objc跳过安全认证，请求.https地址

Objective-C HTTPS 请求绕过认证

最新推荐文章于 2022-10-17 13:26:20 发布

转载最新推荐文章于 2022-10-17 13:26:20 发布 · 153 阅读

CC 4.0 BY-SA版权

原文链接：https://my.oschina.net/fadoudou/blog/731675

文章标签：

本文介绍如何在 Objective-C 中绕过 HTTPS 安全认证进行网络请求，提供了三种方法：使用 NSURLConnection 的私有方法、MKNetworkingKit 库设置及 AFNetworking 的宏定义和属性配置。

收集了几种方法，用于objc中跳过安全认证，请求https形式的地址。

1、NSURLRequest方式（未测试）

[objc] view plain copy

// Created by Alexandre Colucci on 23/07/2008.
// Copyright 2008 Alexandre Colucci. All rights reserved.
// Dummy interface to avoid a warning.
@interface NSURLRequest (DummyInterface)
+ (BOOL)allowsAnyHTTPSCertificateForHost:(NSString*)host;
+ (void)setAllowsAnyHTTPSCertificate:(BOOL)allow forHost:(NSString*)host;
@end
@implementation MainController
-(IBAction)doSomething:(id)sender
{
// The URL of the Webserver
NSURL *myWebserverURL = [NSURL URLWithString:@"https://myWebserver.com/"];
// Create the request
NSMutableURLRequest *theRequest = [NSMutableURLRequest requestWithURL:myWebserverURL cachePolicy:NSURLRequestReloadIgnoringCacheData timeoutInterval:60.0];
// Set the HTTP method.
[theRequest setHTTPMethod:@"POST"];
// Set useful headers
[theRequest setValue:@"text/xml" forHTTPHeaderField:@"Accept"];
[theRequest setValue:@"application/xml" forHTTPHeaderField:@"Content-type"];
// The body
NSString *theDataString = @"<?xml version=\"1.0\" encoding=\"UTF-8\"?><something></something>";
NSData *theData = [theDataString dataUsingEncoding:NSUTF8StringEncoding];
[theRequest setHTTPBody:theData];
// Use the private method setAllowsAnyHTTPSCertificate:forHost:
// to not validate the HTTPS certificate.
[NSURLRequest setAllowsAnyHTTPSCertificate:YES forHost:[myWebserverURL host]];
// Create the NSURLConnection and init the request.
[[NSURLConnection alloc] initWithRequest:theRequest delegate:self];
}

2、MKNetworkingKit方式：（测试通过）

在中添加一下设置：

[objc] view plain copy

MKNetworkEngine *netEngine = [[MKNetworkEngine alloc] initWithHostName:@"your host name"];
MKNetworkOperation *op = [netEngine operationWithURLString:url params:params httpMethod:@"POST"];
//skip ssl auth
op.shouldContinueWithInvalidCertificate = YES;

shouldContinueWithInvalidCertificate默认为NO.

源码如下：

[objc] view plain copy

/*!
* @abstract Boolean variable that states whether the operation should continue if the certificate is invalid.
* @property shouldContinueWithInvalidCertificate
*
* @discussion
* If you set this property to YES, the operation will continue as if the certificate was valid (if you use Server Trust Auth)
* The default value is NO. MKNetworkKit will not run an operation with a server that is not trusted.
*/
@property (nonatomic,assign) BOOL shouldContinueWithInvalidCertificate;

3、AFNetworking：(未亲测)

方法一：

添加宏定义，允许https非安全访问

[objc] view plain copy

方法二：

[objc] view plain copy

AFJSONRequestOperation * op = [AFJSONRequestOperation JSONRequestOperationWithRequest:[NSURLRequest requestWithURL:[NSURL URLWithString:jsonURL]] success:^(NSURLRequest *request, NSHTTPURLResponse *response, id JSON) {
DLog(@"%@", JSON);
} failure:^(NSURLRequest *request, NSHTTPURLResponse *response, NSError *error, id JSON) {
DLog(@"%@", error);
}];
op.allowsInvalidSSLCertificate = YES;
[op start];

转载于:https://my.oschina.net/fadoudou/blog/731675