android - Okhttp3 忽略证书问题

Answer 1

      private static void setSSL() throws Exception{
        SSLContext sc = SSLContext.getInstance("SSL");
        sc.init(null, new TrustManager[]{new X509TrustManager() {
            @Override
            public X509Certificate[] getAcceptedIssuers() {
                return null;
            }

            @Override
            public void checkClientTrusted(X509Certificate[] chain,
                    String authType) throws CertificateException {
                
            }

            @Override
            public void checkServerTrusted(X509Certificate[] chain,
                    String authType) throws CertificateException {
                
            }
        }}, new SecureRandom());
        client.setSslSocketFactory(sc.getSocketFactory());
        client.setHostnameVerifier(new HostnameVerifier() {
            @Override
            public boolean verify(String hostname, SSLSession session) {
                return true;
            }
        });
    }

这是我忽略证书的代码，感觉和提主的差不多，是不是不用client.newBuilder() 直接使用client会生效。
可以尝试下，不过我这边不是3.0的版本是2.5

Answer 2

看着像是你们协议使用了自签名证书，让你们服务器端给客户端签一张证书嵌在客户端中，采取证书校验方式，不要忽略。

Answer 3

下面这两句有问题：

client.newBuilder().sslSocketFactory(sslSocketFactory);
client.newBuilder().hostnameVerifier(new HostnameVerifier()...

改成

client = client.newBuilder().sslSocketFactory(sslSocketFactory)
.hostnameVerifier(new HostnameVerifier()...).build();

这样才是使用了新的 client

Answer 4

final TrustManager[] trustAllCerts = new TrustManager[]{new X509TrustManager() {
            @Override
            public void checkClientTrusted(
                    java.security.cert.X509Certificate[] chain,
                    String authType) throws CertificateException {
            }

            @Override
            public void checkServerTrusted(
                    java.security.cert.X509Certificate[] chain,
                    String authType) throws CertificateException {
            }

            @Override
            public java.security.cert.X509Certificate[] getAcceptedIssuers() {
                return new X509Certificate[0];
            }
        }};

        // Install the all-trusting trust manager
        final SSLContext sslContext = SSLContext.getInstance("SSL");
        sslContext.init(null, trustAllCerts, new java.security.SecureRandom());
        OkHttpClient client = new OkHttpClient().newBuilder().sslSocketFactory(sslContext.getSocketFactory())
                .hostnameVerifier((hostname, session) ->ture).build();