Android HTTPS连接

Question

如何使用Verisign 2048位SSL证书与服务器建立HTTPS连接？ Verisign证书在根列表中可用。

Answer 1

http://developer.android.com/reference/javax/net/ssl/HttpsURLConnection.html

一般来说，developer.android.com具有右上角，这是非常聪明的一个搜索栏。

Answer 2

我试过几天 我终于得到答案 所以我想在这里发布，以帮助别人我的脚步，我的所有代码。

1），以获得您想要连接

echo | openssl s_client -connect ${MY_SERVER}:443 2>&1 | sed -ne '/-BEGIN CERTIFICATE-/,/-END CERTIFICATE-/p' > mycert.pem 

2）创建键的网站，你需要BouncyCastle的库中的证书，你可以下载here

keytool -import -v -trustcacerts -alias 0 -file mycert.pem -keystore “store_directory/mykst“ -storetype BKS -provider org.bouncycastle.jce.provider.BouncyCastleProvider -providerpath “directory_of_bouncycastle/bcprov-jdk16-145.jar” -storepass mypassword 

3）检查创建密钥

keytool -list -keystore "carpeta_almacen/mykst" -provider org.bouncycastle.jce.provider.BouncyCastleProvider -providerpath "directory_of_bouncycastle/bcprov-jdk16-145.jar" -storetype BKS -storepass mypassword 

，你应该看到的东西如T他：

TIPO德ALMACEN去恒山：BKS Proveedor德ALMACEN去恒山：BC

苏ALMACEN去恒山contiene ENTRADA 1

0，07-DIC-2011，trustedCertEntry，

Huella数字去CERTIFICADO（MD5）：

55：FD：E5：E3：8A：4C：D6：B8：69：EB：6A：49：05：5F：18：48

4）那么您需要将文件“mykst”复制到您的android项目中的“res/raw”目录（如果不存在，则创建它）。

5）的权限，可以在Android清单

<uses-permission android:name="android.permission.INTERNET"/> 

6）这里的代码添加到！

activity_main.xml中

<?xml version="1.0" encoding="utf-8"?> 
<LinearLayout xmlns:android="http://schemas.android.com/apk/res/android" 
    android:layout_width="fill_parent" 
    android:layout_height="fill_parent" 
    android:orientation="vertical" 
    android:padding="10dp" > 

    <Button 
     android:id="@+id/button" 
     android:layout_width="fill_parent" 
     android:layout_height="wrap_content" 
     android:text="Cargar contenido" /> 

    <RelativeLayout 
     android:layout_width="fill_parent" 
     android:layout_height="fill_parent" 
     android:background="#4888ef"> 
     <ProgressBar 
      android:id="@+id/loading" 
      android:layout_width="50dp" 
      android:layout_height="50dp" 
      android:indeterminate="true" 
      android:layout_centerInParent="true" 
      android:visibility="gone"/> 
     <ScrollView 
      android:layout_width="fill_parent" 
      android:layout_height="fill_parent" 
      android:fillViewport="true" 
      android:padding="10dp"> 
      <TextView 
       android:id="@+id/output" 
       android:layout_width="fill_parent" 
       android:layout_height="fill_parent" 
       android:textColor="#FFFFFF"/> 
     </ScrollView> 
    </RelativeLayout> 
</LinearLayout> 

MyHttpClient

package com.example.https; 


import java.io.FileInputStream; 
import java.io.IOException; 
import java.io.InputStream; 
import java.security.KeyStore; 
import java.security.cert.X509Certificate; 
import java.util.Date; 
import java.util.Enumeration; 

import org.apache.http.conn.ClientConnectionManager; 
import org.apache.http.conn.scheme.PlainSocketFactory; 
import org.apache.http.conn.scheme.Scheme; 
import org.apache.http.conn.scheme.SchemeRegistry; 
import org.apache.http.conn.ssl.SSLSocketFactory; 
import org.apache.http.impl.client.DefaultHttpClient; 
import org.apache.http.impl.conn.SingleClientConnManager; 

import android.content.Context; 
import android.os.Build; 

import javax.net.ssl.KeyManagerFactory; 
import javax.net.ssl.TrustManagerFactory; 

public class MyHttpClient extends DefaultHttpClient { 

    final Context context; 

    public MyHttpClient(Context context) { 
     this.context = context; 
    } 

    @Override 
    protected ClientConnectionManager createClientConnectionManager() { 
     SchemeRegistry registry = new SchemeRegistry(); 
     registry.register(new Scheme("http", PlainSocketFactory.getSocketFactory(), 80)); 
     // Register for port 443 our SSLSocketFactory with our keystore 
     // to the ConnectionManager 
     registry.register(new Scheme("https", newSslSocketFactory(), 443)); 
     return new SingleClientConnManager(getParams(), registry); 
    } 

    private SSLSocketFactory newSslSocketFactory() { 
     try { 
      // Trust manager/truststore 
      KeyStore trustStore=KeyStore.getInstance(KeyStore.getDefaultType()); 

      // If we're on an OS version prior to Ice Cream Sandwich (4.0) then use the standard way to get the system 
      // trustStore -- System.getProperty() else we need to use the special name to get the trustStore KeyStore 
      // instance as they changed their trustStore implementation. 
      if (Build.VERSION.RELEASE.compareTo("4.0") < 0) { 
       TrustManagerFactory trustManagerFactory=TrustManagerFactory 
         .getInstance(TrustManagerFactory.getDefaultAlgorithm()); 
       FileInputStream trustStoreStream=new FileInputStream(System.getProperty("javax.net.ssl.trustStore")); 
       trustStore.load(trustStoreStream, null); 
       trustManagerFactory.init(trustStore); 
       trustStoreStream.close(); 
      } else { 
       trustStore=KeyStore.getInstance("AndroidCAStore"); 
      } 

      InputStream certificateStream = context.getResources().openRawResource(R.raw.mykst); 
      KeyStore keyStore=KeyStore.getInstance("BKS"); 
      try { 
       keyStore.load(certificateStream, "mypassword".toCharArray()); 
       Enumeration<String> aliases=keyStore.aliases(); 
       while (aliases.hasMoreElements()) { 
        String alias=aliases.nextElement(); 
        if (keyStore.getCertificate(alias).getType().equals("X.509")) { 
         X509Certificate cert=(X509Certificate)keyStore.getCertificate(alias); 
         if (new Date().after(cert.getNotAfter())) { 
          // This certificate has expired 
          return null; 
         } 
        } 
       } 
      } catch (IOException ioe) { 
       // This occurs when there is an incorrect password for the certificate 
       return null; 
      } finally { 
       certificateStream.close(); 
      } 

      KeyManagerFactory keyManagerFactory=KeyManagerFactory.getInstance(KeyManagerFactory.getDefaultAlgorithm()); 
      keyManagerFactory.init(keyStore, "mypassword".toCharArray()); 

      return new SSLSocketFactory(keyStore, "mypassword", trustStore); 
     } catch (Exception e) { 
      throw new AssertionError(e); 
     } 
    } 
} 

MainActivity

package com.example.https; 

import android.app.Activity; 
import android.os.AsyncTask; 
import android.os.Bundle; 
import android.view.View; 
import android.widget.Button; 
import android.widget.TextView; 

import org.apache.http.HttpEntity; 
import org.apache.http.HttpResponse; 
import org.apache.http.client.ClientProtocolException; 
import org.apache.http.client.methods.HttpGet; 
import org.apache.http.impl.client.DefaultHttpClient; 

import java.io.BufferedReader; 
import java.io.IOException; 
import java.io.InputStream; 
import java.io.InputStreamReader; 
import java.io.Reader; 
import java.io.StringWriter; 
import java.io.Writer; 

import javax.net.ssl.SSLSocketFactory; 

public class MainActivity extends Activity { 

    private View loading; 
    private TextView output; 
    private Button button; 

    SSLSocketFactory socketFactory = null; 

    @Override 
    public void onCreate(Bundle savedInstanceState) { 
     super.onCreate(savedInstanceState); 
     setContentView(R.layout.activity_main); 
     loading = findViewById(R.id.loading); 
     output = (TextView) findViewById(R.id.output); 
     button = (Button) findViewById(R.id.button); 
     button.setOnClickListener(new View.OnClickListener() { 
      @Override 
      public void onClick(View v) { 
       new CargaAsyncTask().execute(new Void[0]); 
      } 
     }); 
    } 

    class CargaAsyncTask extends AsyncTask<Void, Void, String> { 

     @Override 
     protected void onPreExecute() { 
      super.onPreExecute(); 
      loading.setVisibility(View.VISIBLE); 
      button.setEnabled(false); 
     } 

     @Override 
     protected String doInBackground(Void... params) { 
      // Instantiate the custom HttpClient 
      DefaultHttpClient client = new MyHttpClient(getApplicationContext()); 
      HttpGet get = new HttpGet("https://www.google.com"); 
      // Execute the GET call and obtain the response 
      HttpResponse getResponse; 
      String resultado = null; 
      try { 
       getResponse = client.execute(get); 
       HttpEntity responseEntity = getResponse.getEntity(); 
       InputStream is = responseEntity.getContent(); 
       resultado = convertStreamToString(is); 
      } catch (ClientProtocolException e) { 
       e.printStackTrace(); 
      } catch (IOException e) { 
       e.printStackTrace(); 
      } 
      return resultado; 
     } 

     @Override 
     protected void onPostExecute(String result) { 
      super.onPostExecute(result); 
      loading.setVisibility(View.GONE); 
      button.setEnabled(true); 
      if (result == null) { 
       output.setText("Error"); 
      } else { 
       output.setText(result); 
      } 
     } 

    } 

    public static String convertStreamToString(InputStream is) throws IOException { 
     /* 
     * To convert the InputStream to String we use the 
     * Reader.read(char[] buffer) method. We iterate until the 
     * Reader return -1 which means there's no more data to 
     * read. We use the StringWriter class to produce the string. 
     */ 
     if (is != null) { 
      Writer writer = new StringWriter(); 

      char[] buffer = new char[1024]; 
      try { 
       Reader reader = new BufferedReader(new InputStreamReader(is, "UTF-8")); 
       int n; 
       while ((n = reader.read(buffer)) != -1) { 
        writer.write(buffer, 0, n); 
       } 
      } finally { 
       is.close(); 
      } 
      return writer.toString(); 
     } else { 
      return ""; 
     } 
    } 
} 

I H打开它可能对别人有用！ 享受它！