下面是一个Android HttpsURLConnection忽略Https证书是否正确的Https请求工具类,不需要验证服务器端证书是否正确,也不需要验证服务器证书中的域名是否有效。
(PS:建议下面代码仅仅用于测试阶段,不建议用于发布后的产品中。否则的话HTTPS就形同虚设了。)
import java.io.BufferedReader;
import java.io.IOException;
import java.io.InputStream;
import java.io.InputStreamReader;
import java.io.OutputStream;
import java.io.UnsupportedEncodingException;
import java.net.HttpURLConnection;
import java.net.URL;
import java.net.URLEncoder;
import java.security.KeyManagementException;
import java.security.NoSuchAlgorithmException;
import java.security.NoSuchProviderException;
import java.security.cert.CertificateException;
import java.security.cert.X509Certificate;
import java.util.Map;
import java.util.Map.Entry;import javax.net.ssl.HostnameVerifier;
import javax.net.ssl.HttpsURLConnection;
import javax.net.ssl.SSLContext;
import javax.net.ssl.SSLSession;
import javax.net.ssl.SSLSocketFactory;
import javax.net.ssl.TrustManager;
import javax.net.ssl.X509TrustManager;/*** 忽略Https证书是否正确的Https Post请求工具类* <p/>* created by OuyangPeng on 2016/1/17.*/
public class HttpUtil {private static final String DEFAULT_CHARSET = "UTF-8"; // 默认字符集private static final String _GET = "GET"; // GETprivate static final String _POST = "POST";// POST/*** 初始化http请求参数*/private static HttpURLConnection initHttp(String url, String method, Map<String, String> headers)throws IOException {URL _url = new URL(url);HttpURLConnection http = (HttpURLConnection) _url.openConnection();// 连接超时http.setConnectTimeout(25000);// 读取超时 --服务器响应比较慢,增大时间http.setReadTimeout(25000);http.setRequestMethod(method);http.setRequestProperty("Content-Type", "application/x-www-form-urlencoded");http.setRequestProperty("User-Agent","Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.146 Safari/537.36");if (null != headers && !headers.isEmpty()) {for (Entry<String, String> entry : headers.entrySet()) {http.setRequestProperty(entry.getKey(), entry.getValue());}}http.setDoOutput(true);http.setDoInput(true);http.connect();return http;}/*** 初始化http请求参数*/private static HttpsURLConnection initHttps(String url, String method, Map<String, String> headers)throws IOException, NoSuchAlgorithmException, NoSuchProviderException, KeyManagementException {TrustManager[] tm = {new MyX509TrustManager()};SSLContext sslContext = SSLContext.getInstance("SSL");sslContext.init(null, tm, new java.security.SecureRandom());// 从上述SSLContext对象中得到SSLSocketFactory对象 SSLSocketFactory ssf = sslContext.getSocketFactory();URL _url = new URL(url);HttpsURLConnection http = (HttpsURLConnection) _url.openConnection();// 设置域名校验http.setHostnameVerifier(new TrustAnyHostnameVerifier());http.setSSLSocketFactory(ssf);// 连接超时http.setConnectTimeout(25000);// 读取超时 --服务器响应比较慢,增大时间http.setReadTimeout(25000);http.setRequestMethod(method);http.setRequestProperty("Content-Type", "application/x-www-form-urlencoded");http.setRequestProperty("User-Agent","Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.146 Safari/537.36");if (null != headers && !headers.isEmpty()) {for (Entry<String, String> entry : headers.entrySet()) {http.setRequestProperty(entry.getKey(), entry.getValue());}}http.setDoOutput(true);http.setDoInput(true);http.connect();return http;}/*** get请求*/public static String get(String url, Map<String, String> params, Map<String, String> headers) {StringBuffer bufferRes = null;try {HttpURLConnection http = null;if (isHttps(url)) {http = initHttps(initParams(url, params), _GET, headers);} else {http = initHttp(initParams(url, params), _GET, headers);}InputStream in = http.getInputStream();BufferedReader read = new BufferedReader(new InputStreamReader(in, DEFAULT_CHARSET));String valueString = null;bufferRes = new StringBuffer();while ((valueString = read.readLine()) != null) {bufferRes.append(valueString);}in.close();if (http != null) {http.disconnect();// 关闭连接}return bufferRes.toString();} catch (Exception e) {e.printStackTrace();return null;}}/*** get请求*/public static String get(String url) {return get(url, null);}/*** get请求*/public static String get(String url, Map<String, String> params) {return get(url, params, null);}/*** post请求*/public static String post(String url, String params, Map<String, String> headers) {StringBuffer bufferRes = null;try {HttpURLConnection http = null;if (isHttps(url)) {http = initHttps(url, _POST, headers);} else {http = initHttp(url, _POST, headers);}OutputStream out = http.getOutputStream();out.write(params.getBytes(DEFAULT_CHARSET));out.flush();out.close();InputStream in = http.getInputStream();BufferedReader read = new BufferedReader(new InputStreamReader(in, DEFAULT_CHARSET));String valueString = null;bufferRes = new StringBuffer();while ((valueString = read.readLine()) != null) {bufferRes.append(valueString);}in.close();if (http != null) {http.disconnect();// 关闭连接}return bufferRes.toString();} catch (Exception e) {e.printStackTrace();return null;}}/*** post请求*/public static String post(String url, Map<String, String> params) {return post(url, map2Url(params), null);}/*** post请求*/public static String post(String url, Map<String, String> params, Map<String, String> headers) {return post(url, map2Url(params), headers);}/*** 初始化参数*/public static String initParams(String url, Map<String, String> params) {if (null == params || params.isEmpty()) {return url;}StringBuilder sb = new StringBuilder(url);if (url.indexOf("?") == -1) {sb.append("?");}sb.append(map2Url(params));return sb.toString();}/*** map转url参数*/public static String map2Url(Map<String, String> paramToMap) {if (null == paramToMap || paramToMap.isEmpty()) {return null;}StringBuffer url = new StringBuffer();boolean isfist = true;for (Entry<String, String> entry : paramToMap.entrySet()) {if (isfist) {isfist = false;} else {url.append("&");}url.append(entry.getKey()).append("=");String value = entry.getValue();if (null == value || "".equals(value.trim())) {try {url.append(URLEncoder.encode(value, DEFAULT_CHARSET));} catch (UnsupportedEncodingException e) {e.printStackTrace();}}}return url.toString();}/*** 检测是否https*/private static boolean isHttps(String url) {return url.startsWith("https");}/*** 不进行主机名确认*/private static class TrustAnyHostnameVerifier implements HostnameVerifier {public boolean verify(String hostname, SSLSession session) {return true;}}/*** 信任所有主机 对于任何证书都不做SSL检测* 安全验证机制,而Android采用的是X509验证*/private static class MyX509TrustManager implements X509TrustManager {public X509Certificate[] getAcceptedIssuers() {return null;}@Overridepublic void checkClientTrusted(X509Certificate[] chain, String authType) throws CertificateException {}@Overridepublic void checkServerTrusted(X509Certificate[] chain, String authType) throws CertificateException {}}
}
可以参考以下几篇文章:
http://www.blogjava.net/stevenjohn/archive/2012/08/16/385569.html
http://blog.csdn.net/sunny243788557/article/details/38874153
http://blog.csdn.net/liangweiwei130/article/details/8845024
http://www.xuebuyuan.com/1788389.html
关于HTTPS SSL验证证书的问题可以参考以下几篇文章
- Android证书信任问题与大表哥
- Android Https请求详细demo
- android中进行https连接的方式
- android httpClient 支持HTTPS的访问方式
- android ssl验证、https验证
=======================================================================
作者:欧阳鹏 欢迎转载,与人分享是进步的源泉!
转载请保留原文地址:http://blog.csdn.net/ouyang_peng
=======================================================================