使用Https進行網絡訪問

2019-11-09 17:10:09

字體：大中小

來源：轉載

供稿：網友

添加網絡權限

<uses-permission android:name="android.permission.INTERNET" />

有安全證書的SSLContext

public static SSLContext getSSLContextWithCer() throws NoSuchAlgorithmException, IOException, CertificateException, KeyStoreException, UnrecoverableKeyException, KeyManagementException { // 實例化SSLContext SSLContext sslContext = SSLContext.getInstance("SSL"); // 從assets中加載證書，在HTTPS通訊中最常用的是cer/crt和pem InputStream inStream = Myapplication.getApplication().getAssets().open("zhoujian.cer"); /* * X.509 標準規定了證書可以包含什么信息，并說明了記錄信息的方法常見的X.509證書格式包括： * cer/crt是用于存放證書，它是2進制形式存放的，不含私鑰。 * pem跟crt/cer的區別是它以Ascii來表示，可以用于存放證書或私鑰。 */ // 證書工廠 CertificateFactory cerFactory = CertificateFactory.getInstance("X.509"); Certificate cer = cerFactory.generateCertificate(inStream); // 密鑰庫 //Pkcs12也是證書格式 PKCS#12是“個人信息交換語法”。它可以用來將x.509的證書和證書對應的私鑰打包，進行交換。 KeyStore keyStory = KeyStore.getInstance("PKCS12"); keyStory.load(null, null); // 加載證書到密鑰庫中 keyStory.setCertificateEntry("ass", cer); // 密鑰管理器 KeyManagerFactory kMFactory = KeyManagerFactory.getInstance(KeyManagerFactory.getDefaultAlgorithm()); kMFactory.init(keyStory, null); // 信任管理器 TrustManagerFactory tmFactory = TrustManagerFactory.getInstance(TrustManagerFactory.getDefaultAlgorithm()); tmFactory.init(keyStory); //初始化sslContext sslContext.init(kMFactory.getKeyManagers(), tmFactory.getTrustManagers(), new SecureRandom()); inStream.close(); return sslContext; }

沒有安全證書的SSLContext

public static SSLContext getSSLContextWithoutCer() throws NoSuchAlgorithmException, KeyManagementException { // 實例化SSLContext // 這里參數可以用TSL 也可以用SSL SSLContext sslContext = SSLContext.getInstance("SSL"); sslContext.init(null, new TrustManager[] { trustManagers }, new SecureRandom()); return sslContext; } PRivate static TrustManager trustManagers = new X509TrustManager() { @Override public void checkClientTrusted(X509Certificate[] chain, String authType) throws CertificateException { } @Override public void checkServerTrusted(X509Certificate[] chain, String authType) throws CertificateException { } @Override public X509Certificate[] getAcceptedIssuers() { return new X509Certificate[0]; } };

網絡請求的核心代碼

package com.zhoujian.https;import android.app.Activity;import android.os.Bundle;import android.util.Log;import java.io.IOException;import java.io.InputStream;import java.net.HttpURLConnection;import java.net.URL;import java.security.KeyManagementException;import java.security.KeyStoreException;import java.security.NoSuchAlgorithmException;import java.security.UnrecoverableKeyException;import java.security.cert.CertificateException;import javax.net.ssl.HttpsURLConnection;import javax.net.ssl.SSLContext;import javax.net.ssl.SSLSocketFactory;public class MainActivity extends Activity{ @Override protected void onCreate(Bundle savedInstanceState) { super.onCreate(savedInstanceState); setContentView(R.layout.activity_main); new Thread() { public void run() { try { getConnection(); } catch (Exception e) { e.printStackTrace(); } } }.start(); } private void getConnection() throws IOException, KeyManagementException, NoSuchAlgorithmException, UnrecoverableKeyException, CertificateException, KeyStoreException { // https://github.com/zeke123/ConstraintLayout // http://my.csdn.net/my/mycsdn URL url = new URL("https://github.com/zeke123/ConstraintLayout"); HttpURLConnection connection = (HttpURLConnection) url.openConnection(); connection.setConnectTimeout(5 * 1000); connection.setReadTimeout(5 * 1000); connection.setRequestMethod("GET"); Log.e("zhoujian", "url==" + url); Log.e("zhoujian", " 是否是https請求==" + (connection instanceof HttpsURLConnection)); if (connection instanceof HttpsURLConnection) { //得到sslContext對象，有兩種情況：1.需要安全證書，2.不需要安全證書 SSLContext sslContext = HttpsUtil.getSSLContextWithCer(); //SSLContext sslContext = HttpsUtil.getSSLContextWithoutCer(); if (sslContext != null) { SSLSocketFactory sslSocketFactory = sslContext.getSocketFactory(); ((HttpsURLConnection) connection).setDefaultSSLSocketFactory(sslSocketFactory); //((HttpsURLConnection) connection).setHostnameVerifier(HttpsUtil.hostnameVerifier); } } int responseCode = connection.getResponseCode(); Log.e("zhoujian", "responseCode==" + responseCode); if (responseCode == 200) { InputStream is = connection.getInputStream(); Log.e("zhoujian", "is==" + is); is.close(); } connection.disconnect(); }}