🎨 binarywang#3530 【微信支付】修复未设置平台证书引起的v3请求构造异常

Author: SynchPj

weixin-java-pay/src/main/java/com/github/binarywang/wxpay/config/WxPayConfig.java

@@ -347,10 +347,14 @@ public CloseableHttpClient initApiV3HttpClient() throws WxPayException {
   }
 
   private Verifier getVerifier(PrivateKey merchantPrivateKey, WxPayHttpProxy wxPayHttpProxy, PublicKey publicKey) {
-    Verifier certificatesVerifier = new AutoUpdateCertificatesVerifier(
-      new WxPayCredentials(mchId, new PrivateKeySigner(certSerialNo, merchantPrivateKey)),
-      this.getApiV3Key().getBytes(StandardCharsets.UTF_8), this.getCertAutoUpdateTime(),
-      this.getPayBaseUrl(), wxPayHttpProxy);
+    Verifier certificatesVerifier = null;
+    // 如果配置了平台证书，则初始化验证器以备v2版本接口验签（公钥灰度实现）
+    if (this.getPrivateCertPath() != null && this.getPrivateKeyPath() != null) {
+      certificatesVerifier = new AutoUpdateCertificatesVerifier(
+        new WxPayCredentials(mchId, new PrivateKeySigner(certSerialNo, merchantPrivateKey)),
+        this.getApiV3Key().getBytes(StandardCharsets.UTF_8), this.getCertAutoUpdateTime(),
+        this.getPayBaseUrl(), wxPayHttpProxy);
+    }
     if (publicKey != null) {
       Verifier publicCertificatesVerifier = new PublicCertificateVerifier(publicKey, publicKeyId);
       publicCertificatesVerifier.setOtherVerifier(certificatesVerifier);

weixin-java-pay/src/main/java/com/github/binarywang/wxpay/v3/auth/PublicCertificateVerifier.java

@@ -24,7 +24,7 @@ public void setOtherVerifier(Verifier verifier) {
 
     @Override
     public boolean verify(String serialNumber, byte[] message, String signature) {
-        if (!serialNumber.contains("PUB_KEY_ID")) {
+        if (!serialNumber.contains("PUB_KEY_ID") && this.certificateVerifier != null) {
             return this.certificateVerifier.verify(serialNumber, message, signature);
         }
         try {