Android如何通过https协议下载自己的https网站上的文件/apk等

我的服务器端是用Centos6.4+apache搭建的https 网站。

Android通过http下载不需要证书，不需要SSLfactory等，所以https和http的区别仅此而已。

1.证书相关的类，添加如下类：

import java.security.cert.CertificateException;
import java.security.cert.X509Certificate;


import javax.net.ssl.X509TrustManager;

public class TrustAllManager implements X509TrustManager {
        public void checkClientTrusted(X509Certificate[] cert, String authType)
                        throws CertificateException {
        }


        public void checkServerTrusted(X509Certificate[] cert, String authType)
                        throws CertificateException {
        }


        public X509Certificate[] getAcceptedIssuers() {
                return null;
        }
}

2.SSLFactory相关的类如下：

import java.io.IOException;
import java.net.Socket;
import java.security.KeyManagementException;
import java.security.KeyStoreException;
import java.security.NoSuchAlgorithmException;
import java.security.UnrecoverableKeyException;


import javax.net.ssl.SSLContext;
import javax.net.ssl.TrustManager;


import org.apache.http.conn.ssl.AllowAllHostnameVerifier;
import org.apache.http.conn.ssl.SSLSocketFactory;


public class TrustAllSSLSocketFactory extends SSLSocketFactory {
        private javax.net.ssl.SSLSocketFactory factory;


        public TrustAllSSLSocketFactory() throws KeyManagementException,
                        NoSuchAlgorithmException, KeyStoreException,
                        UnrecoverableKeyException {
                super(null);
                try {
                        SSLContext sslcontext = SSLContext.getInstance("TLS");
                        sslcontext.init(null, new TrustManager[] { new TrustAllManager() },
                                        null);
                        factory = sslcontext.getSocketFactory();
                        setHostnameVerifier(new AllowAllHostnameVerifier());
                } catch (Exception ex) {
                }
        }


        public static SSLSocketFactory getDefault() throws KeyManagementException,
                        NoSuchAlgorithmException, KeyStoreException,
                        UnrecoverableKeyException {
                return new TrustAllSSLSocketFactory();
        }


        @Override
        public Socket createSocket() throws IOException {
                return factory.createSocket();
        }


        @Override
        public Socket createSocket(Socket socket, String s, int i, boolean flag)
                        throws IOException {
                return factory.createSocket(socket, s, i, flag);
        }


 
        
        public javax.net.ssl.SSLSocketFactory getSSLSocketFactory() {
          return factory;
        } 
}

3.https需要把上面的Factory注册上，TrustAllManager 已经用在Factory上面了。

  // Step One register scheme of https
 HostnameVerifier hostnameVerifier = org.apache.http.conn.ssl.SSLSocketFactory.ALLOW_ALL_HOSTNAME_VERIFIER;
  
   SSLSocketFactory socketFactory = null;
   try {
     socketFactory = TrustAllSSLSocketFactory.getDefault();
   }
   catch (Exception e) {
     // TODO Auto-generated catch block
     e.printStackTrace();
   }

   HttpsURLConnection.setDefaultHostnameVerifier(hostnameVerifier);
   HttpsURLConnection.setDefaultSSLSocketFactory(((TrustAllSSLSocketFactory)socketFactory).getSSLSocketFactory());

注意第三步应该放在等到HttpsURLConnection得到连接之前，或者DefaultHttpClient类初始化之间，否则就会报各种各样的错误。