我們是否需要創建任何證書來在Android中調用https web服務

Question

您好我正在使用Android應用程序，我在所有Web服務中都使用https協議。所以與Android應用程序啓用服務器https溝通我們需要添加任何證書在我的raw文件夾的Android？

如果是，那麼它是什麼過程。我檢查了很多答案，但人們只是忽略了https協議，只是接受所有的證書或通過。

在此先感謝。

Answer 1

1. 創建BouncyCastle的KeyStore，把你的證書（您可以使用OpenSSL），後來就把創建KeyStore到RES /原始文件夾中。

在應用程式：

1. 裝入密鑰存儲文件轉換爲Java KeyStore
2. 飼料您HttpClient與KeyStore

實施例：

// Load CAs from an InputStream 
// (could be from a resource or ByteArrayInputStream or ...) 
CertificateFactory cf = CertificateFactory.getInstance("X.509"); 
// From https://www.washington.edu/itconnect/security/ca/load-der.crt 
InputStream caInput = new BufferedInputStream(new FileInputStream("load-der.crt")); 
Certificate ca; 
try { 
    ca = cf.generateCertificate(caInput); 
    System.out.println("ca=" + ((X509Certificate) ca).getSubjectDN()); 
} finally { 
    caInput.close(); 
} 

// Create a KeyStore containing our trusted CAs 
String keyStoreType = KeyStore.getDefaultType(); 
KeyStore keyStore = KeyStore.getInstance(keyStoreType); 
keyStore.load(null, null); 
keyStore.setCertificateEntry("ca", ca); 

// Create a TrustManager that trusts the CAs in our KeyStore 
String tmfAlgorithm = TrustManagerFactory.getDefaultAlgorithm(); 
TrustManagerFactory tmf = TrustManagerFactory.getInstance(tmfAlgorithm); 
tmf.init(keyStore); 

// Create an SSLContext that uses our TrustManager 
SSLContext context = SSLContext.getInstance("TLS"); 
context.init(null, tmf.getTrustManagers(), null); 

// Tell the URLConnection to use a SocketFactory from our SSLContext 
URL url = new URL("https://certs.cac.washington.edu/CAtest/"); 
HttpsURLConnection urlConnection = 
    (HttpsURLConnection)url.openConnection(); 
urlConnection.setSSLSocketFactory(context.getSocketFactory()); 
InputStream in = urlConnection.getInputStream(); 
copyInputStreamToOutputStream(in, System.out); 

源： https://developer.android.com/training/articles/security-ssl.html