HttpsURLConnection请求https，抛出javax.net.ssl.SSLException: hostname in certificate didn't match:

最新推荐文章于 2021-03-30 19:15:01 发布

原创最新推荐文章于 2021-03-30 19:15:01 发布 · 2.8k 阅读

0 ·

CC 4.0 BY-SA版权

文章标签：

#Https #SSL #HttpsURLConnection

Android 专栏收录该内容

132 篇文章

订阅专栏

本文提供了一种禁用HTTPS证书验证的方法，通过创建一个自定义的信任管理器和主机名验证器来绕过通常的安全检查，这对于调试或者测试环境下的非正式证书很有用。

解决办法：

try {
	SSLContext sc = SSLContext.getInstance("TLS");
	sc.init(null, new TrustManager[]{new X509TrustManager() {
		@Override
		public void checkClientTrusted(X509Certificate[] chain, String authType) throws CertificateException {
		}

		@Override
		public void checkServerTrusted(X509Certificate[] chain, String authType) throws CertificateException {
		}

		@Override
		public X509Certificate[] getAcceptedIssuers() {
			return null;
		}
	}}, new SecureRandom());

	HttpsURLConnection.setDefaultSSLSocketFactory(sc.getSocketFactory());
	HttpsURLConnection.setDefaultHostnameVerifier(new HostnameVerifier() {
		@Override
		public boolean verify(String arg0, SSLSession arg1) {
			return true;
		}
	});
} catch (Exception e) {
	e.printStackTrace();
}