关于使用Okhttp导致的证书信任问题

╰+攻爆jí腚メ 2023-03-13 12:15 46阅读 0赞

![20200513154832612.png][]

我们通常创建client的方法使用的是这种，但有可能导致证书不受信任，访问不了的问题，比如调试运行时会报如下错误

OKHTTP javax.net.ssl.SSLHandshakeException

这时候我们不要着急，新建一个工具包，在包里新建如下类，类名随便取就行

package com.zy.community.utils;
    
    import okhttp3.OkHttpClient;
    
    import javax.net.ssl.*;
    
    /**
     * 处理证书不受信任的问题
     */
    public class OkHttpSSL {
        //okHttp3添加信任所有证书
        public static OkHttpClient getUnsafeOkHttpClient() {
        try {
            final TrustManager[] trustAllCerts = new TrustManager[]{
             new X509TrustManager() {
             @Override
             public void checkClientTrusted(java.security.cert.X509Certificate[] chain, String authType) {
             }
             @Override
             public void checkServerTrusted(java.security.cert.X509Certificate[] chain, String authType) {
             }
             @Override
             public java.security.cert.X509Certificate[] getAcceptedIssuers() {
                return new java.security.cert.X509Certificate[]{};
             }
         }
        };
            final SSLContext sslContext = SSLContext.getInstance("SSL");
            sslContext.init(null, trustAllCerts, new java.security.SecureRandom());
            final javax.net.ssl.SSLSocketFactory sslSocketFactory = sslContext.getSocketFactory();
            OkHttpClient.Builder builder = new OkHttpClient.Builder();
            builder.sslSocketFactory(sslSocketFactory);
            builder.hostnameVerifier(new HostnameVerifier() {
                @Override
                public boolean verify(String hostname, SSLSession session) {
                 return true;
                }
             });
                return builder.build();
        } catch (Exception e) {
            throw new RuntimeException(e);
            }
        }
    }

紧接着我们把之前创建client的方法替换为

OkHttpClient client = OkHttpSSL.getUnsafeOkHttpClient();

再次运行就不会报错了。

[感谢此大佬@哥哥是欧巴Vitory][Vitory]

[20200513154832612.png]: /images/20230312/30502406f42246eab4ae9c8ea3e5cec7.png
[Vitory]: https://www.jianshu.com/p/b2533192f993