OkHttp3.1以上信任所有证书

最新推荐文章于 2025-04-28 16:07:48 发布

原创最新推荐文章于 2025-04-28 16:07:48 发布 · 6.3k 阅读

CC 4.0 BY-SA版权

本文介绍了一种在最新版OkHttp中配置信任所有证书的方法。通过创建一个不验证证书链的信任管理器，并安装到SSLContext中，再利用此SSLContext创建一个包含信任管理器的SSLSocketFactory。最后通过OkHttpClient.Builder设置该SSLSocketFactory和主机名验证器来实现。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

最近在做这个，在网上找相关的文档，发现最新的Okhttp的信任所有证书的方法跟网上的demo有些不同了直接上代码吧

private static OkHttpClient getUnsafeOkHttpClient() {
        try {
            // Create a trust manager that does not validate certificate chains
            final TrustManager[] trustAllCerts = new TrustManager[] {
                    new X509TrustManager() {
                        @Override
                        public void checkClientTrusted(java.security.cert.X509Certificate[] chain, String authType) {
                        }

                        @Override
                        public void checkServerTrusted(java.security.cert.X509Certificate[] chain, String authType) {
                        }

                        @Override
                        public java.security.cert.X509Certificate[] getAcceptedIssuers() {
                            return new java.security.cert.X509Certificate[]{};
                        }
                    }
            };

            // Install the all-trusting trust manager
            final SSLContext sslContext = SSLContext.getInstance("SSL");
            sslContext.init(null, trustAllCerts, new java.security.SecureRandom());
            // Create an ssl socket factory with our all-trusting manager
            final javax.net.ssl.SSLSocketFactory sslSocketFactory = sslContext.getSocketFactory();

            OkHttpClient.Builder builder = new OkHttpClient.Builder();
            builder.sslSocketFactory(sslSocketFactory);
            builder.hostnameVerifier(new HostnameVerifier() {
                @Override
                public boolean verify(String hostname, SSLSession session) {
                    return true;
                }
            });

            OkHttpClient okHttpClient = builder.build();
            return okHttpClient;
        } catch (Exception e) {
            throw new RuntimeException(e);
        }
    }

在最新的Okhttp中 以前是要返回null  现在改成返回一个空的数组就可以了  <pre name="code" class="java">new java.security.cert.X509Certificate[]{}