OkHttp Https 证书忽略

1、实现X509TrustManager 接口

public class TrustAllCerts implements X509TrustManager {
    
    
    @Override
    public void checkClientTrusted(X509Certificate[] chain, String authType) throws CertificateException {
    
    
    }

    @Override
    public void checkServerTrusted(X509Certificate[] chain, String authType) throws CertificateException {
    
    

        if (chain == null) {
    
    
            throw new IllegalArgumentException("  Check Server x509Certificates is null");
        }
    }

    @Override
    public X509Certificate[] getAcceptedIssuers() {
    
    
        return new X509Certificate[0];
    }


    public static SSLSocketFactory createSSLSocketFactory() {
    
    
        SSLSocketFactory ssfFactory = null;

        try {
    
    
            SSLContext sc = SSLContext.getInstance("TLS");
            sc.init(null, new TrustManager[]{
    
    new TrustAllCerts()}, new SecureRandom());

            ssfFactory = sc.getSocketFactory();
        } catch (Exception e) {
    
    
        }

        return ssfFactory;
    }

    public static class TrustAllHostnameVerifier implements HostnameVerifier {
    
    
        @Override
        public boolean verify(String hostname, SSLSession session) {
    
    
            return true;
        }
    }


}

2、创建Client 客户端时使用Trust

 okHttpClient = new OkHttpClient
                .Builder()
                .connectTimeout(DEFAULT_TIME_OUT, TimeUnit.SECONDS)
                .writeTimeout(DEFAULT_TIME_OUT, TimeUnit.SECONDS)
                .readTimeout(DEFAULT_TIME_OUT, TimeUnit.SECONDS)
                .connectionPool(new ConnectionPool(8, 10, TimeUnit.SECONDS))
                //添加这两行代码
                .sslSocketFactory(TrustAllCerts.createSSLSocketFactory())
                .hostnameVerifier(new TrustAllCerts.TrustAllHostnameVerifier())

猜你喜欢

转载自blog.csdn.net/Android_LeeJiaLun/article/details/128468758