我已经有.pem和.key文件，但不想在本地安装/导入它们，只想告诉客户端使用这些文件，是否可能？ 这不是一个自签名的证书。
基本上，在我的curl中，我正在做这样的事情：
我已经查看了这个答案，以及这篇文章和代码示例。它们与Retrofit中的SSL证书相关。如果您已经有了一个okHttpClient对象，那么您可以使用CustomTrust类来创建一个带有自定义信任管理器的SSL Socket Factory。这将允许您通过HTTPS请求访问受保护的API端点。
我遇到了一个错误，错误信息为：
基本上，在我的curl中，我正在做这样的事情：
curl --key mykey.key --cert mycert.pem https://someurl.com/my-endpoint
我已经查看了这个答案，以及这篇文章和代码示例。它们与Retrofit中的SSL证书相关。如果您已经有了一个okHttpClient对象，那么您可以使用CustomTrust类来创建一个带有自定义信任管理器的SSL Socket Factory。这将允许您通过HTTPS请求访问受保护的API端点。
val okHttpClient = OkHttpClient.Builder()
.sslSocketFactory(?, ?) //here I tried to call sslSocketFactory, trustManager following the example from the CustomTrust.java
.build()
有解决方案的想法吗？
已经检查了这份文档，但是 SSL 部分并没有完成，也没有示例。
https://square.github.io/okhttp/https/#customizing-trusted-certificates-kt-java
因此，我尝试按照 okhttp 示例进行以下操作：
private fun trustedCertificatesInputStream(): InputStream {
val comodoRsaCertificationAuthority = (""
+ "-----BEGIN CERTIFICATE-----\n" +
"-----END CERTIFICATE-----")
return Buffer()
.writeUtf8(comodoRsaCertificationAuthority)
.inputStream()
}
val loggingInterceptor = HttpLoggingInterceptor().apply {
level = HttpLoggingInterceptor.Level.BODY
}
fun createClient() : OkHttpClient {
val trustManager: X509TrustManager
val sslSocketFactory: SSLSocketFactory
try {
trustManager = trustManagerForCertificates(trustedCertificatesInputStream())
val sslContext = SSLContext.getInstance("TLS")
sslContext.init(null, arrayOf<TrustManager>(trustManager), null)
sslSocketFactory = sslContext.socketFactory
} catch (e: GeneralSecurityException) {
throw RuntimeException(e)
}
return OkHttpClient.Builder()
.sslSocketFactory(sslSocketFactory, trustManager)
.connectTimeout(45, TimeUnit.SECONDS)
.readTimeout(45, TimeUnit.SECONDS)
.protocols(listOf(Protocol.HTTP_1_1))
.addInterceptor(loggingInterceptor)
.build()
}
@Throws(GeneralSecurityException::class)
private fun trustManagerForCertificates(input: InputStream): X509TrustManager {
val certificateFactory: CertificateFactory = CertificateFactory.getInstance("X.509")
val certificates: Collection<Certificate?> = certificateFactory.generateCertificates(input)
val password = "password".toCharArray() // Any password will work.
val keyStore = newEmptyKeyStore(password)
for ((index, certificate) in certificates.withIndex()) {
val certificateAlias = index.toString()
keyStore.setCertificateEntry(certificateAlias, certificate)
}
// Use it to build an X509 trust manager.
val keyManagerFactory: KeyManagerFactory = KeyManagerFactory.getInstance(KeyManagerFactory.getDefaultAlgorithm())
keyManagerFactory.init(keyStore, password)
val trustManagerFactory: TrustManagerFactory = TrustManagerFactory.getInstance(TrustManagerFactory.getDefaultAlgorithm())
trustManagerFactory.init(keyStore)
val trustManagers: Array<TrustManager> = trustManagerFactory.getTrustManagers()
return trustManagers[0]!! as X509TrustManager
}
@Throws(GeneralSecurityException::class)
private fun newEmptyKeyStore(password: CharArray): KeyStore {
return try {
val keyStore = KeyStore.getInstance(KeyStore.getDefaultType())
val inputStream: InputStream? = null // By convention, 'null' creates an empty key store.
keyStore.load(inputStream, password)
keyStore
} catch (e: IOException) {
throw AssertionError(e)
}
}
我遇到了一个错误，错误信息为：
javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
搜索与错误相关的信息，看起来我应该在本地安装 SSL，但我不希望这样做，因为在服务器上不能以这种方式安装它，有没有办法让它工作？
，而是将其导向cat`或文件以获取证书链。在使用PemUtils读取时，定界符之间的所有内容都将被忽略。 - cheppsn