https请求单向认证

最新推荐文章于 2024-11-23 23:56:23 发布

原创最新推荐文章于 2024-11-23 23:56:23 发布 · 406 阅读

0 ·

CC 4.0 BY-SA版权

文章标签：

#https

本文详细介绍了一种简单的单向认证证书配置方法，通过在Android应用程序中使用预置的server.cer文件，实现HTTPS请求的安全连接。代码示例展示了如何加载证书、创建信任管理器并初始化SSLContext。

单向认证证书配置相对简单，服务端证书server.cer放在assets目录下，请求配置如下：

截取部分代码

public static synchronized String requestByPost(String urlpath,
			String requestData) throws IOException {
		AssetManager am = CommonDataApplication.getInstance().getApplicationContext().getAssets();
		SSLContext context = null;
		try {
			InputStream ins = am.open("server.cer");
			CertificateFactory cerFactory = CertificateFactory.getInstance("X.509");
			Certificate cer;
			try {
				cer = cerFactory.generateCertificate(ins);
			} finally {
				ins.close();
			}
			// Create a KeyStore containing our trusted CAs
			String keyStoreType = KeyStore.getDefaultType();
			KeyStore keyStore = KeyStore.getInstance(keyStoreType);
			keyStore.load(null, null);
			keyStore.setCertificateEntry("ca", cer);

			// Create a TrustManager that trusts the CAs in our KeyStore
			String tmfAlgorithm = TrustManagerFactory.getDefaultAlgorithm();
			TrustManagerFactory tmf = TrustManagerFactory.getInstance(tmfAlgorithm);
			tmf.init(keyStore);

			// Create an SSLContext that uses our TrustManager
			context = SSLContext.getInstance("TLS");
			context.init(null, tmf.getTrustManagers(), null);
		} catch (Exception e) {
			e.printStackTrace();
		}
		URL url = new URL(urlpath);
		HttpsURLConnection conn = (HttpsURLConnection) url.openConnection();
		conn.setSSLSocketFactory(context.getSocketFactory());
		conn.setDoInput(true);
		conn.setConnectTimeout(TIMEOUT);