diff --git a/zdxt-modules/zdxt-enforcement-code/src/main/java/com/zdxt/enforcementcode/controller/app/utils/HttpUtil.java b/zdxt-modules/zdxt-enforcement-code/src/main/java/com/zdxt/enforcementcode/controller/app/utils/HttpUtil.java
index 19cc9e66..733ce1f2 100644
--- a/zdxt-modules/zdxt-enforcement-code/src/main/java/com/zdxt/enforcementcode/controller/app/utils/HttpUtil.java
+++ b/zdxt-modules/zdxt-enforcement-code/src/main/java/com/zdxt/enforcementcode/controller/app/utils/HttpUtil.java
@@ -7,6 +7,7 @@ import org.apache.http.config.Registry;
 import org.apache.http.config.RegistryBuilder;
 import org.apache.http.conn.socket.ConnectionSocketFactory;
 import org.apache.http.conn.socket.PlainConnectionSocketFactory;
+import org.apache.http.conn.ssl.NoopHostnameVerifier;
 import org.apache.http.conn.ssl.SSLConnectionSocketFactory;
 import org.apache.http.impl.client.CloseableHttpClient;
 import org.apache.http.impl.client.HttpClients;
@@ -28,9 +29,10 @@ public class HttpUtil {
         CloseableHttpResponse response=null;
         SSLContext sc = SSLContext.getInstance("TLSv1.2");
         sc.init(null, new TrustManager[] { new TrustAnyTrustManager() }, new java.security.SecureRandom());
+        // 内网用 IP 访问时证书是 *.szssfj.cn，关闭主机名校验，域名/IP 均可
         Registry<ConnectionSocketFactory> registry = RegistryBuilder.<ConnectionSocketFactory>create()
                 .register("http", PlainConnectionSocketFactory.INSTANCE)
-                .register("https",new SSLConnectionSocketFactory(sc))
+                .register("https", new SSLConnectionSocketFactory(sc, NoopHostnameVerifier.INSTANCE))
                 .build();
         PoolingHttpClientConnectionManager manager = new PoolingHttpClientConnectionManager(registry);
         CloseableHttpClient httpClient = HttpClients.custom().setConnectionManager(manager).build();