iPhone HTTPS 访问非信任站点(使用非信任证书,untrusted certificate)

最新推荐文章于 2024-05-21 08:55:52 发布

儿大不由爷

最新推荐文章于 2024-05-21 08:55:52 发布

阅读量2.5k

点赞数

分类专栏： iOS 文章标签： iphone library wrapper reference dialog api

iOS 专栏收录该内容

37 篇文章

订阅专栏

本文介绍了一种通过私有API实现对自签名或不受信任的证书进行HTTPS连接的方法。提供了NSURLConnection代理方法的具体实现细节，允许应用程序接受特定主机的信任。此外，还推荐了一个开源库ASIHTTPRequest，它支持使用自签名证书的HTTPS连接。

1. There is a supported API for accomplishing this! Add something like this to your NSURLConnection delegate:

- (BOOL)connection:(NSURLConnection *)connection canAuthenticateAgainstProtectionSpace:(NSURLProtectionSpace *)protectionSpace {
  return [protectionSpace.authenticationMethod isEqualToString:NSURLAuthenticationMethodServerTrust];
}

- (void)connection:(NSURLConnection *)connection didReceiveAuthenticationChallenge:(NSURLAuthenticationChallenge *)challenge {
  if ([challenge.protectionSpace.authenticationMethod isEqualToString:NSURLAuthenticationMethodServerTrust])
    if ([trustedHosts containsObject:challenge.protectionSpace.host])
      [challenge.sender useCredential:[NSURLCredential credentialForTrust:challenge.protectionSpace.serverTrust] forAuthenticationChallenge:challenge];

  [challenge.sender continueWithoutCredentialForAuthenticationChallenge:challenge];
}

Note that connection:didReceiveAuthenticationChallenge: can send its message to challenge.sender (much) later, after presenting a dialog box to the user if necessary, etc.

2.If you're unwilling (or unable) to use private APIs, there's an open source (BSD license) library called ASIHTTPRequest that provides a wrapper around the lower-level CFNetwork APIs. They recently introduced the ability to allow HTTPS connections using self-signed or untrusted certificates with the -setValidatesSecureCertificate: API. If you don't want to pull in the whole library, you could use the source as a reference for implementing the same functionality yourself.