Android实现https网络通信之添加指定信任证书/信任所有证书

当Android客户端访问https网站，默认情况下，受证书信任限制，无法访问，可以有两种解决方法来实现：

1、将要访问的https网站的ca证书添加到客户端信任证书列表中，此种方式为谷歌推荐，安全性高。

2、将客户端设置为信任所有证书，也就是说不验证服务器证书，此种方式实现简单，但是安全性低，不推荐使用。

直接上代码，分别实现两种方式的访问。

 

1、客户端添加指定信任证书

assets目录中放置ca.crt证书，此证书为https://certs.cac.washington.edu/CAtest/网站的信任证书。

 

1. public void initSSL() throws CertificateException, IOException, KeyStoreException,

2. NoSuchAlgorithmException, KeyManagementException {

3. CertificateFactory cf = CertificateFactory.getInstance("X.509");

4. InputStream in = getAssets().open("ca.crt");

5. Certificate ca = cf.generateCertificate(in);

6.  

7. KeyStore keystore = KeyStore.getInstance(KeyStore.getDefaultType());

8. keystore.load(null, null);

9. keystore.setCertificateEntry("ca", ca);

10.  

11. String tmfAlgorithm = TrustManagerFactory.getDefaultAlgorithm();

12. TrustManagerFactory tmf = TrustManagerFactory.getInstance(tmfAlgorithm);

13. tmf.init(keystore);

14.  

15. // Create an SSLContext that uses our TrustManager

16. SSLContext context = SSLContext.getInstance("TLS");

17. context.init(null, tmf.getTrustManagers(), null);

18. URL url = new URL("https://certs.cac.washington.edu/CAtest/");

19. // URL url = new URL("https://github.com");

20. HttpsURLConnection urlConnection = (HttpsURLConnection) url.openConnection();

21. urlConnection.setSSLSocketFactory(context.getSocketFactory());

22. InputStream input = urlConnection.getInputStream();

23.  

24. BufferedReader reader = new BufferedReader(new InputStreamReader(input, "UTF-8"));

25. StringBuffer result = new StringBuffer();

26. String line = "";

27. while ((line = reader.readLine()) != null) {

28. result.append(line);

29. }

30. Log.e("TTTT", result.toString());

31. }

 

2、客户端信任所有https，免证书验证

 

1. public void initSSLALL() throws KeyManagementException, NoSuchAlgorithmException, IOException {

2. // URL url = new URL("https://certs.cac.washington.edu/CAtest/");

3. URL url = new URL("https://github.com");

4. SSLContext context = SSLContext.getInstance("TLS");

5. context.init(null, new TrustManager[]{new TrustAllManager()}, null);

6. HttpsURLConnection.setDefaultSSLSocketFactory(context.getSocketFactory());

7. HttpsURLConnection.setDefaultHostnameVerifier(new HostnameVerifier() {

8.  

9. @Override

10. public boolean verify(String arg0, SSLSession arg1) {

11. return true;

12. }

13. });

14. HttpsURLConnection connection = (HttpsURLConnection) url.openConnection();

15. connection.setDoInput(true);

16. connection.setDoOutput(false);

17. connection.setRequestMethod("GET");

18. connection.connect();

19. InputStream in = connection.getInputStream();

20. BufferedReader reader = new BufferedReader(new InputStreamReader(in));

21. String line = "";

22. StringBuffer result = new StringBuffer();

23. while ((line = reader.readLine()) != null) {

24. result.append(line);

25. }

26. Log.e("TTTT", result.toString());

27. }