首先需要獲得 服務(wù)器端需要驗(yàn)證的客戶端證書，即.p12文件
獲得客戶端信任的服務(wù)器端證書晤柄，即.bks或者.truststore文件
private static final String KEY_STORE_TYPE_BKS = "bks";
private static final String KEY_STORE_TYPE_P12 = "PKCS12";
private static final String KEY_STORE_PASSWORD = "123456";
private static final String KEY_STORE_TRUST_PASSWORD = "123456";
private SSLSocketFactory getSocketFactory() {
SSLSocketFactory socketFactory=null;
try {
// 服務(wù)器端需要驗(yàn)證的客戶端證書
keyStore = KeyStore.getInstance(KEY_STORE_TYPE_P12);
// 客戶端信任的服務(wù)器端證書
trustStore = KeyStore.getInstance(KEY_STORE_TYPE_BKS);
//.p12文件
InputStream ksIn = this.getResources().openRawResource(R.raw.client);
//.bks文件
InputStream tsIn = this.getResources().openRawResource(R.raw.server_bks);
try {
keyStore.load(ksIn, KEY_STORE_PASSWORD.toCharArray());
trustStore.load(tsIn, KEY_STORE_TRUST_PASSWORD.toCharArray());
} catch (Exception e) {
e.printStackTrace();
} finally {
try {
ksIn.close();
} catch (Exception ignore) {
}
try {
tsIn.close();
} catch (Exception ignore) {
}
}
socketFactory = new SSLSocketFactory(keyStore, KEY_STORE_PASSWORD, trustStore);
socketFactory.setHostnameVerifier(SSLSocketFactory.ALLOW_ALL_HOSTNAME_VERIFIER);
} catch (KeyManagementException e) {
e.printStackTrace();
} catch (UnrecoverableKeyException e) {
e.printStackTrace();
} catch (KeyStoreException e) {
e.printStackTrace();
} catch (NoSuchAlgorithmException e) {
e.printStackTrace();
}
return socketFactory;
}
然后在代碼中調(diào)用一下就行了
AsyncHttpClient mAsyncHttpClient = new AsyncHttpClient();
mAsyncHttpClient.setSSLSocketFactory(getSocketFactory());
