Java SSLCertificateSocketFactory.setTrustManagers方法代码示例

import android.net.SSLCertificateSocketFactory; //导入方法依赖的package包/类
public TrustUserSSLCertsSocketFactory() throws IOException, GeneralSecurityException {
    super(null);
    // No handshake timeout used
    mFactory = (SSLCertificateSocketFactory) SSLCertificateSocketFactory.getDefault(0);
    TrustManager[] trustAllowedCerts;
    try {
        trustAllowedCerts = new TrustManager[]{
                new WPTrustManager(SelfSignedSSLCertsManager.getInstance(null).getLocalKeyStore())
        };
        mFactory.setTrustManagers(trustAllowedCerts);
    } catch (GeneralSecurityException e1) {
        AppLog.e(T.API, "Cannot set TrustAllSSLSocketFactory on our factory. Proceding without it...", e1);
    }
}
 

import android.net.SSLCertificateSocketFactory; //导入方法依赖的package包/类
@TargetApi(14)
private static SSLCertificateSocketFactory getSslCertificateSocketFactory(
    @Nullable InputStream testCa, String androidSocketFatoryTls) throws Exception {
  if (Build.VERSION.SDK_INT < Build.VERSION_CODES.ICE_CREAM_SANDWICH /* API level 14 */) {
    throw new RuntimeException(
        "android_socket_factory_tls doesn't work with API level less than 14.");
  }
  SSLCertificateSocketFactory factory = (SSLCertificateSocketFactory)
      SSLCertificateSocketFactory.getDefault(5000 /* Timeout in ms*/);
  // Use HTTP/2.0
  byte[] h2 = "h2".getBytes();
  byte[][] protocols = new byte[][]{h2};
  if (androidSocketFatoryTls.equals("alpn")) {
    Method setAlpnProtocols =
        factory.getClass().getDeclaredMethod("setAlpnProtocols", byte[][].class);
    setAlpnProtocols.invoke(factory, new Object[] { protocols });
  } else if (androidSocketFatoryTls.equals("npn")) {
    Method setNpnProtocols =
        factory.getClass().getDeclaredMethod("setNpnProtocols", byte[][].class);
    setNpnProtocols.invoke(factory, new Object[]{protocols});
  } else {
    throw new RuntimeException("Unknown protocol: " + androidSocketFatoryTls);
  }

  if (testCa != null) {
    factory.setTrustManagers(getTrustManagers(testCa));
  }

  return factory;
}
 

import android.net.SSLCertificateSocketFactory; //导入方法依赖的package包/类
@Override
@TargetApi(Build.VERSION_CODES.JELLY_BEAN_MR1)
public Socket createSocket(Socket plainSocket, String host, int port, boolean autoClose) throws IOException {
	if (autoClose) {
		// we don't need the plainSocket
		plainSocket.close();
	}

	SSLCertificateSocketFactory sslSocketFactory = (SSLCertificateSocketFactory) SSLCertificateSocketFactory.getDefault(0);

	// For self-signed certificates use a custom trust manager
	sslSocketFactory.setTrustManagers(new TrustManager[]{new IgnoreSSLTrustManager()});

	// create and connect SSL socket, but don't do hostname/certificate verification yet
	SSLSocket ssl = (SSLSocket) sslSocketFactory.createSocket(InetAddress.getByName(host), port);

	// enable TLSv1.1/1.2 if available
	ssl.setEnabledProtocols(ssl.getSupportedProtocols());

	// set up SNI before the handshake
	if (Build.VERSION.SDK_INT >= Build.VERSION_CODES.JELLY_BEAN_MR1) {
		sslSocketFactory.setHostname(ssl, host);
	} else {
		try {
			java.lang.reflect.Method setHostnameMethod = ssl.getClass().getMethod("setHostname", String.class);
			setHostnameMethod.invoke(ssl, host);
		} catch (Exception e) {
			throw new IOException("SNI not usable: " + e, e);
		}
	}

	return ssl;
}
 

import android.net.SSLCertificateSocketFactory; //导入方法依赖的package包/类
@Override
@TargetApi(Build.VERSION_CODES.JELLY_BEAN_MR1)
public Socket createSocket(Socket plainSocket, String host, int port, boolean autoClose) throws IOException {
	if (autoClose) {
		// we don't need the plainSocket
		plainSocket.close();
	}

	SSLCertificateSocketFactory sslSocketFactory =
			(SSLCertificateSocketFactory) SSLCertificateSocketFactory.getDefault(0);

	// For self-signed certificates use a custom trust manager
	if (acceptAllCertificates) {
		sslSocketFactory.setTrustManagers(new TrustManager[]{new IgnoreSSLTrustManager()});
	} else if (selfSignedCertificateKey != null) {
		sslSocketFactory.setTrustManagers(new TrustManager[]{new SelfSignedTrustManager(selfSignedCertificateKey)});
	}

	// create and connect SSL socket, but don't do hostname/certificate verification yet
	SSLSocket ssl = (SSLSocket) sslSocketFactory.createSocket(InetAddress.getByName(host), port);

	// enable TLSv1.1/1.2 if available
	ssl.setEnabledProtocols(ssl.getSupportedProtocols());

	// set up SNI before the handshake
	if (Build.VERSION.SDK_INT >= Build.VERSION_CODES.JELLY_BEAN_MR1) {
		sslSocketFactory.setHostname(ssl, host);
	} else {
		try {
			java.lang.reflect.Method setHostnameMethod = ssl.getClass().getMethod("setHostname", String.class);
			setHostnameMethod.invoke(ssl, host);
		} catch (Exception e) {
			Log.d(TlsSniSocketFactory.class.getSimpleName(), "SNI not usable: " + e);
		}
	}

	// verify hostname and certificate
	SSLSession session = ssl.getSession();
	if (!(acceptAllCertificates || selfSignedCertificateKey != null) && !hostnameVerifier.verify(host, session)) {
		throw new SSLPeerUnverifiedException("Cannot verify hostname: " + host);
	}

	/*DLog.d(TlsSniSocketFactory.class.getSimpleName(),
			"Established " + session.getProtocol() + " connection with " + session.getPeerHost() +
					" using " + session.getCipherSuite());*/

	return ssl;
}
 

import android.net.SSLCertificateSocketFactory; //导入方法依赖的package包/类
@Override
public Socket createSocket (final Socket plainSocket, final String host, final int port, final boolean autoClose) throws IOException, UnknownHostException {
	// we don't need the plainSocket
	if (autoClose) plainSocket.close();

	// create and connect SSL socket, but don't do hostname/certificate verification yet.
	final SSLCertificateSocketFactory sslSocketFactory = (SSLCertificateSocketFactory) SSLCertificateSocketFactory.getDefault(0);
	sslSocketFactory.setTrustManagers(this.trustManager);
	final SSLSocket sock = (SSLSocket) sslSocketFactory.createSocket(InetAddress.getByName(host), port);

	// Protocols...
	final List<String> protocols = new ArrayList<String>();
	for (final String protocol : sock.getSupportedProtocols()) {
		if (!protocol.toUpperCase(Locale.ENGLISH).contains("SSL")) protocols.add(protocol);
	}
	sock.setEnabledProtocols(protocols.toArray(new String[0]));

	// Ciphers...
	final HashSet<String> ciphers = new HashSet<String>(ALLOWED_CIPHERS);
	ciphers.retainAll(Arrays.asList(sock.getSupportedCipherSuites()));
	ciphers.addAll(new HashSet<String>(Arrays.asList(sock.getEnabledCipherSuites()))); // All all already enabled ones for compatibility.
	sock.setEnabledCipherSuites(ciphers.toArray(new String[0]));

	// set up SNI before the handshake.
	if (Build.VERSION.SDK_INT >= Build.VERSION_CODES.JELLY_BEAN_MR1) {
		sslSocketFactory.setHostname(sock, host);
	}
	else { // This hack seems to work on my 4.0.4 tablet.
		try {
			final java.lang.reflect.Method setHostnameMethod = sock.getClass().getMethod("setHostname", String.class);
			setHostnameMethod.invoke(sock, host);
		}
		catch (final Exception e) {
			LOG.w("SNI not useable: %s", ExcpetionHelper.causeTrace(e));
		}
	}

	// verify hostname and certificate.
	final SSLSession session = sock.getSession();
	if (!HOSTNAME_VERIFIER.verify(host, session)) throw new SSLPeerUnverifiedException("Cannot verify hostname: " + host);

	LOG.i("Connected %s %s %s.", session.getPeerHost(), session.getProtocol(), session.getCipherSuite());
	return sock;
}