1信任所有https請(qǐng)求

okHttpClient設(shè)置sslSocketFactory，hostnameVerifier

OkHttpClient okHttpClient = new OkHttpClient.Builder()
                .connectTimeout(5, TimeUnit.SECONDS)
                .readTimeout(10, TimeUnit.SECONDS)
                .sslSocketFactory(getSSLSocketFactory(),new TrustAllCerts())
                .hostnameVerifier(getHostnameVerifier())
                .build();
Retrofit retrofit = new Retrofit.Builder().baseUrl(url)
                .client(okHttpClient)
                .addCallAdapterFactory(RxJava2CallAdapterFactory.create())
                .addConverterFactory(GsonConverterFactory.create())
                .build();

getSSLSocketFactory()方法如下：

public static SSLSocketFactory getSSLSocketFactory() {
        SSLSocketFactory ssfFactory = null;

        try {
            SSLContext sc = SSLContext.getInstance("TLS");
            sc.init(null, new TrustManager[]{new CustomTrustManager()}, new SecureRandom());

            ssfFactory = sc.getSocketFactory();
        } catch (Exception e) {
        }

        return ssfFactory;
    }

其中CustomTrustManager類很簡(jiǎn)單只需實(shí)現(xiàn)X509TrustManager

public class CustomTrustManager implements X509TrustManager{
    @Override
    public void checkClientTrusted(X509Certificate[] chain, String authType) throws CertificateException {

    }

    @Override
    public void checkServerTrusted(X509Certificate[] chain, String authType) throws CertificateException {

    }

    @Override
    public X509Certificate[] getAcceptedIssuers() {
        return new X509Certificate[0];
    }
}

getHostnameVerifier()如下,return true就可以

public static HostnameVerifier getHostnameVerifier() {
  HostnameVerifier   hostnameVerifier= new HostnameVerifier() {
  public boolean verify(String hostname, SSLSession session) {
                 return true;
            }
        };
        return hostnameVerifier;
    }

2信任證書和指定的url地址

改動(dòng)上面getSSLSocketFactory()，getHostnameVerifier()方法即可，代碼如下：

public static int[] certificates = {R.raw.mycer};
    protected static SSLSocketFactory getSSLSocketFactory(Context context, int[] certificates) {

        if (context == null) {
            throw new NullPointerException("context == null");
        }

        CertificateFactory certificateFactory;
        SSLContext sslContext=null;
        try {
            certificateFactory = CertificateFactory.getInstance("X.509");
            KeyStore keyStore = KeyStore.getInstance(KeyStore.getDefaultType());
            keyStore.load(null, null);

            for (int i = 0; i < certificates.length; i++) {
                InputStream certificate = context.getResources().openRawResource(certificates[i]);
                keyStore.setCertificateEntry(String.valueOf(i), certificateFactory.generateCertificate(certificate));

                if (certificate != null) {
                    certificate.close();
                }
            }
            sslContext = SSLContext.getInstance("TLS");
            TrustManagerFactory trustManagerFactory = TrustManagerFactory.getInstance(TrustManagerFactory.getDefaultAlgorithm());
            trustManagerFactory.init(keyStore);
            sslContext.init(null, trustManagerFactory.getTrustManagers(), new SecureRandom());

        }catch (Exception e){
            e.printStackTrace();
        }
        return sslContext.getSocketFactory();
    }

R.raw.mycer是自行導(dǎo)入在res/raw/Mycer.cer證書，如圖

Jietu20171122-112229@2x.png

getHostnameVerifier()代碼如下

 public  static String urls[] = {"url1","url2"};

    public static HostnameVerifier getHostnameVerifier() {

        HostnameVerifier hostnameVerifier = new HostnameVerifier() {
            public boolean verify(String hostname, SSLSession session) {
                boolean verifier = false;
                for (String host : urls) {
                    if (host.equalsIgnoreCase(hostname)) {
                        verifier = true;
                    }
                }
                return verifier;
            }
        };
        return hostnameVerifier;
    }

上面public static String urls[] = {"url1","url2"}，url1，url2是你需要信任的服務(wù)器地址，例如上方new Retrofit.Builder().baseUrl(url)中url="https://test2-mytest.com:8888/mytest/",url1相對(duì)應(yīng)就是test2-mytest.com，驗(yàn)證時(shí)會(huì)自動(dòng)去掉https。

上述四個(gè)方法可任意組合，信任指定路徑，或者所有路徑，帶證書或者不帶證書。