Android：发出 Https 请求

Question

在发出 Https 请求时，如何避免“javax.net.ssl.SSLPeerUnverifiedException: peer not authenticated”异常和 Android Apache lib 间隙“构造函数 SSLSocketFactory(SSLContext) 未定义”？

Answer 1

我有类似的问题，更像是question，但根本原因与两个问题中提到的完全不同。

我使用 DefaultHttpClient 作为 httpclient 来请求 https://maps.googleapis.com 之类的链接。我正在尝试所有提议的解决方案，但没有一个对我有用。经过几个小时试图解决它，找到了根本原因：我的设备连接到一个访客 WIFI，它可能有一些特定的过滤规则阻止了相关的网络部分。切换到其他网络解决了我的问题。

Answer 2

此方法接受一个 HttpClient 实例并返回一个准备好 https 的 HttpClient 实例。

 private HttpClient sslClient(HttpClient client) {
    try {
        X509TrustManager tm = new X509TrustManager() { 
            public void checkClientTrusted(X509Certificate[] xcs, String string) throws CertificateException {
            }

            public void checkServerTrusted(X509Certificate[] xcs, String string) throws CertificateException {
            }

            public X509Certificate[] getAcceptedIssuers() {
                return null;
            }
        };
        SSLContext ctx = SSLContext.getInstance("TLS");
        ctx.init(null, new TrustManager[]{tm}, null);
        SSLSocketFactory ssf = new MySSLSocketFactory(ctx);
        ssf.setHostnameVerifier(SSLSocketFactory.ALLOW_ALL_HOSTNAME_VERIFIER);
        ClientConnectionManager ccm = client.getConnectionManager();
        SchemeRegistry sr = ccm.getSchemeRegistry();
        sr.register(new Scheme("https", ssf, 443));
        return new DefaultHttpClient(ccm, client.getParams());
    } catch (Exception ex) {
        return null;
    }
}

由于Android org.apache.http.conn.ssl.SSLSocketFactory 没有SSLSocketFactory(SSLContext) 构造函数，所以我将类扩展如下。

 public class MySSLSocketFactory extends SSLSocketFactory {
     SSLContext sslContext = SSLContext.getInstance("TLS");

     public MySSLSocketFactory(KeyStore truststore) throws NoSuchAlgorithmException, KeyManagementException, KeyStoreException, UnrecoverableKeyException {
         super(truststore);

         TrustManager tm = new X509TrustManager() {
             public void checkClientTrusted(X509Certificate[] chain, String authType) throws CertificateException {
             }

             public void checkServerTrusted(X509Certificate[] chain, String authType) throws CertificateException {
             }

             public X509Certificate[] getAcceptedIssuers() {
                 return null;
             }
         };

         sslContext.init(null, new TrustManager[] { tm }, null);
     }

     public MySSLSocketFactory(SSLContext context) throws KeyManagementException, NoSuchAlgorithmException, KeyStoreException, UnrecoverableKeyException {
        super(null);
        sslContext = context;
     }

     @Override
     public Socket createSocket(Socket socket, String host, int port, boolean autoClose) throws IOException, UnknownHostException {
         return sslContext.getSocketFactory().createSocket(socket, host, port, autoClose);
     }

     @Override
     public Socket createSocket() throws IOException {
         return sslContext.getSocketFactory().createSocket();
     }
}

优秀文章在这里：http://javaskeleton.blogspot.com/2010/07/avoiding-peer-not-authenticated-with.html

还有一些帮助：Trusting all certificates using HttpClient over HTTPS