OkHttp使用Https（OkHttp版本3.8.1）
一、使用（4步搞定）
1.初始化OkHttpClient时设置sslSocketFactory，需要两个参数。设置后即可访问https
OkHttpClient.Builder builder = new OkHttpClient.Builder();
builder.sslSocketFactory(getSSLSocketFactory(), getTrustManager());
2.获取信任库getTrustManager()
// 获取证书库
KeyStore keystore = getKeyStore();
// 初始化信任库工厂
TrustManagerFactory trustManagerFactory;
trustManagerFactory = TrustManagerFactory.getInstance(TrustManagerFactory.getDefaultAlgorithm());
trustManagerFactory.init(keystore);
// 获取信任库
TrustManager[] trustManagers = trustManagerFactory.getTrustManagers();
if (trustManagers.length != 1 || !(trustManagers[0] instanceof X509TrustManager)) {
throw new IllegalStateException("Unexpected default trust managers:" + Arrays.toString(trustManagers));
}
X509TrustManager trustManager = (X509TrustManager) trustManagers[0];
3.获取证书库getKeyStore()
private static KeyStore getKeyStore() throws Exception {
// 初始化证书
CertificateFactory certificateFactory = CertificateFactory.getInstance("X.509");
InputStream inputStream = App.instance.getAssets().open("client.cer");// 这里导入SSL证书文件
Certificate cer = certificateFactory.generateCertificate(inputStream);
inputStream.close();
// 初始化证书库,给证书库设置证书
KeyStore keystore = KeyStore.getInstance(KeyStore.getDefaultType());
keystore.load(null, null); // 双向验证时使用
keystore.setCertificateEntry("trust", cer);
return keystore;
}
}
4.getSSLSocketFactory()
private static SSLSocketFactory getSSLSocketFactory() {
try {
// 获取信任库
X509TrustManager trustManager = getTrustManager();
// 初始化SSL上下文
SSLContext sslContext = SSLContext.getInstance("TLS");
sslContext.init(null, new TrustManager[] { trustManager }, null);
SSLSocketFactory sslSocketFactory = sslContext.getSocketFactory();
return sslSocketFactory;
} catch (Exception e) {
e.printStackTrace();
}
return null;
}
二、证书文件放在assets目录下。
三、证书有自签名证书和正式证书。自签名证书是服务器的人用本地服务器的根证书自签名的，证书验证时会出现失败。正式证书需要购买
1、使用自签名证书时，要忽略证书验证，即信任所有的证书。设置hostnameVerifier，重写verify方法，返回true，即信任所有证书。默认的hHostnameVerifier对象，会验证证书
builder.hostnameVerifier(new HostnameVerifier() {
@Override
public boolean verify(String hostname, SSLSession session) {
return true;
}
});
2、正式证书的环境，根据服务器需求，可以只改url为https，不为设置sslSocketFactory，即可访问服务器
查看源码如何使用sslSocketFactory
/**源码，有demo代码*/
public Builder sslSocketFactory(
SSLSocketFactory sslSocketFactory, X509TrustManager trustManager) {...}
在访问服务器成功后，获取response中的header，传入键值，即可获取响应头。需要全局保存这个header，再之后的每次网络请求时都要添加header
Response response = call.execute();
response.header("app_token");//app_toekn响应头的键值
Xutils3使用Https
一、使用
1.new请求参数，设置SslSocketFactory，一个参数。设置后即可访问https
RequestParams params = new RequestParams(url);
params.setSslSocketFactory(sslContext.getSocketFactory());
2.获取sslContext