android 10以上 自签名证书，SSL报错Unacceptable certificate，android 9 以下正常 问题解决

最新推荐文章于 2024-04-03 13:00:00 发布
最新推荐文章于 2024-04-03 13:00:00 发布
阅读量4.3k 收藏 1
点赞数 1
分类专栏： 自签名证书 SSL android 文章标签： java 后端
版权声明：本文为博主原创文章，遵循 CC 4.0 BY-SA 版权协议，转载请附上原文出处链接和本声明。
本文链接：https://blog.csdn.net/fab357103354/article/details/105867042
版权
自签名证书 同时被 3 个专栏收录
1 篇文章 0 订阅
订阅专栏
SSL
1 篇文章 0 订阅
订阅专栏
android
1 篇文章 0 订阅
订阅专栏

2020-04-26 16:41:48.437 28979-28979/? W/System.err: Caused by: java.security.cert.CertificateException: Unacceptable certificate: CN=*.testtt.com, OU=sbj, O=sbj, ST=bj, C=CN

2020-04-26 16:41:48.437 28979-28979/? W/System.err: at com.android.org.conscrypt.ChainStrengthAnalyzer.check(ChainStrengthAnalyzer.java:67)

2020-04-26 16:41:48.437 28979-28979/? W/System.err: at com.android.org.conscrypt.TrustManagerImpl.verifyChain(TrustManagerImpl.java:704)

2020-04-26 16:41:48.437 28979-28979/? W/System.err: at com.android.org.conscrypt.TrustManagerImpl.checkTrustedRecursive(TrustManagerImpl.java:551)

2020-04-26 16:41:48.437 28979-28979/? W/System.err: at com.android.org.conscrypt.TrustManagerImpl.checkTrustedRecursive(TrustManagerImpl.java:572)

2020-04-26 16:41:48.437 28979-28979/? W/System.err: at com.android.org.conscrypt.TrustManagerImpl.checkTrusted(TrustManagerImpl.java:507)

2020-04-26 16:41:48.437 28979-28979/? W/System.err: at com.android.org.conscrypt.TrustManagerImpl.checkTrusted(TrustManagerImpl.java:426)

2020-04-26 16:41:48.437 28979-28979/? W/System.err: at com.android.org.conscrypt.TrustManagerImpl.getTrustedChainForServer(TrustManagerImpl.java:354

经研究发现 在 Android 10 中，使用 SHA-1 哈希算法的证书在 TLS 连接中不受信任，导致的该问题。因为之前的证书使用的是SHA-1 哈希算法，所以更换新的证书后问题解决。使用openssl生成sha256自签名SSL证书，即可。

fab357103354
关注
  • 1
    点赞
  • 踩
  • 1
    收藏
    觉得还不错? 一键收藏
  • 0
    评论
专栏目录
Android代码-Android版Spring框架
08-06
Spring for Android Spring for Android is a library that is designed to provide components of the Spring Framework family of projects for use in native Android applications. Code of Conduct This project adheres to the Contributor Covenant code of conduct. By participating, you are expected to uphold this code. Please report unacceptable behavior to [email protected]. Features A REST client for Android Auth support for accessing secure APIs Download Artifacts The new Android Buil
java.security.cert.CertificateException: Unacceptable certificate: CN=WoTrus DV SSL CA
Evilloafer的博客
09-29 3213
APP在手持终端中遇到的问题：java.security.cert.CertificateException: Unacceptable certificate: CN=WoTrus DV SSL CA, O=WoTrus CA Limited, C=CN，查阅后发现是HttpsURLConnection请求HTTPS时证书检查出现的问题。 解决方案 引用 https://blog.csdn.n...
已解决javax.net.ssl.SSLHandshakeException: SSL握手异常的正确解决方法，亲测有效！！！
最新发布
小明的Java问道之路
04-03 2597
已解决javax.net.ssl.SSLHandshakeException: SSL握手异常的正确解决方法，亲测有效！！！
NetworkMonitor:iOS网络请求监控
05-07
NetworkMonitor 简介 NetworkMonitor主要用于监控应用的网络请求，获取网络请求相关的性能参数，方便开发、测试、产品等人员对应用进行分析。监控的指标主要有：成功率、状态码、流量、网络响应时间、HTTP与HTTPS的 DNS 解析、TCP握手、SSL握手（HTTPS）等。 NetworkMonitor的优点主要有： 收集数据全面。主要监控参数如上所述，基本涵盖了网络监控需求。 监控范围广。基本涵盖了应用层的网络请求，但是UIWebView/WKWebView除外，这个是后续开发方向。 接入使用方便。采用无埋点的数据收集方式，用户不需要手动埋点，接入只需要几行代码，即可收集基本数据。 可扩展性强。除了基本参数之外，用户还可以自定义扩展参数。 简洁轻量。SDK包大小不到0.5M，运行内存小，不挤占主应用资源。 数据准确度较高。SDK尽可能地使用了系统提供的数据，对于自己计
NR5G网络拒绝码-5gmm_cause = 7 (0x7) (5GS Service not allowed)
02-23
NR5G网络拒绝码-5gmm_cause = 7 (0x7) (5GS Service not allowed)
Android.High.Performance.Programming.1785288954
09-30
Build fast and efficient Android apps that run as reliably as clockwork in a multi-device world About This Book Wide coverage of various topics that help in developing optimal applications Explore the concepts of Advanced Native Coding in depth A must-have for professional-standard Android developers for whom performance failures and the sloppy use of resources are simply unacceptable Who This Book Is For This book is aimed at developers with an advanced knowledge of Android and who want to test their skills and learn new techniques to increase the performance of their applications. We assume they are comfortable working with the entire Android SDK, and have been doing it for a few years. They need to be familiar with frameworks such as NDK to use native code, which is crucial for app performance What You Will Learn Create Android applications that squeeze the most from the limited resource capacity of devices Swap code that isn't performing Efficient memory management by identifying problems such as leaks Reap the benefits of multithreaded and asynchronous programming Maximize the security and encryption mechanisms natively provided by Android Perform efficient network operations and techniques to retrieve data from servers Master the NDK to write native code that can perform faster operations In Detail Performant applications are one of the key drivers of success in the mobile world. Users may abandon an app if it runs slowly. Learning how to build applications that balance speed and performance with functionality and UX can be a challenge; however, it's now more important than ever to get that balance right. Android High Performance will start you thinking about how to wring the most from any hardware your app is installed on, so you can increase your reach and engagement. The book begins by providing an introduction to state–of-the-art Android techniques and the importance of performance in an Android application. Then, we will explain the Android SDK tools regularly used to debug and profile Android applications. We will also learn about some advanced topics such as building layouts, multithreading, networking, and security. Battery life is one of the biggest bottlenecks in applications; and this book will show typical examples of code that exhausts battery life, how to prevent this, and how to measure battery consumption from an application in every kind of situation to ensure your apps don't drain more than they should. This book explains techniques for building optimized and efficient systems that do not drain the battery, cause memory leaks, or slow down with time. Style and approach The book follows a tutorial-based approach to take the reader from the basic fundamentals of debugging to advanced performance-improvement concepts. Table of Contents Chapter 1: Introduction: Why High Performance? Chapter 2: Efficient Debugging Chapter 3: Building Layouts Chapter 4: Memory Chapter 5: Multithreading Chapter 6: Networking Chapter 7: Security Chapter 8: Optimizing Battery Consumption Chapter 9: Native Coding in Android Chapter 10: Performance Tips
Unacceptable certificate:CN=Let′s Encrypt Authority X3,O=Let′s Encrypt,C=US
Mr_freeler的博客
08-15 4014
Android客户端请求接口时候报错，Unacceptable certificate:CN=Let′s Encrypt Authority X3,O=Let′s Encrypt,C=US 原因：手机系统时间不正确，如果系统时间是按1970年来获取，就会报该错误信息，把时间同步到现在即可解决...
Unacceptable certificate: CN=GlobalSign Domain Validation CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE
Android/Linux的专栏
08-16 7268
使用https出现过再次这个错误，都是在使用Android App SDK的时候，怀疑过是不是域名https证书是不是过期了，不过最后确定不是。我的两次问题都是手机的时间不对，似乎和真实时间相差几个小时就不行了，没有再进一步验证，导致出现这个异常。 javax.net.ssl.SSLHandshakeException: Unacceptable certificate: CN=GlobalSi...
javax.net.ssl.SSLHandshakeException 证书报错的两种情况
ReminderFish
01-26 9286
安卓时间问题导致证书验证失败
Android SSLHandshakeException
Extra Lazy的博客
03-21 6910
SSLHandshakeException 相关SSLHandshakeException 报错信息，在项目中已经实现了，TrustAllManager，为何还会报错呢 javax.net.ssl.SSLHandshakeException: java.security.cert.CertPathValidatorException: Trust anchor for certification path not found. javax.net.ssl.SSLHandshakeException: Una
javax.net.ssl.SSLHandshakeException: Unacceptable certificate: CN=GeoTrust SSL C
Judy889的专栏
01-30 5524
最近从Android N升级到Android O,发现163的邮箱以pop3,110,SSL/TSL方式登录的时候会弹出Unacceptable certificate: CN=GeoTrust SSL CA. 从字面看出是证书有问题，将N的代码和O的代码进行对比，发现关于对应的部分都没有修改，很纳闷啊。再细细跟着代码流程，最后将 exception通过printStackTrace();打...
Hack36-The-Unacceptable
04-10
“＃Hack36-The-Unacceptable”
Glide Unacceptable certificate
duty_is_codeing的专栏
05-22 634
Glide 加载图片异常信息 Glide: Root cause (1 of 1) javax.net.ssl.SSLHandshakeException: Unacceptable certificate: CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US at com.android.org.conscrypt.ConscryptFileDescriptorSocket.startHandshake(ConscryptFil
Linux下tomcat配置ssl中报错问题的解决javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateExcepti
热门推荐
龙遥的世界
03-04 2万+
原问题: javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: No subject alternative names present http://blog.csdn.net/robert_lizhiqiang/article/details/44060217 解决报错问题:> s
记录解决java.security.cert.CertificateException 问题过程
JoeySheng的专栏-移动互联网技术发展博客
10-30 6584
团队在开发过程中，突然发现有一个业务失常
java.security.cert.CertificateException: Could not parse certificate: java.io.IOException: Empty inp
最帅程序猿的博客
12-04 5386
java.security.cert.CertificateException: Could not parse certificate: java.io.IOException: Empty input 使用第三方sdk时候报错： sdk.setPublicKeyEncrypt(publicTestKey.getBytes()); publicTestKey是个String字符串 暂未找到解决方...
android socket握手,SSLHandshakeException：在Android N / 7.0上握手失败
weixin_39578513的博客
05-27 209
在这里，您是Volley的工作解决方案：在以单例代码创建队列之前：public class VolleyServiceSingleton {private RequestQueue mRequestQueue;private HurlStack mStack;private VolleyServiceSingleton(){SSLSocketFactoryExtended factory = nu...
android 服务端返回 n不好用,ssl-SSLHandshakeException：Android N / 7.0上的握手失败
weixin_42186579的博客
05-26 719
我正在开发一个应用程序，(高级)用户必须为此设置自己的服务器(即nginx)才能运行后端应用程序。 需要在应用程序中配置相应的域，以便它可以连接。 我主要在自己的手机(sony z3c)上进行测试，并开始为5.1开发。 后来我收到了6.0的更新，但在仿真器中仍保持有效的5.1。 不久前，我开始使用具有7.0映像的AVD进行工作，但令我惊讶的是它无法连接到服务器，并告诉我SSL握手失败。 我的ngi...
网络连接评分机制之NetworkMonitor（原）
阿杜的专栏
10-08 1万+
本节介绍一个比较特殊的流程，就是网络可用性对评分的影响。         该影响主要体现在，当一个网络连接建立时，系统将用该连接Ping一个Google的网站来判断该连接是否真的可以上网，如果不可以，那么就会扣掉该网络40分，从而可能导致该网络的评分低于其他网络评分，下面来看详细过程。 一、NetworkMonitor来源         在前面我们分析过，当某个Networ
javax.net.ssl.SSLHandshakeException: Unacceptable certificate
12-22
javax.net.ssl.SSLHandshakeException: Unacceptable certificate错误是由于访问的域名证书不在有效期内或者JDK中不存在该证书的信任导致的。解决这个问题的方法有以下几种： 1. 更新JDK信任库：可以通过更新JDK的信任库来解决该问题。可以使用以下命令将证书添加到信任库中： ```shell keytool -import -alias <alias> -keystore <path_to_truststore> -file <path_to_certificate> ``` 其中，`<alias>`是证书的别名，`<path_to_truststore>`是信任库的路径，`<path_to_certificate>`是证书的路径。 2. 忽略证书验证：在某些情况下，可以选择忽略证书验证来解决该问题。可以通过以下代码来实现： ```java TrustManager[] trustAllCerts = new TrustManager[]{ new X509TrustManager() { public java.security.cert.X509Certificate[] getAcceptedIssuers() { return null; } public void checkClientTrusted( java.security.cert.X509Certificate[] certs, String authType) { } public void checkServerTrusted( java.security.cert.X509Certificate[] certs, String authType) { } } }; SSLContext sc = SSLContext.getInstance("TLS"); sc.init(null, trustAllCerts, new java.security.SecureRandom()); HttpsURLConnection.setDefaultSSLSocketFactory(sc.getSocketFactory()); ``` 3. 添加自定义信任证书：如果访问的是自签名证书或者不受信任的证书，可以将该证书添加到信任库中。可以使用以下命令将证书添加到信任库中： ```shell keytool -import -alias <alias> -keystore <path_to_truststore> -file <path_to_certificate> ``` 其中，`<alias>`是证书的别名，`<path_to_truststore>`是信任库的路径，`<path_to_certificate>`是证书的路径。

“相关推荐”对你有帮助么？

  • 非常没帮助
  • 没帮助
  • 一般
  • 有帮助
  • 非常有帮助
提交
评论
添加红包

请填写红包祝福语或标题

个

红包个数最小为10个

元

红包金额最低5元

当前余额3.43元 前往充值 >
需支付：10.00元
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付元
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明：

1.余额是钱包充值的虚拟货币，按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载，可以购买VIP、付费专栏及课程。

余额充值