Android上的Web视图是否支持SSL？

Question

Android的WebView控件，它支持SSL吗？

我想加载一个使用可信SSL证书的网页，但WebView只是白色。

有什么建议吗？

Answer 1

不是专家，只是我可以在网上找到。 据我所知，WebView确实支持ssl，但是，空白屏幕表明WebView不相信证书是有效的。这可能会发生在自签名证书或未在android中设置的根认证（完全有效的证书未验证）。在任何情况下，如果您使用的是升级Froyo或更好的，你可以尝试这样的：

import android.webkit.WebView; 
import android.webkit.WebViewClient; 
import android.webkit.SslErrorHandler; 
import android.net.http.SslError; 

... 

engine = (WebView) findViewById(R.id.my_webview); 
engine.setWebViewClient(new WebViewClient() { 

    @Override 
    public void onReceivedSslError (WebView view, SslErrorHandler handler, SslError error) { 
     handler.proceed(); 
    } 
}); 

Answer 2

您必须启用的WebView设置来查看基于SSL的网站：

webView.getSetting().setDomStorageEnable(true); 

Answer 3

要正确处理SSL证书validationoogle戏根据更新的安全策略，当服务器提供的证书满足您的期望时，更改您的代码以调用SslErrorHandler.proceed（），否则调用SslErrorHandler.cancel（）。

例如，我添加了一个警告对话框，让用户确认并且似乎Google不再显示警告。

@Override 
    public void onReceivedSslError(WebView view, final SslErrorHandler handler, SslError error) { 
    final AlertDialog.Builder builder = new AlertDialog.Builder(view.getContext()); 
    String message = "SSL Certificate error."; 
     switch (error.getPrimaryError()) { 
      case SslError.SSL_UNTRUSTED: 
       message = "The certificate authority is not trusted."; 
       break; 
      case SslError.SSL_EXPIRED: 
       message = "The certificate has expired."; 
       break; 
      case SslError.SSL_IDMISMATCH: 
       message = "The certificate Hostname mismatch."; 
       break; 
      case SslError.SSL_NOTYETVALID: 
       message = "The certificate is not yet valid."; 
       break; 
     } 
     message += " Do you want to continue anyway?"; 

     builder.setTitle("SSL Certificate Error"); 
     builder.setMessage(message); 
    builder.setPositiveButton("continue", new DialogInterface.OnClickListener() { 
     @Override 
     public void onClick(DialogInterface dialog, int which) { 
      handler.proceed(); 
     } 
    }); 
    builder.setNegativeButton("cancel", new DialogInterface.OnClickListener() { 
     @Override 
     public void onClick(DialogInterface dialog, int which) { 
      handler.cancel(); 
     } 
    }); 
    final AlertDialog dialog = builder.create(); 
    dialog.show(); 
} 

在此更改后，它不会显示警告。

Answer 4

谷歌拒绝打我的应用程序，然后我做了这...

@Override 
    public void onReceivedSslError(WebView view, final SslErrorHandler handler, SslError error) { 

     try { 

      //Get the X509 trust manager from your ssl certificate 
      X509TrustManager trustManager = mySslCertificate.getX509TrustManager(); 

      //Get the certificate from error object 
      Bundle bundle = SslCertificate.saveState(error.getCertificate()); 
      X509Certificate x509Certificate; 
      byte[] bytes = bundle.getByteArray("x509-certificate"); 
      if (bytes == null) { 
       x509Certificate = null; 
      } else { 
       CertificateFactory certFactory = CertificateFactory.getInstance("X.509"); 
       Certificate cert = certFactory.generateCertificate(new ByteArrayInputStream(bytes)); 
       x509Certificate = (X509Certificate) cert; 
      } 
      X509Certificate[] x509Certificates = new X509Certificate[1]; 
      x509Certificates[0] = x509Certificate; 

      // check weather the certificate is trusted 
      trustManager.checkServerTrusted(x509Certificates, "ECDH_RSA"); 

      Log.e(TAG, "Certificate from " + error.getUrl() + " is trusted."); 
      handler.proceed(); 
     } catch (Exception e) { 
      Log.e(TAG, "Failed to access " + error.getUrl() + ". Error: " + error.getPrimaryError()); 
      final AlertDialog.Builder builder = new AlertDialog.Builder(WebViewActivity.this); 
      String message = "SSL Certificate error."; 
      switch (error.getPrimaryError()) { 
       case SslError.SSL_UNTRUSTED: 
        message = "The certificate authority is not trusted."; 
        break; 
       case SslError.SSL_EXPIRED: 
        message = "The certificate has expired."; 
        break; 
       case SslError.SSL_IDMISMATCH: 
        message = "The certificate Hostname mismatch."; 
        break; 
       case SslError.SSL_NOTYETVALID: 
        message = "The certificate is not yet valid."; 
        break; 
      } 
      message += " Do you want to continue anyway?"; 

      builder.setTitle("SSL Certificate Error"); 
      builder.setMessage(message); 
      builder.setPositiveButton("continue", new DialogInterface.OnClickListener() { 
       @Override 
       public void onClick(DialogInterface dialog, int which) { 
        handler.proceed(); 
       } 
      }); 
      builder.setNegativeButton("cancel", new DialogInterface.OnClickListener() { 
       @Override 
       public void onClick(DialogInterface dialog, int which) { 
        handler.cancel(); 
       } 
      }); 
      final AlertDialog dialog = builder.create(); 
      dialog.show(); 
     } 
    } 

作出上述改变谷歌Play上我的APK后

，并生成您的SSL信任管理器请选中该answer