如何在Android应用程序中验证SSL证书的有效性

Question

I need to verify SSL certificate validity before making a service call. If certificate is not valid I need to show an alert. Please give me some idea on this.

Answer 1

Host name validation can be customizez by setting a custom X509HostnameVerifier on the SSLSocketFactory . Some implementations are already available in android: AllowAllHostnameVerifier , BrowserCompatHostnameVerifier , StrictHostnameVerifier /* ... */

public class MyHostnameVerifier extends AbstractVerifier {
  boolean verify(String hostname, SSLSession session) {
    X509Certificate[] chain = session.getPeerCertificateChain();
    /* made some checks... */
    return checked;
  }
}
sslSocketFactory.setHostnameVerifier(new MyHostnameVerifier());