Retrofit+OKHttp忽略https证书验证

最新推荐文章于 2021-06-01 08:53:52 发布

转载最新推荐文章于 2021-06-01 08:53:52 发布 · 6.1k 阅读

文章标签：

#Retrofit2 #https

Retrofit2+https 专栏收录该内容

5 篇文章

订阅专栏

本文提供了一个简单的工具类，用于忽略HTTPS证书验证，帮助解决因后台配置证书错误导致的应用无法访问服务器的问题，通过使用该工具类可以快速实现SSL连接的建立。

原文地址：https://www.cnblogs.com/huolongluo/p/8360478.html

记录这个的原因，是因为很多时候，因为后台配置的证书不正确导致APP访问不到服务器数据，导致影响自身的开发进度。没几行代码，逻辑也清晰，所以下面就直接贴出工具类吧：

package huolongluo.yeshen.byw.injection.model;

import java.security.SecureRandom;
import java.security.cert.X509Certificate;

import javax.net.ssl.HostnameVerifier;
import javax.net.ssl.SSLContext;
import javax.net.ssl.SSLSession;
import javax.net.ssl.SSLSocketFactory;
import javax.net.ssl.TrustManager;
import javax.net.ssl.X509TrustManager;

/**
 * Created by 火龙裸先生 on 2018/1/26.
 * <p>
 * 忽略https证书验证
 */

public class SSLSocketClient
{
    //获取这个SSLSocketFactory  
    public static SSLSocketFactory getSSLSocketFactory()
    {
        try
        {
            SSLContext sslContext = SSLContext.getInstance("SSL");
            sslContext.init(null, getTrustManager(), new SecureRandom());
            return sslContext.getSocketFactory();
        }
        catch (Exception e)
        {
            throw new RuntimeException(e);
        }
    }

    //获取TrustManager  
    private static TrustManager[] getTrustManager()
    {
        TrustManager[] trustAllCerts = new TrustManager[]{new X509TrustManager()
        {
            @Override
            public void checkClientTrusted(X509Certificate[] chain, String authType)
            {
            }

            @Override
            public void checkServerTrusted(X509Certificate[] chain, String authType)
            {
            }

            @Override
            public X509Certificate[] getAcceptedIssuers()
            {
                return new X509Certificate[]{};
            }
        }};
        return trustAllCerts;
    }

    //获取HostnameVerifier  
    public static HostnameVerifier getHostnameVerifier()
    {
        HostnameVerifier hostnameVerifier = new HostnameVerifier()
        {
            @Override
            public boolean verify(String s, SSLSession sslSession)
            {
                return true;
            }
        };
        return hostnameVerifier;
    }
}

有了以上的工具类，通过OKHttpClient.Builder对象调用 “sslSocketFactory ”方法和 “hostnameVerifier ” 方法。类似于如下：

技术分享图片

简言之：

1 builder.sslSocketFactory(SSLSocketClient.getSSLSocketFactory());
2 builder.hostnameVerifier(SSLSocketClient.getHostnameVerifier());