afnetworking开启https访问

1、jks转化成cer证书

转化成p12证书： 

keytool -importkeystore -srckeystore pfly.imwork.net.jks  -srcstoretype JKS -deststoretype PKCS12 -destkeystore keystore.p12

双击生成的p12证书，导入到钥匙串里面，然后导出.cer证书

    2、导入生成的cer证书到工程里面，在网络访问的代码里面加入以下代码：

+ (AFSecurityPolicy*)customSecurityPolicy

{

    /**** SSL Pinning ****/

    NSString *cerPath = [[NSBundlemainBundle] pathForResource:@"https_cer"ofType:@"cer"];

    NSData *certData = [NSDatadataWithContentsOfFile:cerPath];

    AFSecurityPolicy *securityPolicy = [[AFSecurityPolicyalloc] init];

    [securityPolicy setAllowInvalidCertificates:NO];

    [securityPolicy setPinnedCertificates:@[certData]];

//    [securityPolicy setSSLPinningMode:AFSSLPinningModeCertificate];

    /**** SSL Pinning ****/

    

    return securityPolicy;

}

调用网路请求：

+ (void)postJSONWithUrl:(NSString *)urlStr parameters:(id)parameters success:(void (^)(id responseObject))success fail:(void (^)())fail

{

    AFHTTPRequestOperationManager *manager = [AFHTTPRequestOperationManagermanager];

    // 设置请求格式

    [manager.requestSerializersetTimeoutInterval:KDefultTime];

    // 设置返回格式

    manager.responseSerializer.acceptableContentTypes = [NSSetsetWithObjects:@"application/json",@"text/html",@"text/plain", nil];

    

    securityPolicy.allowInvalidCertificates =YES;

    [AFHTTPRequestOperationManagermanager].securityPolicy = [selfcustomSecurityPolicy];

    

    

    [manager POST:urlStr parameters:parameters success:^(AFHTTPRequestOperation *operation,id responseObject) {

        if (success) {

            success(responseObject);

        }

    } failure:^(AFHTTPRequestOperation *operation,NSError *error) {

        NSLog(@"%@", error);

        if (fail) {

            fail();

        }

    }];

    

}