android volley https使用证书,Android volley自签名HTTPS信任锚，用于找不到证书路径

您可以尝试以下示例代码。希望这有帮助！

private TrustManager[] getWrappedTrustManagers(TrustManager[] trustManagers) {

final X509TrustManager originalTrustManager = (X509TrustManager) trustManagers[0];

return new TrustManager[]{

new X509TrustManager() {

public X509Certificate[] getAcceptedIssuers() {

return originalTrustManager.getAcceptedIssuers();

}

public void checkClientTrusted(X509Certificate[] certs, String authType) {

try {

if (certs != null && certs.length > 0){

certs[0].checkValidity();

} else {

originalTrustManager.checkClientTrusted(certs, authType);

}

} catch (CertificateException e) {

Log.w("checkClientTrusted", e.toString());

}

}

public void checkServerTrusted(X509Certificate[] certs, String authType) {

try {

if (certs != null && certs.length > 0){

certs[0].checkValidity();

} else {

originalTrustManager.checkServerTrusted(certs, authType);

}

} catch (CertificateException e) {

Log.w("checkServerTrusted", e.toString());

}

}

}

};

}

private SSLSocketFactory getSSLSocketFactory_Certificate(String keyStoreType, int keystoreResId)

throws CertificateException, KeyStoreException, IOException, NoSuchAlgorithmException, KeyManagementException {

CertificateFactory cf = CertificateFactory.getInstance("X.509");

InputStream caInput = getResources().openRawResource(keystoreResId);

Certificate ca = cf.generateCertificate(caInput);

caInput.close();

if (keyStoreType == null || keyStoreType.length() == 0) {

keyStoreType = KeyStore.getDefaultType();

}

KeyStore keyStore = KeyStore.getInstance(keyStoreType);

keyStore.load(null, null);

keyStore.setCertificateEntry("ca", ca);

String tmfAlgorithm = TrustManagerFactory.getDefaultAlgorithm();

TrustManagerFactory tmf = TrustManagerFactory.getInstance(tmfAlgorithm);

tmf.init(keyStore);

TrustManager[] wrappedTrustManagers = getWrappedTrustManagers(tmf.getTrustManagers());

SSLContext sslContext = SSLContext.getInstance("TLS");

sslContext.init(null, wrappedTrustManagers, null);

return sslContext.getSocketFactory();

}

private SSLSocketFactory getSSLSocketFactory_KeyStore(String keyStoreType, int keystoreResId, String keyPassword)

throws CertificateException, KeyStoreException, IOException, NoSuchAlgorithmException, KeyManagementException {

InputStream caInput = getResources().openRawResource(keystoreResId);

// creating a KeyStore containing trusted CAs

if (keyStoreType == null || keyStoreType.length() == 0) {

keyStoreType = KeyStore.getDefaultType();

}

KeyStore keyStore = KeyStore.getInstance(keyStoreType);

keyStore.load(caInput, keyPassword.toCharArray());

// creating a TrustManager that trusts the CAs in the KeyStore

String tmfAlgorithm = TrustManagerFactory.getDefaultAlgorithm();

TrustManagerFactory tmf = TrustManagerFactory.getInstance(tmfAlgorithm);

tmf.init(keyStore);

TrustManager[] wrappedTrustManagers = getWrappedTrustManagers(tmf.getTrustManagers());

SSLContext sslContext = SSLContext.getInstance("TLS");

sslContext.init(null, wrappedTrustManagers, null);

return sslContext.getSocketFactory();

}

然后拨打其中一个：

SSLSocketFactory sslSocketFactory = getSSLSocketFactory_KeyStore("BKS", R.raw.androidbksv1, "123456789");

SSLSocketFactory sslSocketFactory = getSSLSocketFactory_Certificate("BKS", R.raw.androidbksv1_cert);