objc跳过安全认证，请求.https地址

最新推荐文章于 2022-07-06 10:36:28 发布

sing_sing

最新推荐文章于 2022-07-06 10:36:28 发布

阅读量9.3k

点赞数 2

分类专栏：手机开发 iOS开发文章标签： ios https

本文链接：https://blog.youkuaiyun.com/sing_sing/article/details/39005301

版权

iOS开发同时被 2 个专栏收录

40 篇文章

订阅专栏

手机开发

11 篇文章

订阅专栏

收集了几种方法，用于objc中跳过安全认证，请求https形式的地址。

1、NSURLRequest方式（未测试）

// Created by Alexandre Colucci on 23/07/2008.
// Copyright 2008 Alexandre Colucci. All rights reserved.

// Dummy interface to avoid a warning.
@interface NSURLRequest (DummyInterface)
+ (BOOL)allowsAnyHTTPSCertificateForHost:(NSString*)host;
+ (void)setAllowsAnyHTTPSCertificate:(BOOL)allow forHost:(NSString*)host;
@end

@implementation MainController

-(IBAction)doSomething:(id)sender
{
	// The URL of the Webserver
	NSURL *myWebserverURL = [NSURL URLWithString:@"https://myWebserver.com/"];
	
	// Create the request
	NSMutableURLRequest *theRequest = [NSMutableURLRequest requestWithURL:myWebserverURL cachePolicy:NSURLRequestReloadIgnoringCacheData timeoutInterval:60.0];
	
	// Set the HTTP method.
	[theRequest setHTTPMethod:@"POST"];
	
	// Set useful headers
	[theRequest setValue:@"text/xml" forHTTPHeaderField:@"Accept"];
	[theRequest setValue:@"application/xml" forHTTPHeaderField:@"Content-type"];
	
	// The body
	NSString *theDataString = @"<?xml version=\"1.0\" encoding=\"UTF-8\"?><something></something>";
	NSData *theData = [theDataString dataUsingEncoding:NSUTF8StringEncoding];
	[theRequest setHTTPBody:theData];
	
	// Use the private method setAllowsAnyHTTPSCertificate:forHost:
	// to not validate the HTTPS certificate.
	[NSURLRequest setAllowsAnyHTTPSCertificate:YES forHost:[myWebserverURL host]];
	
	// Create the NSURLConnection and init the request.
	[[NSURLConnection alloc] initWithRequest:theRequest delegate:self];
}

2、MKNetworkingKit方式：（测试通过）

在中添加一下设置：

MKNetworkEngine *netEngine = [[MKNetworkEngine alloc] initWithHostName:@"your host name"];
MKNetworkOperation *op = [netEngine operationWithURLString:url params:params httpMethod:@"POST"];
//skip ssl auth
op.shouldContinueWithInvalidCertificate = YES;

shouldContinueWithInvalidCertificate默认为NO.

源码如下：

/*!
 *  @abstract Boolean variable that states whether the operation should continue if the certificate is invalid.
 *  @property shouldContinueWithInvalidCertificate
 *
 *  @discussion
 * If you set this property to YES, the operation will continue as if the certificate was valid (if you use Server Trust Auth)
 *  The default value is NO. MKNetworkKit will not run an operation with a server that is not trusted.
 */
@property (nonatomic,assign) BOOL shouldContinueWithInvalidCertificate;

3、AFNetworking：(未亲测)

方法一：

添加宏定义，允许https非安全访问

#define AFNETWORKING_ALLOW_INVALID_SSL_CERTIFICATES

方法二：

AFJSONRequestOperation * op = [AFJSONRequestOperation JSONRequestOperationWithRequest:[NSURLRequest requestWithURL:[NSURL URLWithString:jsonURL]] success:^(NSURLRequest *request, NSHTTPURLResponse *response, id JSON) {
        DLog(@"%@", JSON);
    } failure:^(NSURLRequest *request, NSHTTPURLResponse *response, NSError *error, id JSON) {
        DLog(@"%@", error);
    }];
    op.allowsInvalidSSLCertificate = YES;
    [op start];