https请求报错解决：javax.net.ssl.SSLException: Not trusted ...

最新推荐文章于 2024-08-07 14:58:21 发布

转载最新推荐文章于 2024-08-07 14:58:21 发布 · 4k 阅读

Android 网络通信专栏收录该内容

11 篇文章

订阅专栏

本文介绍了一个解决Android 2.2平台下通过HTTPS协议连接时出现的SSL验证问题的方法。通过自定义一个继承自SSLSocketFactory的类，实现了信任所有证书的功能，从而解决了javax.net.ssl.SSLException: Not trusted server certificate exception错误。提供了详细的代码实现和使用方式。

通过https协议请求数据报错了一下错误：
javax.net.ssl.SSLException: Not trusted server certificate exception.
在国外论坛上找了个解决的方案和大家分享。

我们需要自定义一个继承 org.apache.http.conn.ssl.SSLSocketFactory的类，在android2.2 的 SSLSocketFactory不提供单独使用，需要我们继承它。
例子如下：

复制内容到剪贴板

代码:

import java.io.IOException;
 import java.net.Socket;
 import java.net.UnknownHostException;
 import java.security.KeyManagementException;
 import java.security.KeyStore;
 import java.security.KeyStoreException;
 import java.security.NoSuchAlgorithmException;
 import java.security.UnrecoverableKeyException;
 import java.security.cert.CertificateException;
 import java.security.cert.X509Certificate;
 
 import javax.net.ssl.SSLContext;
 import javax.net.ssl.TrustManager;
 import javax.net.ssl.X509TrustManager;
 
 import org.apache.http.conn.ssl.SSLSocketFactory;
 public class MySSLSocketFactory extends SSLSocketFactory {
     SSLContext sslContext = SSLContext.getInstance("TLS");
 
     public MySSLSocketFactory(KeyStore truststore) throws NoSuchAlgorithmException, KeyManagementException, KeyStoreException, UnrecoverableKeyException {
         super(truststore);
 
         TrustManager tm = new X509TrustManager() {
             public void checkClientTrusted(X509Certificate[] chain, String authType) throws CertificateException {
             }
 
             public void checkServerTrusted(X509Certificate[] chain, String authType) throws CertificateException {
             }
 
             public X509Certificate[] getAcceptedIssuers() {
                 return null;
             }
         };
 
         sslContext.init(null, new TrustManager[] { tm }, null);
     }
 
      @Override
     public Socket createSocket(Socket socket, String host, int port, boolean autoClose) throws IOException, UnknownHostException {
         return sslContext.getSocketFactory().createSocket(socket, host, port, autoClose);
     }
 
      @Override
     public Socket createSocket() throws IOException {
         return sslContext.getSocketFactory().createSocket();
     }
 }

如下使用httpclient的方式：

复制内容到剪贴板

代码:

public HttpClient getNewHttpClient() {
     try {
         KeyStore trustStore = KeyStore.getInstance(KeyStore.getDefaultType());
         trustStore.load(null, null);
 
         SSLSocketFactory sf = new MySSLSocketFactory(trustStore);
         sf.setHostnameVerifier(SSLSocketFactory.ALLOW_ALL_HOSTNAME_VERIFIER);
 
         HttpParams params = new BasicHttpParams();
         HttpProtocolParams.setVersion(params, HttpVersion.HTTP_1_1);
         HttpProtocolParams.setContentCharset(params, HTTP.UTF_8);
 
         SchemeRegistry registry = new SchemeRegistry();
         registry.register(new Scheme("http", PlainSocketFactory.getSocketFactory(), 80));
         registry.register(new Scheme("https", sf, 443));
 
         ClientConnectionManager ccm = new ThreadSafeClientConnManager(params, registry);
 
         return new DefaultHttpClient(ccm, params);
     } catch (Exception e) {
         return new DefaultHttpClient();
     }
 }