![](/img/trans.png)
[英]SSLHandshakeException - Calling webservice from web application using self signed certificate
[英]I am getting a SSLHandshakeException and CertPathValidatorException error while using self signed certificate
我正在嘗試向apache2發送一個https請求,此請求隨后被Django接收。 該代碼在使用http的ssl之前運行良好,但現在卻出現了異常。 我只需要通過apache2向jango發送一個https請求。 我的apache2服務器在AWS服務器上運行。
這在我的MainActivity.java文件中。
這是我的hurlstack代碼
hurlStack = new HurlStack() {
@Override
protected HttpsURLConnection createConnection(URL url) throws IOException {
Log.w("testing","in hurlstack exception ");
HttpsURLConnection httpsURLConnection = (HttpsURLConnection) super.createConnection(url);
Log.w("testing","after url ");
try {
Log.w("testing","in hurlstack try ");
httpsURLConnection.setSSLSocketFactory(getSSLSocketFactory());
httpsURLConnection.setHostnameVerifier(getHostnameVerifier());
} catch (Exception e) {
e.printStackTrace();
Log.w("testing","In hurlstack exception"+e.toString());
}
Log.w("testing","end of hurlstack" + httpsURLConnection);
return httpsURLConnection;
}
};
private HostnameVerifier getHostnameVerifier() {
Log.w("testing","In hostname verifier");
return new HostnameVerifier() {
@Override
public boolean verify(String hostname, SSLSession session) {
//return true; // verify always returns true, which could cause insecure network traffic due to trusting TLS/SSL server certificates for wrong hostnames
HostnameVerifier hv = HttpsURLConnection.getDefaultHostnameVerifier();
return hv.verify(hostname, session);
}
};
}
private TrustManager[] getWrappedTrustManagers(TrustManager[] trustManagers) {
Log.w("testing","In trust manager");
final X509TrustManager originalTrustManager = (X509TrustManager) trustManagers[0];
return new TrustManager[]{
new X509TrustManager() {
public X509Certificate[] getAcceptedIssuers() {
return originalTrustManager.getAcceptedIssuers();
}
public void checkClientTrusted(X509Certificate[] certs, String authType) {
try {
if (certs != null && certs.length > 0){
certs[0].checkValidity();
} else {
originalTrustManager.checkClientTrusted(certs, authType);
}
} catch (CertificateException e) {
Log.w("testing", "certificate error "+e.toString());
}
}
public void checkServerTrusted(X509Certificate[] certs, String authType) {
try {
if (certs != null && certs.length > 0){
certs[0].checkValidity();
} else {
originalTrustManager.checkServerTrusted(certs, authType);
}
} catch (CertificateException e) {
Log.w("testing", "certificate server error "+e.toString());
}
}
}
};
}
private SSLSocketFactory getSSLSocketFactory()
throws CertificateException, KeyStoreException, IOException, NoSuchAlgorithmException, KeyManagementException {
Log.w("testing", " in ssl socket factory");
CertificateFactory cf = CertificateFactory.getInstance("X.509");
InputStream caInput = getResources().openRawResource(R.raw.apache_selfsigned); // this is the file with .crt extension stored in \app\src\main\res\raw folder path
Log.w("testing", "ssl socket");
Certificate ca = cf.generateCertificate(caInput);
caInput.close();
KeyStore keyStore = KeyStore.getInstance("BKS");
keyStore.load(null, null);
keyStore.setCertificateEntry("ca", ca);
String tmfAlgorithm = TrustManagerFactory.getDefaultAlgorithm();
TrustManagerFactory tmf = TrustManagerFactory.getInstance(tmfAlgorithm);
tmf.init(keyStore);
TrustManager[] wrappedTrustManagers = getWrappedTrustManagers(tmf.getTrustManagers());
SSLContext sslContext = SSLContext.getInstance("TLS");
sslContext.init(null, wrappedTrustManagers, null);
return sslContext.getSocketFactory();
}
我有一個MySingleton.java文件
private MySingleton(Context context) {
mCtx = context;
mRequestQueue = getRequestQueue();
}
public static synchronized MySingleton getInstance(Context context) {
if (mInstance == null) {
mInstance = new MySingleton(context);
}
return mInstance;
}
public RequestQueue getRequestQueue() {
if (mRequestQueue == null) {
// getApplicationContext() is key, it keeps you from leaking the
// Activity or BroadcastReceiver if someone passes one in.
mRequestQueue = Volley.newRequestQueue(mCtx.getApplicationContext(),new HurlStack());
}
return mRequestQueue;
}
public <T> void addToRequestQueue(Request<T> req) {
// getRequestQueue().getCache().clear();
req.setRetryPolicy(new DefaultRetryPolicy(60000, 0, DefaultRetryPolicy.DEFAULT_BACKOFF_MULT));
getRequestQueue().add(req);
}
我用來創建自簽名證書的命令是
sudo openssl req -new -x509 -nodes -out apache-selfsigned.crt -keyout apache-selfsigned.key
您需要獲取上面生成的證書請求文件並對其進行自簽名以生成證書文件。
openssl x509 -trustout -signkey apache-selfsigned.key -days 365 -req -in apache-selfsigned.crt -out apache-selfsigned.cer
聲明:本站的技術帖子網頁,遵循CC BY-SA 4.0協議,如果您需要轉載,請注明本站網址或者原文地址。任何問題請咨詢:yoyou2525@163.com.