Android javax.ent.ssl.SSLHandshakeException:解决方案

最新推荐文章于 2025-05-18 20:12:59 发布

原创最新推荐文章于 2025-05-18 20:12:59 发布 · 519 阅读

3 ·

CC 4.0 BY-SA版权

文章标签：

#网络协议 #网络 #ssl #android

https在不同设备上的错误信息

1.javax.net.ssl.SSLHandshakeException:java.security.cert.CertPathValidatorException:Trust anchor for certification path not found.

2.javax.net.ssl.SSLHandshakeException:Unacceptable certificate:CN=Thawte TLS RSA CA, OU=www.digicert.com,O=DigiCert Inc, C=US

3.javax.net.ssl.SSLHandshakeException:com.android.org.bouncycastle.jce.exception.ExtCertPathValidatorException:Could not validate certificate: Certificate not valid until Thu Nov 02 20:24:25 GMT+08:00 2017(compared to Fri Jan 02 01:29:13 GMT+08:00 1970)

有可能是设备的时间有问题，检查一下日期和时间与当前日期时间是否匹配，匹配排查日期时间问题，不匹配设置正确再请求，是否解决，没解决可能是证书的问题

忽略https


public class MySSLSocketClient {
    public static SSLSocketFactory getSSLSocketFactory() {
        try {
            SSLContext sslContext = SSLContext.getInstance("SSL");
            sslContext.init(null, getTrustManager(), new SecureRandom());
            return sslContext.getSocketFactory();
        } catch (Exception e) {
            throw new RuntimeException(e);
        }
    }

    private static TrustManager[] getTrustManager() {
        return new TrustManager[] {
                new X509TrustManager() {
                    @Override
                    public void checkClientTrusted(X509Certificate[] x509Certificates, String s) throws CertificateException {

                    }

                    @Override
                    public void checkServerTrusted(X509Certificate[] x509Certificates, String s) throws CertificateException {

                    }

                    @Override
                    public X509Certificate[] getAcceptedIssuers() {
                        return new X509Certificate[0];
                    }
                }
        };
    }

    public static X509TrustManager geX509tTrustManager() {
        return new X509TrustManager() {
            @Override
            public void checkClientTrusted(X509Certificate[] x509Certificates, String s) throws CertificateException {

            }

            @Override
            public void checkServerTrusted(X509Certificate[] x509Certificates, String s) throws CertificateException {

            }

            @Override
            public X509Certificate[] getAcceptedIssuers() {
                return new X509Certificate[0];
            }
        };
    }

    public static HostnameVerifier getHostnameVerifier() {
        return new HostnameVerifier() {
            @Override
            public boolean verify(String s, SSLSession sslSession) {
                return true;
            }
        };
    }

}

在OKHTTP请求的地方设置

        client.newBuilder()
                .connectTimeout(TIMEOUT, TimeUnit.SECONDS)
                .writeTimeout(TIMEOUT, TimeUnit.SECONDS)
                .readTimeout(TIMEOUT, TimeUnit.SECONDS)
                .sslSocketFactory(MySSLSocketClient.getSSLSocketFactory(), MySSLSocketClient.geX509tTrustManager())
                .hostnameVerifier(MySSLSocketClient.getHostnameVerifier())
                .retryOnConnectionFailure(false).build();

本人遇到的都是时间问题，没有真正的证书问题，时间问题导致证书无效