com.android.volley.NoConnectionError: javax.net.ssl.SSLHandshakeException: java.security.cert.CertP

忽略HTTPS证书校验

最新推荐文章于 2024-06-14 15:57:28 发布

原创最新推荐文章于 2024-06-14 15:57:28 发布 · 6.2k 阅读

0 ·

CC 4.0 BY-SA版权

Android基础专栏收录该内容

14 篇文章

订阅专栏

本文介绍了一种在Android应用中忽略HTTPS证书校验的方法，通过自定义TrustManager和HostnameVerifier来实现，适用于需要绕过证书验证的情况。

错误详情： com.android.volley.NoConnectionError: javax.net.ssl.SSLHandshakeException: 
java.security.cert.CertPathValidatorException: 
Trust anchor for certification path not found. 
在继承的Application类里面onCreat()方法中调用该方法忽略https的证书校验（尽量让后台传正确的证书）

@SuppressLint("TrulyRandom")
public static void handleSSLHandshake() {
    try {
        TrustManager[] trustAllCerts = new TrustManager[]{new X509TrustManager() {
            public X509Certificate[] getAcceptedIssuers() {
                return new X509Certificate[0];
            }

            @Override
            public void checkClientTrusted(X509Certificate[] certs, String authType) {
            }

            @Override
            public void checkServerTrusted(X509Certificate[] certs, String authType) {
            }
        }};

        SSLContext sc = SSLContext.getInstance("SSL");
        sc.init(null, trustAllCerts, new SecureRandom());
        HttpsURLConnection.setDefaultSSLSocketFactory(sc.getSocketFactory());
        HttpsURLConnection.setDefaultHostnameVerifier(new HostnameVerifier() {
            @Override
            public boolean verify(String hostname, SSLSession session) {
                return true;
            }
        });
    } catch (Exception ignored) {
    }
}