使用https Amazon AWS上传图像时出现证书错误

Question

在Amazon AWS中上传图像时遇到问题。 这是我的代码：

import UIKit

protocol ContentUploaderDelegate {

    func onContentLoadComplete(status:Bool,serverResponse:String)
}


class ContentUploader
{
    let contentURL = "https:<MY URL>amazonaws.com/api/v1/contents"
    var delegate:ContentUploaderDelegate?


    func uploadImage(image:UIImage,xAuth:String,mimeType:String,imageName:String)
    {
        let url = NSURL(string: contentURL)

        let request = NSMutableURLRequest(URL: url!)
        request.HTTPMethod = "POST"

        let boundary = generateBoundaryString()

        //define the multipart request type
        request.setValue("multipart/form-data; boundary=\(boundary)", forHTTPHeaderField: "Content-Type")
        request.setValue(xAuth, forHTTPHeaderField: "x-auth-token")
        request.setValue("application/json", forHTTPHeaderField: "accept")

        let image_data = UIImageJPEGRepresentation(image, 1.0)

        if(image_data == nil)
        {
            return
        }

        let body = NSMutableData()

        //name to save in server
        let fname = imageName
        let mimetype = mimeType

        //define the data post parameter
        body.appendData("--\(boundary)\r\n".dataUsingEncoding(NSUTF8StringEncoding)!)
        body.appendData("Content-Disposition:form-data; name=\"test\"\r\n\r\n".dataUsingEncoding(NSUTF8StringEncoding)!)
        body.appendData("hi\r\n".dataUsingEncoding(NSUTF8StringEncoding)!)
        body.appendData("--\(boundary)\r\n".dataUsingEncoding(NSUTF8StringEncoding)!)
        body.appendData("Content-Disposition:form-data; name=\"files\"; filename=\"\(fname)\"\r\n".dataUsingEncoding(NSUTF8StringEncoding)!)
        body.appendData("Content-Type: \(mimetype)\r\n\r\n".dataUsingEncoding(NSUTF8StringEncoding)!)
        body.appendData(image_data!)
        body.appendData("\r\n".dataUsingEncoding(NSUTF8StringEncoding)!)
        body.appendData("--\(boundary)--\r\n".dataUsingEncoding(NSUTF8StringEncoding)!)
        //set the HTTPBody
        request.HTTPBody = body

        let session = NSURLSession.sharedSession()

        let task = session.dataTaskWithRequest(request) {
            (
            let data, let response, let error) in

            guard let _:NSData = data, let _:NSURLResponse = response  where error == nil else {
                print("error")
                self.delegate?.onContentLoadComplete(false, serverResponse: (error?.description)!)
                return
            }

            let dataString = NSString(data: data!, encoding: NSUTF8StringEncoding)
            print("success \(dataString)")
            self.delegate?.onContentLoadComplete(true, serverResponse:dataString! as String)
        }

        task.resume()
    }

    private func generateBoundaryString() -> String
    {
        return "Boundary-\(NSUUID().UUIDString)"
    }

以下委托方法永远不会被调用。 可能是什么原因？

    func URLSession(session: NSURLSession,
                    task: NSURLSessionTask,
                    didReceiveChallenge challenge: NSURLAuthenticationChallenge,
                                        completionHandler: (NSURLSessionAuthChallengeDisposition, NSURLCredential?)
        -> Void) {

        let protectionSpace = challenge.protectionSpace

        let theSender = challenge.sender

        if protectionSpace.authenticationMethod == NSURLAuthenticationMethodServerTrust {
            if (challenge.protectionSpace.host == "ec2-52-36-216-81.us-west-2.compute.amazonaws.com") {
                if let theTrust = protectionSpace.serverTrust{

                    let theCredential = NSURLCredential(trust: theTrust)

                    theSender!.useCredential(theCredential, forAuthenticationChallenge: challenge)

                    return
                }
            }
        }
        theSender!.performDefaultHandlingForAuthenticationChallenge!(challenge)

        return
    }
}

我收到以下错误。 知道为什么会收到此错误吗？

错误域= NSURLErrorDomain代码= -1202“此服务器的证书无效。您可能正在连接到假装为“ .amazonaws.com”的服务器，这可能会使您的机密信息受到威胁。 UserInfo = {NSURLErrorFailingURLPeerTrustErrorKey =，NSLocalizedRecoverySuggestion =是否仍要连接到服务器吗？，_kCFStreamErrorDomainKey = 3，_kCFStreamErrorCodeKey = -9813，NSErrorPeerCertificateChainKey = {type =不可变，count = 1，值=（0：。 .com>）}，NSUnderlyingError = 0x7f9d42aedc10 {Error Domain = kCFErrorDomainCFNetwork Code = -1202“（null）” UserInfo = {_ kCFStreamPropertySSLClientCertificateState = 0，kCFStreamPropertySSLPeerTrust =，_kCFNetworkCFCFertSSLErrorOriginalValue = -9813，关键代码= Stream，PropertyValue = -9813，类型=不可变，计数= 1，值=（0：.com i：www..com>）}}}，NSLocalizedDescription =此服务器的证书无效。 您可能正在连接到假装为“ .amazonaws.com”的服务器，这可能会使您的机密信息受到威胁。，NSErrorFailingURLKey = https：//amazonaws.com/api/v1/contents，NSErrorFailingURLStringKey = https：// .amazonaws.com / api / v1 / contents，NSErrorClientCertificateStateKey = 0}

Answer 1

Error Domain=NSURLErrorDomain Code=-1202 "The certificate for this server is invalid. You might be connecting to a server that is pretending to be “.amazonaws.com”

我相信通用名称“ .amazonaws.com”出了问题

NSErrorFailingURLKey=https://amazonaws.com/api/v1/contents,
NSErrorFailingURLStringKey=https://.amazonaws.com/api/v1/contents

错误消息中显示的URL似乎不是众所周知的端点。 我希望在那里能看到类似https://ec2-2-2-2-2.compute-1.amazonaws.com或其他完全合格域名的内容。

错误消息也确认了这一点。 您正在连接主机，但是证书上的名称不匹配。 这就是pretending to be “.amazonaws.com”错误的原因。

确认正确的端点，以及您的代码如何形成完整的URL。

以下委托方法永远不会被调用。 可能是什么原因？

该错误在调用函数之前发生。 由于证书错误，从未建立会话。