OKHttp请求https证书验证

最新推荐文章于 2022-05-17 14:09:38 发布

金胖

最新推荐文章于 2022-05-17 14:09:38 发布

阅读量1.7k

点赞数

CC 4.0 BY-SA版权

分类专栏： Android 文章标签：请求HTTPS

本文链接：https://blog.youkuaiyun.com/weixin_40391500/article/details/79568513

Android 专栏收录该内容

37 篇文章

订阅专栏

本文介绍如何在Android应用中加载自签名证书srca.cer，并将其用于创建SSL连接，实现对特定HTTPS服务的安全访问。通过使用OkHttp库定制SSL套接字工厂，应用程序可以信任预置的自签名证书，确保与指定服务器之间的通信安全。

拿到srca.cer证书放入assets文件中

private static SSLSocketFactory sslSocketFactory = null;
public static void getSocketFactory() {
    try {
        InputStream certificate = MyApplication.mContext.getAssets().open("srca.cer");
        CertificateFactory certificateFactory = CertificateFactory.getInstance("X.509");
        KeyStore keyStore = KeyStore.getInstance(KeyStore.getDefaultType());
        keyStore.load(null);
        int index = 0;
        String certificateAlias = Integer.toString(index++);
        keyStore.setCertificateEntry(certificateAlias, certificateFactory.generateCertificate(certificate));

        try {
            if (certificate != null)
                certificate.close();
        } catch (IOException e) {
            e.printStackTrace();
        }

        SSLContext sslContext = SSLContext.getInstance("TLS");

        TrustManagerFactory trustManagerFactory =
                TrustManagerFactory.getInstance(TrustManagerFactory.getDefaultAlgorithm());

        trustManagerFactory.init(keyStore);
        sslContext.init
                (
                        null,
                        trustManagerFactory.getTrustManagers(),
                        new SecureRandom()
                );

        sslSocketFactory = sslContext.getSocketFactory();

    } catch (Exception e) {
        e.printStackTrace();
    }
}

/**
 * get请求
 **/
public void sendGetRepuest(String url, final CallBacks callbacks) {
    final Request request = new Request.Builder().url(url).build();
    client.newBuilder().connectTimeout(timeOut, TimeUnit.SECONDS)
            .readTimeout(timeOut, TimeUnit.SECONDS)
            .writeTimeout(timeOut, TimeUnit.SECONDS)
            .sslSocketFactory(sslSocketFactory)//设置sslSocketFactory
            .build();
    client.newCall(request).enqueue(new Callback() {
        @Override
        public void onFailure(Call call, IOException e) {
            callbacks.onError(e.toString());
        }

        //解析成功
        @Override
        public void onResponse(Call call, Response response) throws IOException {
            if (response != null && response.isSuccessful()) {
                callbacks.onSuccess(response.body().string());
            } else {
                callbacks.onError(response.toString());
            }
        }
    });
}

public class MyApplication extends Application {

    public static Context mContext = null;

    @Override
    public void onCreate() {
        super.onCreate();
        mContext = this;
        OkHttpUtils.getSocketFactory();
    }
}