>> 欢迎您 客人: 登录 | 注册 | 在线 | 搜索 | 风格 | 帮助 | 统计 | 文章 返回首页
>>分享Android开发相关的技术 书籍支持  卫琴直播  品书摘要  在线测试  资源下载  联系我们
Java技术网站 → 『 Java开发技术 』 → 『 Android技术专题 』 → Android忽略HTTPS安全验证的解决
发表一个新主题 开启一个新投票 回复文章 您是本文章第 22915 个阅读者 刷新本主题
 * 贴子主题:  Android忽略HTTPS安全验证的解决 回复文章 点赞(0)  收藏  
作者:mary    发表时间：2020-03-31 23:49:15     消息  查看  搜索  好友  邮件  复制  引用
          通过Https访问的时候经常会遇到"Not trusted Server Certificate"的问题，有人说在3.0上面没有这个问题，可能已经改进了，在2.2及以前的版本中有这个问题。

         开始想的是采用安装证书的方法(Trusting SSL certificates），最后也没有成功，不知道是证书的原因还是其他，有人说安装证书只能在WIFI上使用，没有找到官方文档，用户可能在GPRS上使用，只能放弃。

         StackOverflow上也有相关的方案，我整理了一下。

         我将注册的步骤封装到DefaultHttpClient子类中了，这样看上去更清晰一些，你也可以

         直接实例化DefaultHttpClient的方法。        
  1.    SchemeRegistry schemeRegistry =  new  SchemeRegistry(); schemeRegistry.register( new  Scheme ( "https" , sslf,  443 ));  
  2.   SingleClientConnManager cm =  new  
  3.   SingleClientConnManager(post.getParams(), schemeRegistry);  
  4.   HttpClient client =  new  DefaultHttpClient(cm, post.getParams());
  1.    /**
  2.     * @author Brant
  3.     * @decription
  4.     */  
  5.    public   class  SSLHttpClient  extends  DefaultHttpClient {
  7.        @Override  
  8.        protected  ClientConnectionManager createClientConnectionManager() {
  9.           SchemeRegistry registry =  new  SchemeRegistry();
  10.           registry.register( new  Scheme( "http" , PlainSocketFactory
  11.                   .getSocketFactory(),  80 ));
            //443是Https的默认端口，如果网站配置的端口不一样，这里要记着改一下
  12.           registry.register( new  Scheme( "https" ,  new  EasySSLSocketFactory(),  443 ));
  13.            return   new  SingleClientConnManager(getParams(), registry);
  15.       }
  17.        public   static  SSLHttpClient getInstance() {
  18.           SSLHttpClient client =  new  SSLHttpClient();
  19.           client.setCookieStore(mCookie);
  20.            return  client;
  21.       }
  22.   }
       EasySSLSocketFactory:        
  1.    import  java.io.IOException;
  2.    import  java.net.InetAddress;
  3.    import  java.net.InetSocketAddress;
  4.    import  java.net.Socket;
  5.    import  java.net.UnknownHostException;
  7.    import  javax.net.ssl.SSLContext;
  8.    import  javax.net.ssl.SSLSocket;
  9.    import  javax.net.ssl.TrustManager;
  11.    import  org.apache.http.conn.ConnectTimeoutException;
  12.    import  org.apache.http.conn.scheme.LayeredSocketFactory;
  13.    import  org.apache.http.conn.scheme.SocketFactory;
  14.    import  org.apache.http.params.HttpConnectionParams;
  15.    import  org.apache.http.params.HttpParams;
  17.    /**
  18.     * This socket factory will create ssl socket that accepts self signed
  19.     * certificate
  20.     *  
  21.     * @author olamy
  22.     * @version $Id: EasySSLSocketFactory.java 765355 2009-04-15 20:59:07Z evenisse
  23.     *          $
  24.     * @since 1.2.3
  25.     */  
  26.    public   class  EasySSLSocketFactory  implements  SocketFactory,
  27.           LayeredSocketFactory {
  29.        private  SSLContext sslcontext =  null ;
  31.        private   static  SSLContext createEasySSLContext()  throws  IOException {
  32.            try  {
  33.               SSLContext context = SSLContext.getInstance( "TLS" );
  34.               context.init( null ,  new  TrustManager[] {  new  EasyX509TrustManager(
  35.                        null ) },  null );
  36.                return  context;
  37.           }  catch  (Exception e) {
  38.                throw   new  IOException(e.getMessage());
  39.           }
  40.       }
  42.        private  SSLContext getSSLContext()  throws  IOException {
  43.            if  ( this .sslcontext ==  null ) {
  44.                this .sslcontext = createEasySSLContext();
  45.           }
  46.            return   this .sslcontext;
  47.       }
  49.        /**
  50.         * @see org.apache.http.conn.scheme.SocketFactory#connectSocket(java.net.Socket,
  51.         *      java.lang.String, int, java.net.InetAddress, int,
  52.         *      org.apache.http.params.HttpParams)
  53.         */  
  54.        public  Socket connectSocket(Socket sock, String host,  int  port,
  55.               InetAddress localAddress,  int  localPort, HttpParams params)
  56.                throws  IOException, UnknownHostException, ConnectTimeoutException {
  57.            int  connTimeout = HttpConnectionParams.getConnectionTimeout(params);
  58.            int  soTimeout = HttpConnectionParams.getSoTimeout(params);
  60.           InetSocketAddress remoteAddress =  new  InetSocketAddress(host, port);
  61.           SSLSocket sslsock = (SSLSocket) ((sock !=  null ) ? sock : createSocket());
  63.            if  ((localAddress !=  null ) || (localPort >  0 )) {
  64.                // we need to bind explicitly  
  65.                if  (localPort <  0 ) {
  66.                   localPort =  0 ;  // indicates "any"  
  67.               }
  68.               InetSocketAddress isa =  new  InetSocketAddress(localAddress,
  69.                       localPort);
  70.               sslsock.bind(isa);
  71.           }
  73.           sslsock.connect(remoteAddress, connTimeout);
  74.           sslsock.setSoTimeout(soTimeout);
  75.            return  sslsock;
  77.       }
  79.        /**
  80.         * @see org.apache.http.conn.scheme.SocketFactory#createSocket()
  81.         */  
  82.        public  Socket createSocket()  throws  IOException {
  83.            return  getSSLContext().getSocketFactory().createSocket();
  84.       }
  86.        /**
  87.         * @see org.apache.http.conn.scheme.SocketFactory#isSecure(java.net.Socket)
  88.         */  
  89.        public   boolean  isSecure(Socket socket)  throws  IllegalArgumentException {
  90.            return   true ;//不判断socket，直接返回true
  91.       }
  93.        /**
  94.         * @see org.apache.http.conn.scheme.LayeredSocketFactory#createSocket(java.net.Socket,
  95.         *      java.lang.String, int, boolean)
  96.         */  
  97.        public  Socket createSocket(Socket socket, String host,  int  port,
  98.                boolean  autoClose)  throws  IOException, UnknownHostException {
  99.            //return getSSLContext().getSocketFactory().createSocket();
  100.            //will get java.io.IOException: SSL handshake failure: I/O error
  101.            //during system call, Broken pipe
  102.            return  getSSLContext().getSocketFactory().createSocket(socket, host,
  103.                   port, autoClose);
  104.       }
  106.        // -------------------------------------------------------------------  
  107.        // javadoc in org.apache.http.conn.scheme.SocketFactory says :  
  108.        // Both Object.equals() and Object.hashCode() must be overridden  
  109.        // for the correct operation of some connection managers  
  110.        // -------------------------------------------------------------------  
  112.        public   boolean  equals(Object obj) {
  113.            return  ((obj !=  null ) && obj.getClass().equals(
  114.                   EasySSLSocketFactory. class ));
  115.       }
  117.        public   int  hashCode() {
  118.            return  EasySSLSocketFactory. class .hashCode();
  119.       }
  121.   }
      EasyX509TrustManager:        
  1.    import  java.security.KeyStore;
  2.    import  java.security.KeyStoreException;
  3.    import  java.security.NoSuchAlgorithmException;
  4.    import  java.security.cert.CertificateException;
  5.    import  java.security.cert.X509Certificate;
  7.    import  javax.net.ssl.TrustManager;
  8.    import  javax.net.ssl.TrustManagerFactory;
  9.    import  javax.net.ssl.X509TrustManager;
  11.    /**
  12.     * @author olamy
  13.     * @version $Id: EasyX509TrustManager.java 765355 2009-04-15 20:59:07Z evenisse
  14.     *          $
  15.     * @since 1.2.3
  16.     */  
  17.    public   class  EasyX509TrustManager  implements  X509TrustManager {
  19.        private  X509TrustManager standardTrustManager =  null ;
  21.        /**
  22.         * Constructor for EasyX509TrustManager.
  23.         */  
  24.        public  EasyX509TrustManager(KeyStore keystore)
  25.                throws  NoSuchAlgorithmException, KeyStoreException {
  26.            super ();
  27.           TrustManagerFactory factory = TrustManagerFactory
  28.                   .getInstance(TrustManagerFactory.getDefaultAlgorithm());
  29.           factory.init(keystore);
  30.           TrustManager[] trustmanagers = factory.getTrustManagers();
  31.            if  (trustmanagers.length ==  0 ) {
  32.                throw   new  NoSuchAlgorithmException( "no trust manager found" );
  33.           }
  34.            this .standardTrustManager = (X509TrustManager) trustmanagers[ 0 ];
  35.       }
  37.        /**
  38.         * @see javax.net.ssl.X509TrustManager#checkClientTrusted(X509Certificate[],
  39.         *      String authType)
  40.         */  
  41.        public   void  checkClientTrusted(X509Certificate[] certificates,
  42.               String authType)  throws  CertificateException {
  43.           standardTrustManager.checkClientTrusted(certificates, authType);
  44.       }
  46.        /**
  47.         * @see javax.net.ssl.X509TrustManager#checkServerTrusted(X509Certificate[],
  48.         *      String authType)
  49.         */  
  50.        public   void  checkServerTrusted(X509Certificate[] certificates,
  51.               String authType)  throws  CertificateException {
  52.            if  ((certificates !=  null ) && (certificates.length ==  1 )) {
  53.               certificates[ 0 ].checkValidity();
  54.           }  else  {
  55.               standardTrustManager.checkServerTrusted(certificates, authType);
  56.           }
  57.       }
  59.        /**
  60.         * @see javax.net.ssl.X509TrustManager#getAcceptedIssuers()
  61.         */  
  62.        public  X509Certificate[] getAcceptedIssuers() {
  63.            return   this .standardTrustManager.getAcceptedIssuers();
  64.       }
  66.   }
      然后直接实例化SSLHttpClient就可以想Http一样执行HttpGet和HttpPost方法了,希望能有所帮助:)。



----------------------------
原文链接:https://blog.51cto.com/lbrant/795636

程序猿的技术大观园：www.javathinker.net



[这个贴子最后由 flybird 在 2020-04-08 08:22:28 重新编辑]
Java精品书籍推荐
Java最新视频教程推荐
  Java面向对象编程-->按面向对象开发的基础范例
  JavaWeb开发-->集合（上）
  JSP与Hibernate开发-->Servlet技术详解（Ⅰ）
  Java网络编程-->Web运作原理（Ⅰ）
  精通Spring-->域对象在持久化层的四种状态
  Vue3开发-->第一个helloapp应用
本站其他相关文章
  Android基础之用Eclipse搭建Android开发环境和创建第一个And...
  Android Gallery实现循环显示图像
  Android Broadcast receiver 编程
  Android ExpandableListView 使用范例
  Android 滚动Tab
  编译Irrlicht On Android
  Android UI学习 - Menu
  Android开发实践：Android.mk模板
  Android内核开发：图解Android系统的启动过程
  安卓隐藏标题栏方法
  Scroll的原理和简单使用
  Android性能优化之视图篇（渲染机制）_移动开发_Applicaton的...
  android 拼图小游戏
  怎么让软键盘弹出时，部分控件上移
  Android 之不要滥用 SharedPreferences（下）
  更多...
 IPIP: 已设置保密
树形列表:   
共1页 1条记录 当前第1页
发表一个新主题 开启一个新投票 回复文章

中文版权所有： JavaThinker技术网站 Copyright 2016-2026 沪ICP备16029593号-2
荟萃Java程序员智慧的结晶，分享交流Java前沿技术。  联系我们
如有技术文章涉及侵权，请与本站管理员联系。