Consume web service HTTPS

One way to resolve this is to create a certificate factory to generate one that allows you to make calls to an https service. This is an example of the factory I created for certificates:

public class CustomSSLSocketFactory extends SSLSocketFactory {
private SSLContext sslContext = SSLContext.getInstance("TLS");

public CustomSSLSocketFactory(KeyStore truststore)
        throws NoSuchAlgorithmException, KeyManagementException, KeyStoreException, UnrecoverableKeyException {
    super(truststore);
    TrustManager tm = gerarTrustManager();
    sslContext.init(null, new TrustManager[] { tm }, null);

}

private X509TrustManager gerarTrustManager() {
    return new X509TrustManager() {
        public void checkClientTrusted(X509Certificate[] chain, String authType) throws CertificateException {
        }

        public void checkServerTrusted(X509Certificate[] chain, String authType) throws CertificateException {
        }

        public X509Certificate[] getAcceptedIssuers() {
            return null;
        }
    };
}

@Override
public Socket createSocket(Socket socket, String host, int port, boolean autoClose)
        throws IOException, UnknownHostException {
    return sslContext.getSocketFactory().createSocket(socket, host, port, autoClose);
}

@Override
public Socket createSocket() throws IOException {
    return sslContext.getSocketFactory().createSocket();
}

}

Here's the certificate reading on the http client:

protected void carregarContextoSSL(HttpClient httpClient) throws Exception {
    KeyStore trustStore = KeyStore.getInstance(KeyStore.getDefaultType());
    trustStore.load(null, null);
    SSLSocketFactory sf = new CustomSSLSocketFactory(trustStore);
    sf.setHostnameVerifier(SSLSocketFactory.ALLOW_ALL_HOSTNAME_VERIFIER);
    httpClient.getConnectionManager().getSchemeRegistry().register(new Scheme(HTTPS, sf, 443));
}

After the method loadContextoSSL just call the httpClient.execute and it will not give the exception any more.

Yes. If you test directly in the browser it will work because it manages the download of the certificate and your application does not.

Certificates are located at:

%JAVA_HOME%/lib/security/cacerts

To make it work, you must have the certificate. Since it is not self-signed, you can make a copy as follows:

Download the certificate from the browser and with the help of the keytool tool you can add the certificate to your JVM where the server runs.

keytool -import -noprompt -trustcacerts -alias -file -keystore -storepass

After importing the certificate, put it in cacerts check to see if it works.

I consume this webservice on my system and I also do not have digital certificate.

The code I use is as follows:

public static Address consultaCep(String cep) throws MalformedURLException, IOException {
        Address e = new Address();
        String url = "http://viacep.com.br/ws/" + cep + "/json/";

        //Ler Json a partir da URL
        InputStream is = new URL(url).openStream();
        try {
            BufferedReader rd = new BufferedReader(new InputStreamReader(is, Charset.forName("UTF-8")));
            StringBuilder sb = new StringBuilder();
            int cp;
            while ((cp = rd.read()) != -1) {
                sb.append((char) cp);
            }
            String jsonText = sb.toString();
            Gson gson = new Gson();
            JsonObject json = gson.fromJson(jsonText, JsonObject.class);

            //vamos montar o endereço
            try{
                String erro = json.get("erro").getAsString();
                e.setZipCode(cep);
            } catch(Exception ex){
                //tem que entrar aqui, se não entrar é por que deu erro.
                e.setDistrict(json.get("bairro").getAsString());
                e.setZipCode(cep);
                e.setCity(json.get("localidade").getAsString());
                e.setState(json.get("uf").getAsString());
                e.setStreet(json.get("logradouro").getAsString());
            }
            return e;
        } finally {
            is.close();
        }
}