Security with HTTPS and SSL

现在google play对https有比较严格的审核，所以不能用httpclient来跳过https验证

 

参考文章：

1.https://developer.android.com/training/articles/security-ssl.html#HttpsExample

2.http://www.codeproject.com/Articles/826045/Android-security-Implementation-of-Self-signed-SSL

 

public class HttpsRequestUtil {
	/**
	 * @param url
	 * @return result
	 */
	
	
	private static final int SET_CONNECTION_TIMEOUT = 15 * 1000;  
	private static final int SET_READ_TIMEOUT = 15 * 1000;  
        private static final int SET_SOCKET_TIMEOUT = 15 * 1000; 
    
  
	 
	 public static String doHttpsRequest(String requestURL, Context mContext,String cerFile ){
		 MyLogCat.d(Constants.TAG,"doHttpsRequest requestURL = " + requestURL);
		 String resutl = null;
		 CertificateFactory cf;
		try {
			cf = CertificateFactory.getInstance("X.509");
			AssetManager am = mContext.getAssets();
			
			InputStream caInput = new BufferedInputStream(am.open(cerFile));
			Certificate ca;
			try {
			    ca = cf.generateCertificate(caInput);
			   // System.out.println("ca=" + ((X509Certificate) ca).getSubjectDN());
			} finally {
			    try {
					caInput.close();
				} catch (IOException e) {
					// TODO Auto-generated catch block
					e.printStackTrace();
				}
			}

			// Create a KeyStore containing our trusted CAs
			String keyStoreType = KeyStore.getDefaultType();
			KeyStore keyStore = KeyStore.getInstance(keyStoreType);
			keyStore.load(null, null);
			keyStore.setCertificateEntry("ca", ca);

			// Create a TrustManager that trusts the CAs in our KeyStore
			String tmfAlgorithm = TrustManagerFactory.getDefaultAlgorithm();
			TrustManagerFactory tmf = TrustManagerFactory.getInstance(tmfAlgorithm);
			tmf.init(keyStore);

			// Create an SSLContext that uses our TrustManager
			SSLContext context = SSLContext.getInstance("TLS");
			context.init(null, tmf.getTrustManagers(), null);

			// Tell the URLConnection to use a SocketFactory from our SSLContext
			/*URL url = new URL("https://certs.cac.washington.edu/CAtest/");*/
			javax.net.ssl.SSLSocketFactory sslSocket = context.getSocketFactory();
			HostnameVerifier hostnameVerifier = org.apache.http.conn.ssl.SSLSocketFactory.ALLOW_ALL_HOSTNAME_VERIFIER;
			
			URL url = new URL(requestURL);
			HttpsURLConnection urlConnection =
			    (HttpsURLConnection)url.openConnection();
			urlConnection.setSSLSocketFactory(context.getSocketFactory());
			urlConnection.setHostnameVerifier(hostnameVerifier);
			urlConnection.setConnectTimeout(SET_CONNECTION_TIMEOUT);
			urlConnection.setReadTimeout(SET_READ_TIMEOUT);
			
			InputStream in = urlConnection.getInputStream();
			//copyInputStreamToOutputStream(in, System.out);
			
			BufferedReader reader = new BufferedReader(new InputStreamReader(in));    

	        StringBuilder sb = new StringBuilder();    

	     

	        String line = null;    

	        try {    

	            while ((line = reader.readLine()) != null) {    

	                sb.append(line);    

	            }    

	        } catch (IOException e) {    

	            e.printStackTrace();    

	        } finally {    

	            try {    

	                in.close();    

	            } catch (IOException e) {    

	                e.printStackTrace();    

	            }   
	        }
	        
	        if (sb!=null){
	        	resutl = sb.toString();
	        	
	        }
		} catch (CertificateException e1) {
			// TODO Auto-generated catch block
			e1.printStackTrace();
		} catch (FileNotFoundException e1) {
			// TODO Auto-generated catch block
			e1.printStackTrace();
		} catch (NoSuchAlgorithmException e1) {
			// TODO Auto-generated catch block
			e1.printStackTrace();
		} catch (KeyStoreException e1) {
			// TODO Auto-generated catch block
			e1.printStackTrace();
		} catch (KeyManagementException e1) {
			// TODO Auto-generated catch block
			e1.printStackTrace();
		} catch (MalformedURLException e1) {
			// TODO Auto-generated catch block
			e1.printStackTrace();
		} catch (IOException e1) {
			// TODO Auto-generated catch block
			e1.printStackTrace();
		}
		MyLogCat.d(Constants.TAG,"doHttpsRequest reuslt = " + resutl);
		return resutl;

	 }
	 
	
	
	
}