從我們的應用程序獲取OkHttpClient 3.0實例的兩種方法，這些實例可以從密鑰庫中識別您的自簽名證書(使用Android項目“原始”資源文件夾中準備好的pkcs12證書文件)：

private static OkHttpClient getSSLClient(Context context) throws

NoSuchAlgorithmException,

KeyStoreException,

KeyManagementException,

CertificateException,

IOException {

OkHttpClient client;

SSLContext sslContext;

SSLSocketFactory sslSocketFactory;

TrustManager[] trustManagers;

TrustManagerFactory trustManagerFactory;

X509TrustManager trustManager;

trustManagerFactory = TrustManagerFactory.getInstance(TrustManagerFactory.getDefaultAlgorithm());

trustManagerFactory.init(readKeyStore(context));

trustManagers = trustManagerFactory.getTrustManagers();

if (trustManagers.length != 1 || !(trustManagers[0] instanceof X509TrustManager)) {

throw new IllegalStateException("Unexpected default trust managers:" + Arrays.toString(trustManagers));

}

trustManager = (X509TrustManager) trustManagers[0];

sslContext = SSLContext.getInstance("TLS");

sslContext.init(null, new TrustManager[]{trustManager}, null);

sslSocketFactory = sslContext.getSocketFactory();

client = new OkHttpClient.Builder()

.sslSocketFactory(sslSocketFactory, trustManager)

.build();

return client;

}

/**

* Get keys store. Key file should be encrypted with pkcs12 standard. It? ? can be done with standalone encrypting java applications like "keytool". File password is also required.

*

* @param context Activity or some other context.

* @return Keys store.

* @throws KeyStoreException

* @throws CertificateException

* @throws NoSuchAlgorithmException

* @throws IOException

*/

private static KeyStore readKeyStore(Context context) throws

KeyStoreException,

CertificateException,

NoSuchAlgorithmException,

IOException {

KeyStore keyStore;

char[] PASSWORD = "12345678".toCharArray();

ArrayList certificates;

int certificateIndex;

InputStream certificate;

certificates = new ArrayList<>();

certificates.add(context.getResources().openRawResource(R.raw.ssl_pkcs12));

keyStore = KeyStore.getInstance("pkcs12");

for (Certificate certificate : certificates) {

try {

keyStore.load(certificate, PASSWORD);

} finally {

if (certificate != null) {

certificate.close();

}

}

}

return keyStore;

}

總結

以上是生活随笔為你收集整理的java okhttp https_OkHttp是否支持接受自签名SSL证书？的全部內容，希望文章能夠幫你解決所遇到的問題。

如果覺得生活随笔網站內容還不錯，歡迎將生活随笔推薦給好友。