NSURLConnection实现HTTPS(SSL)链接请求

最新推荐文章于 2020-07-10 17:04:14 发布

转载最新推荐文章于 2020-07-10 17:04:14 发布 · 2.2k 阅读

文章标签：

#iOS实现HTTPs链接 #ssl

iOS技术分享专栏收录该内容

33 篇文章

订阅专栏

本文探讨了在iOS应用中使用HTTPS请求时处理SSL认证的方法，包括使用NSURLConnection和AFNetworking框架实现SSL认证流程。重点介绍了如何接收证书、验证私有证书以及在AFNetworking框架中设置SSL认证回调。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

最近检测APP应用的网络请求，发现HTTP方式的接口，请求的数据比较容易让不道德的人截取并加以利用。所以建议接口请求数据的方式还是使用HTTPS(SSL)，相对的安全些。

在iOS中，使用NSURLConnection来请求HTTPS，就需要处理SSL认证，NSURLConnectionDelegate中定义了处理认证的方法：

 
    – connection:canAuthenticateAgainstProtectionSpace:
– connection:didReceiveAuthenticationChallenge:
- connection:didCancelAuthenticationChallenge:

NSURLConnection中处理SSL

 
    - (BOOL)connection:(NSURLConnection *)connection canAuthenticateAgainstProtectionSpace:(NSURLProtectionSpace *)protectionSpace{
  return [protectionSpace.authenticationMethod isEqualToString:NSURLAuthenticationMethodServerTrust];
}

接收任何证书

 
    - (void)connection:(NSURLConnection *)connection didReceiveAuthenticationChallenge:(NSURLAuthenticationChallenge *)challenge{
        [challenge.sender useCredential:[NSURLCredential credentialForTrust:challenge.protectionSpace.serverTrust] forAuthenticationChallenge:challenge];
}

使用私有证书验证

 
    - (void)connection:(NSURLConnection *)connection didReceiveAuthenticationChallenge:(NSURLAuthenticationChallenge *)challenge
{
        static CFArrayRef certs;
        if (!certs) {
            NSData *certData =[NSData dataWithContentsOfFile:[[NSBundle mainBundle] pathForResource:@"srca" ofType:@"cer"]];
            SecCertificateRef rootcert =SecCertificateCreateWithData(kCFAllocatorDefault,CFBridgingRetain(certData));
            const void *array[1] = { rootcert };
            certs = CFArrayCreate(NULL, array, 1, &kCFTypeArrayCallBacks);
            CFRelease(rootcert);    // for completeness, really does not matter
        }

        SecTrustRef trust = [[challenge protectionSpace] serverTrust];
        int err;
        SecTrustResultType trustResult = 0;
        err = SecTrustSetAnchorCertificates(trust, certs);
        if (err == noErr) {
            err = SecTrustEvaluate(trust,&trustResult);
        }
        CFRelease(trust);
        BOOL trusted = (err == noErr) && ((trustResult == kSecTrustResultProceed)||(trustResult == kSecTrustResultConfirm) || (trustResult == kSecTrustResultUnspecified));

        if (trusted) {
            [challenge.sender useCredential:[NSURLCredential credentialForTrust:challenge.protectionSpace.serverTrust] forAuthenticationChallenge:challenge];
        }else{
            [challenge.sender cancelAuthenticationChallenge:challenge];
        }
}
 
 
  

AFNetWorking框架中处理SSL

使用AFURLConnectionOperation类的两个方法，将上面的代码以block方式传入即可。

 
    – setAuthenticationAgainstProtectionSpaceBlock:
– setAuthenticationChallengeBlock: