盡管在這里應用了所有指令，但為什么會出現CertPathValidatorException：找不到證書路徑的信任錨。

Question

我是Android和Node.js的新手。 我正在嘗試從我的Android應用程序向服務器進行https服務調用。 首先，在服務器端，我使用以下命令創建了自簽名證書；

req -x509 -nodes -days 2000 -newkey rsa：2048 -keyout /etc/nginx/ssl/nginx.key -out /etc/nginx/ssl/nginx.crt

然后，將創建的nginx.crt文件放入android端的res / raw文件夾中。 在下面，您可以看到我的Anroid代碼進行https調用。

我在network_configuration.xml中添加了以下幾行

<?xml version="1.0" encoding="utf-8"?>
<network-security-config>
    <base-config>
        <trust-anchors>
            <certificates src="@raw/nginx"/>
            <certificates src="system"/>
        </trust-anchors>
    </base-config>
</network-security-config>

然后從清單文件中給出了參考

 <application android:networkSecurityConfig="@xml/network_security_config">

嘗試了以下鏈接，但仍然出現異常

找不到Android SSL連接的信任錨

https://developer.android.com/training/articles/security-ssl.html

我的密碼

 public RequestQueue getRequestQueue() {
    if (mRequestQueue == null) {
        // getApplicationContext() is key, it keeps you from leaking the
        // Activity or BroadcastReceiver if someone passes one in.

        HurlStack hstakc = new HurlStack() {
            @Override
            protected HttpURLConnection createConnection(URL url) throws IOException {
                HttpsURLConnection httpsURLConnection = (HttpsURLConnection) super.createConnection(url);
                try {
                    httpsURLConnection.setSSLSocketFactory(getSSLSocketFactory());
                   // httpsURLConnection.setHostnameVerifier(getHostnameVerifier());
                } catch (Exception e) {
                    e.printStackTrace();
                }
                return httpsURLConnection;
            }

        };

        mRequestQueue = Volley.newRequestQueue(mCtx.getApplicationContext(),hstakc);
    }


    mRequestQueue.getCache().clear();
    return mRequestQueue;
}


private SSLSocketFactory getSSLSocketFactory()
        throws CertificateException, KeyStoreException, IOException, NoSuchAlgorithmException, KeyManagementException {
    CertificateFactory cf = CertificateFactory.getInstance("X.509");
    InputStream caInput = mCtx.getResources().openRawResource(R.raw.certificate); 

    Certificate ca = cf.generateCertificate(caInput);
    caInput.close();


    KeyStore keyStore = KeyStore.getInstance("BKS");
    keyStore.load(null,null);
    keyStore.setCertificateEntry("ca", ca);

    String tmfAlgorithm = TrustManagerFactory.getDefaultAlgorithm();
    TrustManagerFactory tmf = TrustManagerFactory.getInstance(tmfAlgorithm);
    tmf.init(keyStore);

    TrustManager[] wrappedTrustManagers = getWrappedTrustManagers(tmf.getTrustManagers());

    SSLContext sslContext = SSLContext.getInstance("TLS");
    sslContext.init(null, wrappedTrustManagers, null);
    return sslContext.getSocketFactory();
}

private TrustManager[] getWrappedTrustManagers(TrustManager[] trustManagers) {
    final X509TrustManager originalTrustManager = (X509TrustManager) trustManagers[0];
    return new TrustManager[]{
            new X509TrustManager() {
                public X509Certificate[] getAcceptedIssuers() {
                    return originalTrustManager.getAcceptedIssuers();
                }

                public void checkClientTrusted(X509Certificate[] certs, String authType) {
                    try {
                        if (certs != null && certs.length > 0){
                            certs[0].checkValidity();
                        } else {
                            originalTrustManager.checkClientTrusted(certs, authType);
                        }
                    } catch (CertificateException e) {
                        Log.w("checkClientTrusted", e.toString());
                    }
                }

                public void checkServerTrusted(X509Certificate[] certs, String authType) {
                    try {
                        if (certs != null && certs.length > 0){
                            certs[0].checkValidity();
                        } else {
                            originalTrustManager.checkServerTrusted(certs, authType);
                        }
                    } catch (CertificateException e) {
                        Log.w("checkServerTrusted", e.toString());
                    }
                }
            }
    };
}

在此行中例外HttpsURLConnection httpsURLConnection =（HttpsURLConnection）super.createConnection（url）;

你能幫忙嗎？ 謝謝

全棧跟蹤

java.security.cert.CertPathValidatorException: Trust anchor for certification path not found.
           javax.net.ssl.SSLHandshakeException: java.security.cert.CertPathValidatorException: Trust anchor for certification path not found.
               at com.android.org.conscrypt.OpenSSLSocketImpl.startHandshake(OpenSSLSocketImpl.java:355)
               at com.android.okhttp.internal.io.RealConnection.connectTls(RealConnection.java:192)
               at com.android.okhttp.internal.io.RealConnection.connectSocket(RealConnection.java:149)
               at com.android.okhttp.internal.io.RealConnection.connect(RealConnection.java:112)
               at com.android.okhttp.internal.http.StreamAllocation.findConnection(StreamAllocation.java:184)
               at com.android.okhttp.internal.http.StreamAllocation.findHealthyConnection(StreamAllocation.java:126)
               at com.android.okhttp.internal.http.StreamAllocation.newStream(StreamAllocation.java:95)
               at com.android.okhttp.internal.http.HttpEngine.connect(HttpEngine.java:281)
               at com.android.okhttp.internal.http.HttpEngine.sendRequest(HttpEngine.java:224)
               at com.android.okhttp.internal.huc.HttpURLConnectionImpl.execute(HttpURLConnectionImpl.java:461)
               at com.android.okhttp.internal.huc.HttpURLConnectionImpl.getResponse(HttpURLConnectionImpl.java:407)
               at com.android.okhttp.internal.huc.HttpURLConnectionImpl.getResponseCode(HttpURLConnectionImpl.java:538)
               at com.android.okhttp.internal.huc.DelegatingHttpsURLConnection.getResponseCode(DelegatingHttpsURLConnection.java:105)
               at com.android.okhttp.internal.huc.HttpsURLConnectionImpl.getResponseCode(Unknown Source:0)
               at com.nostra13.universalimageloader.core.download.BaseImageDownloader.getStreamFromNetwork(BaseImageDownloader.java:117)
               at com.nostra13.universalimageloader.core.download.BaseImageDownloader.getStream(BaseImageDownloader.java:88)
               at com.nostra13.universalimageloader.core.LoadAndDisplayImageTask.downloadImage(LoadAndDisplayImageTask.java:291)
               at com.nostra13.universalimageloader.core.LoadAndDisplayImageTask.tryCacheImageOnDisk(LoadAndDisplayImageTask.java:274)
               at com.nostra13.universalimageloader.core.LoadAndDisplayImageTask.tryLoadBitmap(LoadAndDisplayImageTask.java:230)
               at com.nostra13.universalimageloader.core.LoadAndDisplayImageTask.run(LoadAndDisplayImageTask.java:136)
               at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1162)
               at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:636)
               at java.lang.Thread.run(Thread.java:764)

Answer 1

我在清單文件中犯了一個錯誤。現在它可以了。如果您遇到相同的問題，請首先像上面一樣編輯清單。