关于OkHttp代码设置证书的记录

public void initSslContext(InputStream... certificates) {
        try {
            //certificates-证书输入流
            //服务端配置的信任证书
            //0-用CertificateFactory将流得到Certificate
            //1-将certificates 放入serviceKeyStore内(hashTable方式存放)
            CertificateFactory certificateFactory = CertificateFactory.getInstance("X.509");
            KeyStore serviceKeyStore = KeyStore.getInstance(KeyStore.getDefaultType());
            serviceKeyStore.load(null);
            int index = 0;
            for (InputStream certificate : certificates) {
                String certificateAlias = Integer.toString(index++);
                serviceKeyStore.setCertificateEntry(certificateAlias, certificateFactory.generateCertificate(certificate));

                try {
                    if (certificate != null) {
                        certificate.close();
                    }
                } catch (IOException e) {
                }
            }

            //2-用serviceKeyStore初始化TrustManagerFactory
            TrustManagerFactory trustManagerFactory =
                    TrustManagerFactory.getInstance(TrustManagerFactory.getDefaultAlgorithm());
            trustManagerFactory.init(serviceKeyStore);

            //3-双向的话 客户端的bks - 这里是per->jsk->bks
            //123456:client_bks_password
//            KeyStore clientKeyStore = KeyStore.getInstance(KeyStore.getDefaultType());
//            clientKeyStore.load(mContext.getAssets().open("test.jks"), "123456".toCharArray());
            KeyStore clientKeyStore = KeyStore.getInstance("BKS");
            clientKeyStore.load(mContext.getAssets().open("test.bks"), "123456".toCharArray());
            KeyManagerFactory keyManagerFactory = KeyManagerFactory.getInstance(KeyManagerFactory.getDefaultAlgorithm());
            keyManagerFactory.init(clientKeyStore, "123456".toCharArray());

            //4-初始化SSLContext
            SSLContext sslContext = SSLContext.getInstance("TLS");
            sslContext.init
                    (
                            keyManagerFactory.getKeyManagers(),
                            trustManagerFactory.getTrustManagers(),
                            new SecureRandom()
                    );
            //5-OkHttpClient设置SslSocketFactory
//            OkHttpClient.setSslSocketFactory(sslContext.getSocketFactory());
        } catch (Exception e) {
        }

    }

 

  • 0
    点赞
  • 1
    收藏
    觉得还不错? 一键收藏
  • 0
    评论
评论
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值