perf: RestTemplate去除对SSLv2Hello与SSLv3协议的支持 #1915

去除对SSLv2Hello与SSLv3协议的支持，使用JDK默认支持的协议
TencentBlueKing · Apr 6, 2023 · 4363942 · 4363942
1 parent 08f26cb
commit 4363942
Showing 1 changed file with 9 additions and 4 deletions.
diff --git a/src/backend/job-gateway/src/main/java/com/tencent/bk/job/gateway/config/RestConfig.java b/src/backend/job-gateway/src/main/java/com/tencent/bk/job/gateway/config/RestConfig.java
@@ -24,6 +24,7 @@
 
 package com.tencent.bk.job.gateway.config;
 
+import lombok.extern.slf4j.Slf4j;
 import org.apache.http.config.Registry;
 import org.apache.http.config.RegistryBuilder;
 import org.apache.http.conn.socket.ConnectionSocketFactory;
@@ -47,6 +48,7 @@
 import java.security.cert.X509Certificate;
 import java.util.List;
 
+@Slf4j
 @Configuration
 public class RestConfig {
     @Bean
@@ -61,8 +63,12 @@ public RestTemplate restTemplate() {
         try {
             SSLContextBuilder builder = new SSLContextBuilder();
             builder.loadTrustMaterial(null, (X509Certificate[] x509Certificates, String s) -> true);
-            SSLConnectionSocketFactory socketFactory = new SSLConnectionSocketFactory(builder.build(), new String[]{
-                "SSLv2Hello", "SSLv3", "TLSv1", "TLSv1.2"}, null, NoopHostnameVerifier.INSTANCE);
+            SSLConnectionSocketFactory socketFactory = new SSLConnectionSocketFactory(
+                builder.build(),
+                null,
+                null,
+                NoopHostnameVerifier.INSTANCE
+            );
             Registry<ConnectionSocketFactory> registry = RegistryBuilder.<ConnectionSocketFactory>create()
                 .register("http", new PlainConnectionSocketFactory())
                 .register("https", socketFactory).build();
@@ -72,9 +78,8 @@ public RestTemplate restTemplate() {
                 HttpClients.custom().setSSLSocketFactory(socketFactory).setConnectionManager(phccm)
                     .setConnectionManagerShared(true).build();
             factory.setHttpClient(httpClient);
-
         } catch (Exception e) {
-
+            log.error("Fail to init httpClient", e);
         }
 
         RestTemplate restTemplate = new RestTemplate(factory);