android https请求证书过滤白名单,自制SSL证书在Android平台使用不拦截

按照@DCloud_Android_磊子 所说的我在manifest.json中配置了"ssl":{"untrustedca":"warning"}，此时通过mui.ajax返回失败，打出失败原因为“ CertPathValidatorException: Trust anchor for certification path not found”，因为我们的证书是自己做的，所以这样的结果在预期之内，查询解决办法如下：

http://stackoverflow.com/questions/2642777/trusting-all-certificates-using-httpclient-over-https/6378872#6378872

文中提到的解决方案为：

1.Trust all certificates. Don't do this, unless you really know what you're doing.

2.Create a custom SSLSocketFactory that trusts only your certificate. This works as long as you know exactly which servers you're going to connect to, but as soon as you need to connect to a new server with a different SSL certificate, you'll need to update your app.

3.Create a keystore file that contains Android's "master list" of certificates, then add your own. If any of those certs expire down the road, you are responsible for updating them in your app. I can't think of a reason to do this.

4.Create a custom SSLSocketFactory that uses the built-in certificate KeyStore, but falls back on an alternate KeyStore for anything that fails to verify with the default.

This answer uses solution #4, which seems to me to be the most robust.

推荐的第四种是自己创建一个SSLSocketFactory，请问我使用基座是封装好的，要怎么处理这一环节呢？

谢谢