android javax.net.ssl.SSLPeerUnverifiedException: No peer certificate

最新推荐文章于 2024-12-20 16:03:46 发布

燕赵之骄子

最新推荐文章于 2024-12-20 16:03:46 发布

阅读量574

点赞数

分类专栏： Android

Android 专栏收录该内容

64 篇文章

订阅专栏

本文提供了一种解决跨设备SSL登录兼容性问题的方法。通过自定义SSLSocketFactoryEx和HttpClient来信任所有证书，确保应用程序能在不同系统和设备上稳定运行。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

最近做项目，界面有选择使用SSL登陆或非SSL登陆，发现本来可以登陆的程序刷系统或者换机器登陆不了，痛苦了好一会儿，解决了，如下为解决方案，项目中用的挺帅的

第一步：编写SSLSocketFactoryEx，以代替原有的SSLSocketFactory，代码如下
import org.apache.http.conn.ssl.SSLSocketFactory;
public class SSLSocketFactoryEx extends SSLSocketFactory {

    SSLContext sslContext = SSLContext.getInstance("TLS");

    public SSLSocketFactoryEx(KeyStore truststore)
            throws NoSuchAlgorithmException, KeyManagementException,
            KeyStoreException, UnrecoverableKeyException {
        super(truststore);

        TrustManager tm = new X509TrustManager() {

            public java.security.cert.X509Certificate[] getAcceptedIssuers() {
                return null;
            }

            @Override
            public void checkClientTrusted(
                    java.security.cert.X509Certificate[] chain, String authType)
                    throws java.security.cert.CertificateException {

            }

            @Override
            public void checkServerTrusted(
                    java.security.cert.X509Certificate[] chain, String authType)
                    throws java.security.cert.CertificateException {

            }
        };

        sslContext.init(null, new TrustManager[] { tm }, null);
    }

    @Override
    public Socket createSocket(Socket socket, String host, int port,
            boolean autoClose) throws IOException, UnknownHostException {
        return sslContext.getSocketFactory().createSocket(socket, host, port,
                autoClose);
    }

    @Override
    public Socket createSocket() throws IOException {
        return sslContext.getSocketFactory().createSocket();
    }
}

第二步：编写新的HttpClient getNewHttpClient来代替原有DefaultHttpClient，代码如下：
public static HttpClient getNewHttpClient() {
   try {
       KeyStore trustStore = KeyStore.getInstance(KeyStore.getDefaultType());
       trustStore.load(null, null);

       SSLSocketFactory sf = new SSLSocketFactoryEx(trustStore);
       sf.setHostnameVerifier(SSLSocketFactory.ALLOW_ALL_HOSTNAME_VERIFIER);

       HttpParams params = new BasicHttpParams();
       HttpProtocolParams.setVersion(params, HttpVersion.HTTP_1_1);
       HttpProtocolParams.setContentCharset(params, HTTP.UTF_8);

       SchemeRegistry registry = new SchemeRegistry();
       registry.register(new Scheme("http", PlainSocketFactory.getSocketFactory(), 80));
       registry.register(new Scheme("https", sf, 443));

       ClientConnectionManager ccm = new ThreadSafeClientConnManager(params, registry);

       return new DefaultHttpClient(ccm, params);
   } catch (Exception e) {
       return new DefaultHttpClient();
   }
}

第三步；接着在项目里把所有获得HttpClient实例通过DefaultHttpClient，都改成从
getNewHttpClient获取
//HttpClient hc = new DefaultHttpClient(httpParams);
//modified by lucky.lan@2012/05/10
HttpClient hc = ConnectionManager.getNewHttpClient() ;