public class YourService {

    private final RestTemplate restTemplate;

    @Autowired
    public YourService(RestTemplate restTemplate) {
        this.restTemplate = restTemplate;
    }

    public String callEurekaEndpoint() {
        String url = "https://eureka-service/your-endpoint";
        return restTemplate.getForObject(url, String.class);
    }
}

请注意，这种方法在安全性方面是有风险的，因为它接受所有SSL证书。在生产环境中，建议使用有效的SSL证书来确保通信的安全性。