Android开发中实现https校验

在安卓开发中需要自己写代码实现校验公钥的功能

当然, 如果是自己服务器，就不用校验,
如果是别人的服务器，比如银行，就需要校验

在这里, 小编采用从github上下载的开源框架实现,在开源框架中添加部分代码

Android开发中实现https校验

下载到开源框架后, 在 AsyncHttpClient.java文件中添加

Android开发中实现https校验

找到215行代码, 在这里添加校验的代码

证书文件需要拷贝到src的根目录

  //在这里添加一段 代码, 实现 https 连接,   检验  , 主要是去校验 证书的合法性

          try {

             InputStream ins = AsyncHttpClient.class.getClassLoader()

                     .getResourceAsStream("hehe.cer"); // 这个文件就是网站的公钥

             CertificateFactory cerFactory = CertificateFactory

                     .getInstance("X.509");// X.509 公钥文件 .pk8 私钥文件的扩展名

             Certificate cer = cerFactory.generateCertificate(ins);

             KeyStore keyStore = KeyStore.getInstance("PKCS12", "BC");

             keyStore.load(null, null);

             keyStore.setCertificateEntry("trust", cer);

             SSLSocketFactory socketFactory = new SSLSocketFactory(keyStore);

             schemeRegistry.register(new Scheme("https", socketFactory,

                     httpsPort));

         } catch (Exception e) {

             // TODO Auto-generated catch block

             e.printStackTrace();

         }

         return schemeRegistry;

Android开发中实现https校验

还有不校验的代码

 //在这里添加一段 代码, 实现 https 连接,  不检验

         try {

             KeyStore trustStore = KeyStore.getInstance(KeyStore.getDefaultType());

             trustStore.load(null, null);

             SSLSocketFactory sf = new SSLSocketFactoryEx(trustStore);

             //相当于 不在校验数据的合法性

             sf.setHostnameVerifier(SSLSocketFactory.ALLOW_ALL_HOSTNAME_VERIFIER); // 允许所有主机的验证

             schemeRegistry.register(new Scheme("https", sslSocketFactory,

             httpsPort));

             schemeRegistry.register(new Scheme("https",sf, httpsPort));

         } catch (Exception e) {

             e.printStackTrace();

         }

         return schemeRegistry;

Android开发中实现https校验

注意,

在拷贝代码的过程中 SSLSocketFactory 需要自己创建出来, 代码如下:

 package com.loopj.android.http;

 import java.io.IOException;

 import java.net.Socket;

 import java.net.UnknownHostException;

 import java.security.KeyManagementException;

 import java.security.KeyStore;

 import java.security.KeyStoreException;

 import java.security.NoSuchAlgorithmException;

 import java.security.UnrecoverableKeyException;

 import javax.net.ssl.SSLContext;

 import javax.net.ssl.TrustManager;

 import javax.net.ssl.X509TrustManager;

 import org.apache.http.conn.ssl.SSLSocketFactory;

 class SSLSocketFactoryEx extends SSLSocketFactory {

     SSLContext sslContext = SSLContext.getInstance("TLS");

     public SSLSocketFactoryEx(KeyStore truststore)

             throws NoSuchAlgorithmException, KeyManagementException,

             KeyStoreException, UnrecoverableKeyException {

         super(truststore);

         TrustManager tm = new X509TrustManager() {

             @Override

             public java.security.cert.X509Certificate[] getAcceptedIssuers() {

                 return null;

             }

             @Override

             public void checkClientTrusted(

                     java.security.cert.X509Certificate[] chain,

                     String authType)

                     throws java.security.cert.CertificateException {

             }

             @Override

             public void checkServerTrusted(

                     java.security.cert.X509Certificate[] chain,

                     String authType)

                     throws java.security.cert.CertificateException {

             }

         };

         sslContext.init(null, new TrustManager[] { tm }, null);

     }

     @Override

     public Socket createSocket(Socket socket, String host, int port,

             boolean autoClose) throws IOException, UnknownHostException {

         return sslContext.getSocketFactory().createSocket(socket, host,

                 port, autoClose);

     }

     @Override

     public Socket createSocket() throws IOException {

         return sslContext.getSocketFactory().createSocket();

     }

 }

秒客网

Android开发中实现https校验

相关文章