芬芳_OkHttp处理Https问题

篇首语：本文由编程笔记#小编为大家整理，主要介绍了OkHttp 处理Https问题相关的知识，希望对你有一定的参考价值。

onFailure: java.security.cert.CertPathValidatorException: Trust anchor for certification path not found.


在之前接入php接口时是http没有任何问题完美跑通
但在正式环境下域名切换到https下就会出现一个异常
onFailure: java.security.cert.CertPathValidatorException: Trust anchor for certification path not found.
我以为是后台配置的ssl问题 我在项目中assets下也配置了ssl并在OkHttp下设置了路径


public static SSLSocketFactory getSslSocketFactory()
SSLContext sslContext &＃61; null;
try
CertificateFactory certificateFactory &＃61; CertificateFactory.getInstance("X.509");
Certificate ca;
InputStream certificates &＃61; null;
try
certificates &＃61; MyApplication.APP.getAssets().open("cmzk.cer");
ca &＃61; certificateFactory.generateCertificate(certificates);
finally
if (certificates !&＃61; null)
certificates.close();


String keyStoreType &＃61; KeyStore.getDefaultType();
KeyStore keyStore &＃61; KeyStore.getInstance(keyStoreType);
keyStore.load(null, null);
keyStore.setCertificateEntry("ca", ca);
String tmfAlgorithm &＃61; TrustManagerFactory.getDefaultAlgorithm();
TrustManagerFactory tmf &＃61; TrustManagerFactory.getInstance(tmfAlgorithm);
tmf.init(keyStore);
sslContext &＃61; SSLContext.getInstance("SSL");
sslContext.init(null, tmf.getTrustManagers(), null);
catch (Exception e)
e.printStackTrace();

return sslContext !&＃61; null ? sslContext.getSocketFactory() : null;



在创建OkHttp实例时配置ssl证书&＃xff0c;发现并没任何用还是会抛出ssl异常

okHttpClient &＃61; new OkHttpClient.Builder()
.connectTimeout(CON_TIME, TimeUnit.SECONDS)
.readTimeout(READ_TIME, TimeUnit.SECONDS)
.writeTimeout(WRITE_TIME, TimeUnit.SECONDS)
.addNetworkInterceptor(internateInttercepter)
.addInterceptor(appInterceptor)
.sslSocketFactory(getSslSocketFactory())//设置https证书
.hostnameVerifier(new HostnameVerifier()
&＃64;Override
public boolean verify(String hostname, SSLSession session)
return true;
)
.cache(cache)
.build();


到这里就很神奇了?
我没有配置ssl也会异常&＃xff0c;我配置了还会异常 ****(口吐芬芳)
后来发现OkHttp默认验证SSL 那么给他关掉不久好了(想法 idea)


private SSLSocketFactory createSSLSocketFactory()
SSLSocketFactory ssfFactory &＃61; null;
try
MyTrustManager mMyTrustManager &＃61; new MyTrustManager();
SSLContext sc &＃61; SSLContext.getInstance("TLS");
sc.init(null, new TrustManager[]mMyTrustManager, new SecureRandom());
ssfFactory &＃61; sc.getSocketFactory();
catch (Exception ignored)
ignored.printStackTrace();

return ssfFactory;

//实现X509TrustManager接口
public static class MyTrustManager implements X509TrustManager
&＃64;Override
public void checkClientTrusted(X509Certificate[] chain, String authType) throws CertificateException

&＃64;Override
public void checkServerTrusted(X509Certificate[] chain, String authType) throws CertificateException

&＃64;Override
public X509Certificate[] getAcceptedIssuers()
return new X509Certificate[0];




okHttpClient &＃61; new OkHttpClient.Builder()
.connectTimeout(CON_TIME, TimeUnit.SECONDS)
.readTimeout(READ_TIME, TimeUnit.SECONDS)
.writeTimeout(WRITE_TIME, TimeUnit.SECONDS)
.addNetworkInterceptor(internateInttercepter)
.addInterceptor(appInterceptor)
// .sslSocketFactory(getSslSocketFactory())//设置https证书
.sslSocketFactory(createSSLSocketFactory())//忽略ssl验证
.hostnameVerifier(new HostnameVerifier()
&＃64;Override
public boolean verify(String hostname, SSLSession session)
return true;

)
.cache(cache)
.build();


测试完美跑通&＃xff01;
*注意 Retrofit也是一样哦
针对https的处理&＃xff0c;目前主要有两种方式&＃xff1a;
客户端默认信任全部证书
对自签名网址进行证书的单独处理