Android開發中實現https校驗

在安卓開發中需要自己寫代碼實現校驗公鑰的功能

 

當然,  如果是自己服務器，就不用校驗,
如果是別人的服務器，比如銀行，就需要校驗

 

在這里, 小編采用從github上下載的開源框架實現,在開源框架中添加部分代碼

 

 

 

下載到開源框架后, 在 AsyncHttpClient.java文件中添加

 

 

找到215行代碼, 在這里添加校驗的代碼

 

證書文件需要拷貝到src的根目錄

 

 //在這里添加一段 代碼, 實現 https 連接,   檢驗  , 主要是去校驗 證書的合法性 
         try {
            InputStream ins = AsyncHttpClient.class.getClassLoader()
                    .getResourceAsStream("hehe.cer"); // 這個文件就是網站的公鑰
            
            
            CertificateFactory cerFactory = CertificateFactory
                    .getInstance("X.509");// X.509 公鑰文件 .pk8 私鑰文件的擴展名
            Certificate cer = cerFactory.generateCertificate(ins);
            KeyStore keyStore = KeyStore.getInstance("PKCS12", "BC");
            keyStore.load(null, null);
            keyStore.setCertificateEntry("trust", cer);
            SSLSocketFactory socketFactory = new SSLSocketFactory(keyStore);
            schemeRegistry.register(new Scheme("https", socketFactory,
                    httpsPort));

        } catch (Exception e) {
            // TODO Auto-generated catch block
            e.printStackTrace();
        }
        
        return schemeRegistry;

 

 

 

還有不校驗的代碼

 

//在這里添加一段 代碼, 實現 https 連接,  不檢驗 
        try {
            KeyStore trustStore = KeyStore.getInstance(KeyStore.getDefaultType());
            trustStore.load(null, null);
            SSLSocketFactory sf = new SSLSocketFactoryEx(trustStore);
            //相當於 不在校驗數據的合法性
            sf.setHostnameVerifier(SSLSocketFactory.ALLOW_ALL_HOSTNAME_VERIFIER); // 允許所有主機的驗證
            schemeRegistry.register(new Scheme("https", sslSocketFactory,
            httpsPort));
            schemeRegistry.register(new Scheme("https",sf, httpsPort));
        } catch (Exception e) {
            e.printStackTrace();
        }
        
        
        return schemeRegistry;

 

 

 

注意,

在拷貝代碼的過程中 SSLSocketFactory 需要自己創建出來, 代碼如下:

 

package com.loopj.android.http;

import java.io.IOException;
import java.net.Socket;
import java.net.UnknownHostException;
import java.security.KeyManagementException;
import java.security.KeyStore;
import java.security.KeyStoreException;
import java.security.NoSuchAlgorithmException;
import java.security.UnrecoverableKeyException;

import javax.net.ssl.SSLContext;
import javax.net.ssl.TrustManager;
import javax.net.ssl.X509TrustManager;

import org.apache.http.conn.ssl.SSLSocketFactory;

class SSLSocketFactoryEx extends SSLSocketFactory {

    SSLContext sslContext = SSLContext.getInstance("TLS");

    public SSLSocketFactoryEx(KeyStore truststore)
            throws NoSuchAlgorithmException, KeyManagementException,
            KeyStoreException, UnrecoverableKeyException {
        super(truststore);

        TrustManager tm = new X509TrustManager() {

            @Override
            public java.security.cert.X509Certificate[] getAcceptedIssuers() {
                return null;
            }

            @Override
            public void checkClientTrusted(
                    java.security.cert.X509Certificate[] chain,
                    String authType)
                    throws java.security.cert.CertificateException {

            }

            @Override
            public void checkServerTrusted(
                    java.security.cert.X509Certificate[] chain,
                    String authType)
                    throws java.security.cert.CertificateException {

            }
        };

        sslContext.init(null, new TrustManager[] { tm }, null);
    }

    @Override
    public Socket createSocket(Socket socket, String host, int port,
            boolean autoClose) throws IOException, UnknownHostException {
        return sslContext.getSocketFactory().createSocket(socket, host,
                port, autoClose);
    }

    @Override
    public Socket createSocket() throws IOException {
        return sslContext.getSocketFactory().createSocket();
    }
}