Android开发中实现https校验

在安卓开发中需要自己写代码实现校验公钥的功能

当然,  如果是自己服务器，就不用校验,
如果是别人的服务器，比如银行，就需要校验

在这里, 小编采用从github上下载的开源框架实现,在开源框架中添加部分代码

下载到开源框架后, 在 AsyncHttpClient.java文件中添加

找到215行代码, 在这里添加校验的代码

证书文件需要拷贝到src的根目录

 //在这里添加一段 代码, 实现 https 连接,   检验  , 主要是去校验 证书的合法性 
         try {
            InputStream ins = AsyncHttpClient.class.getClassLoader()
                    .getResourceAsStream("hehe.cer"); // 这个文件就是网站的公钥
            
            
            CertificateFactory cerFactory = CertificateFactory
                    .getInstance("X.509");// X.509 公钥文件 .pk8 私钥文件的扩展名
            Certificate cer = cerFactory.generateCertificate(ins);
            KeyStore keyStore = KeyStore.getInstance("PKCS12", "BC");
            keyStore.load(null, null);
            keyStore.setCertificateEntry("trust", cer);
            SSLSocketFactory socketFactory = new SSLSocketFactory(keyStore);
            schemeRegistry.register(new Scheme("https", socketFactory,
                    httpsPort));

        } catch (Exception e) {
            // TODO Auto-generated catch block
            e.printStackTrace();
        }
        
        return schemeRegistry;

还有不校验的代码

//在这里添加一段 代码, 实现 https 连接,  不检验 
        try {
            KeyStore trustStore = KeyStore.getInstance(KeyStore.getDefaultType());
            trustStore.load(null, null);
            SSLSocketFactory sf = new SSLSocketFactoryEx(trustStore);
            //相当于 不在校验数据的合法性
            sf.setHostnameVerifier(SSLSocketFactory.ALLOW_ALL_HOSTNAME_VERIFIER); // 允许所有主机的验证
            schemeRegistry.register(new Scheme("https", sslSocketFactory,
            httpsPort));
            schemeRegistry.register(new Scheme("https",sf, httpsPort));
        } catch (Exception e) {
            e.printStackTrace();
        }
        
        
        return schemeRegistry;

注意,

在拷贝代码的过程中 SSLSocketFactory 需要自己创建出来, 代码如下:

package com.loopj.android.http;

import java.io.IOException;
import java.net.Socket;
import java.net.UnknownHostException;
import java.security.KeyManagementException;
import java.security.KeyStore;
import java.security.KeyStoreException;
import java.security.NoSuchAlgorithmException;
import java.security.UnrecoverableKeyException;

import javax.net.ssl.SSLContext;
import javax.net.ssl.TrustManager;
import javax.net.ssl.X509TrustManager;

import org.apache.http.conn.ssl.SSLSocketFactory;

class SSLSocketFactoryEx extends SSLSocketFactory {

    SSLContext sslContext = SSLContext.getInstance("TLS");

    public SSLSocketFactoryEx(KeyStore truststore)
            throws NoSuchAlgorithmException, KeyManagementException,
            KeyStoreException, UnrecoverableKeyException {
        super(truststore);

        TrustManager tm = new X509TrustManager() {

            @Override
            public java.security.cert.X509Certificate[] getAcceptedIssuers() {
                return null;
            }

            @Override
            public void checkClientTrusted(
                    java.security.cert.X509Certificate[] chain,
                    String authType)
                    throws java.security.cert.CertificateException {

            }

            @Override
            public void checkServerTrusted(
                    java.security.cert.X509Certificate[] chain,
                    String authType)
                    throws java.security.cert.CertificateException {

            }
        };

        sslContext.init(null, new TrustManager[] { tm }, null);
    }

    @Override
    public Socket createSocket(Socket socket, String host, int port,
            boolean autoClose) throws IOException, UnknownHostException {
        return sslContext.getSocketFactory().createSocket(socket, host,
                port, autoClose);
    }

    @Override
    public Socket createSocket() throws IOException {
        return sslContext.getSocketFactory().createSocket();
    }
}