SSL弱校验问题

最新推荐文章于 2022-01-07 16:46:39 发布

piaoershi

最新推荐文章于 2022-01-07 16:46:39 发布

阅读量448

点赞数

文章标签： android

本文链接：https://blog.csdn.net/piaoershi/article/details/115671675

版权

在TrustManager里面的checkServerTrusted方法里面设置chain[0].checkValidity();

private final TrustManager[] trustAllCerts = new TrustManager[]{

            new X509TrustManager() {
                @Override
                public void checkClientTrusted(X509Certificate[] chain, String authType) throws CertificateException {
                }

                @Override
                public void checkServerTrusted(X509Certificate[] chain, String authType) throws CertificateException {
                    try {//设置弱校验
                        chain[0].checkValidity();
                    } catch (Exception e) {
                        throw new CertificateException("Certificate not valid or trusted.");
                    }
                }

                @Override
                public X509Certificate[] getAcceptedIssuers() {
                    return new X509Certificate[0];
                }
            }
    };

然后再HostnameVerifier方法里面根据自己的网络域名来判断

client = client.newBuilder().sslSocketFactory(sslSocketFactory).hostnameVerifier(new HostnameVerifier() {
            @Override
            public boolean verify(String hostname, SSLSession session) {
                //设置弱校验
                if (hostname.equals("设置你自己的域名")){
                    return true;
                }else {
                    HostnameVerifier hv = HttpsURLConnection.getDefaultHostnameVerifier();
                    return hv.verify(hostname,session);
                }
            }
        }).build();