我正在尝试使用以下代码进行 https 请求：
RequestQueue queue = Volley.newRequestQueue(getApplicationContext());
request = new Request<String>(Request.Method.GET,"https://devblahblahblah.com/service/etc",errListener);
但是我出现了这个错误：
com.android.volley.NoConnectionError： javax.net.ssl.SSLHandshakeException： java.security.cert.CertPathValidatorException：找不到认证路径的信任锚点。
需要注意两点：
实际上，我需要知道Android Volley框架中是否有任何开关/选项，通过使用它，我将成功地访问HTTPS URL？
也许下面的代码对你有所帮助:
1.创建一个实现X509TrustManager接口的HttpsTrustManager类：
public class HttpsTrustManager implements X509TrustManager {
private static TrustManager[] trustManagers;
private static final X509Certificate[] _AcceptedIssuers = new X509Certificate[]{};
@Override
public void checkClientTrusted(
java.security.cert.X509Certificate[] x509Certificates, String s)
throws java.security.cert.CertificateException {
}
@Override
public void checkServerTrusted(
java.security.cert.X509Certificate[] x509Certificates, String s)
throws java.security.cert.CertificateException {
}
public boolean isClientTrusted(X509Certificate[] chain) {
return true;
}
public boolean isServerTrusted(X509Certificate[] chain) {
return true;
}
@Override
public X509Certificate[] getAcceptedIssuers() {
return _AcceptedIssuers;
}
public static void allowAllSSL() {
HttpsURLConnection.setDefaultHostnameVerifier(new HostnameVerifier() {
@Override
public boolean verify(String arg0, SSLSession arg1) {
return true;
}
});
SSLContext context = null;
if (trustManagers == null) {
trustManagers = new TrustManager[]{new HttpsTrustManager()};
}
try {
context = SSLContext.getInstance("TLS");
context.init(null, trustManagers, new SecureRandom());
} catch (NoSuchAlgorithmException e) {
e.printStackTrace();
} catch (KeyManagementException e) {
e.printStackTrace();
}
HttpsURLConnection.setDefaultSSLSocketFactory(context
.getSocketFactory());
}
}
2. 在进行 HTTPS 请求之前添加 HttpsTrustManager.allowAllSSL()：
HttpsTrustManager.allowAllSSL();
String tag_string_req = "string_req";
StringRequest strReq = new StringRequest(Request.Method.POST,
your_https_url, new Response.Listener<String>() {
@Override
public void onResponse(String response) {
Log.d(TAG, "response :"+response);
}
}, new Response.ErrorListener() {
@Override
public void onErrorResponse(VolleyError error) {
VolleyLog.d(TAG, "Error: " + error.getMessage());
}
}){
@Override
protected Map<String, String> getParams() {
Map<String, String> params = new HashMap<String, String>();
params.put("username", "max");
params.put("password", "123456");
return params;
}
};
AppController.getInstance().addToRequestQueue(strReq, tag_string_req);
如果你正在使用Volley并且想要进行HTTPS请求或SSL认证服务，则可以选择以下最简单的方法：
步骤1. 将 .cer 文件放入 res/raw/ 文件夹。
步骤2. 使用此方法，并将 .cer 文件名替换为您的 .cer 文件，并替换您的主机名。
private SSLSocketFactory getSocketFactory() {
CertificateFactory cf = null;
try {
cf = CertificateFactory.getInstance("X.509");
InputStream caInput = getResources().openRawResource(R.raw.cert_name);
Certificate ca;
try {
ca = cf.generateCertificate(caInput);
Log.e("CERT", "ca=" + ((X509Certificate) ca).getSubjectDN());
} finally {
caInput.close();
}
String keyStoreType = KeyStore.getDefaultType();
KeyStore keyStore = KeyStore.getInstance(keyStoreType);
keyStore.load(null, null);
keyStore.setCertificateEntry("ca", ca);
String tmfAlgorithm = TrustManagerFactory.getDefaultAlgorithm();
TrustManagerFactory tmf = TrustManagerFactory.getInstance(tmfAlgorithm);
tmf.init(keyStore);
HostnameVerifier hostnameVerifier = new HostnameVerifier() {
@Override
public boolean verify(String hostname, SSLSession session) {
Log.e("CipherUsed", session.getCipherSuite());
return hostname.compareTo("10.199.89.68")==0; //The Hostname of your server.
}
};
HttpsURLConnection.setDefaultHostnameVerifier(hostnameVerifier);
SSLContext context = null;
context = SSLContext.getInstance("TLS");
context.init(null, tmf.getTrustManagers(), null);
HttpsURLConnection.setDefaultSSLSocketFactory(context.getSocketFactory());
SSLSocketFactory sf = context.getSocketFactory();
return sf;
} catch (CertificateException e) {
e.printStackTrace();
} catch (NoSuchAlgorithmException e) {
e.printStackTrace();
} catch (KeyStoreException e) {
e.printStackTrace();
} catch (FileNotFoundException e) {
e.printStackTrace();
} catch (IOException e) {
e.printStackTrace();
} catch (KeyManagementException e) {
e.printStackTrace();
}
return null;
}
步骤 --> 3. 在Volley请求中，将该行代码“RequestQueue queue = Volley.newRequestQueue(this);”替换为“RequestQueue queue = Volley.newRequestQueue(this, new HurlStack(null, getSocketFactory()));”，以使用HurlStack来请求网络。
/etc/letsencrypt/live/your.website.com/chain.pem因此，除了您已经使用的CertificateFile和KeyFile之外，您现在还有第三行：SSLCertificateChainFile /etc/letsencrypt/live/your.website.com/chain.pem
只需添加该行，重新启动apache，Volley就不会再抱怨，而且您也没有引入任何安全漏洞！
当我为域名添加SSL时，我遇到了同样的问题。经过两天的努力，我发现了解决方案：URL出现了错误。我之前使用的是https://example.com，但是当我为域名添加SSL后，URL会发生变化。
而且POST方法也正常工作
...
const app = express();
const privateKey = fs.readFileSync('ssl/privkey.pem', 'utf8');
const certificate = fs.readFileSync('ssl/cert.pem', 'utf8');
const chain = fs.readFileSync('ssl/chain.pem', 'utf8');
const credentials = {key: privateKey, cert: certificate, ca: chain};
...
var httpsServer = https.createServer(credentials, app);
fullchain.pem 中的证书，而不是 cert.pem 文件中的证书：ssl_certificate /.../fullchain.pem;
该文件包含您的证书和CA的连接。
HttpUrlConnection一样配置它。请参阅http://commonsware.com/blog/2013/03/04/ssl-android-basics.html和http://nelenkov.blogspot.ie/2011/12/using-custom-certificate-trust-store-on.html。 - CommonsWareHurlStack的类，它扩展了HttpStack，是传递给Volley.newRequestQueue方法的可选参数。HurlStack的构造函数接受一个类型为SSLSocketFactory的参数，并在其 javadoc 中写道：“用于 HTTPS 连接的 SSL 工厂”，但我还没有尝试过它。 - Abdullah Shoaib