有 Java 编程相关的问题?

你可以在下面搜索框中键入要查询的问题!

Java Android。我收到一个HTTPS连接错误

我正在尝试在自签名Tomcat8.5服务器中实现HTTPS连接。我花了两天时间试图找到这个bug(认为它与证书有关)

执行GET操作的代码非常简单:

    DefaultHttpClient client = new DefaultHttpClient();
    HttpGet get = new HttpGet("https://myIpServer:8443");
    HttpResponse response = client.execute(get);

它被添加到一个InstrumentTestCase2测试中,该测试链接到我的MainActivity(它做其他事情,但与HTTP连接无关,因此不会出现问题)

我收到这个错误:

02-13 10:37:36.033  6215  6246 W System  : ClassLoader referenced unknown path: /system/framework/tcmclient.jar
02-13 10:37:36.186   788  3961 I ActivityManager: Killing 6188:com.tumblr/u0a111 (adj 15): empty #17
02-13 10:37:36.266   788  3961 I ActivityManager: Killing 6161:com.安卓.keychain/1000 (adj 15): empty #18
02-13 10:37:36.323   788  3704 D GraphicsStats: Buffer count: 9
02-13 10:37:36.324   788  3704 I WindowState: WIN DEATH: Window{997cc4d u0 gasnatural.appcountermanager/myapp.main.MainActivity}

服务器证书似乎是正确的:

openssl s_client -connect myIpServer:8443      
CONNECTED(00000003)
depth=0 C = XXX, ST = XXX, L = XXX, O = XXX, OU = XXX, CN = XXX
verify error:num=18:self signed certificate
verify return:1
depth=0 C = XXX, ST = XXX, L = XXX, O = XXX, OU = XXX, CN = XXX
verify return:1
---
Certificate chain
 0 s:/C=XXX/ST=XXX/L=XXX/O=XXX/OU=XXX/CN=XXX
   i:/C=XXX/ST=XXX/L=XXX/O=XXX/OU=XXX/CN=XXX
---
---
Server certificate
-----BEGIN CERTIFICATE-----
My certificate hash
-----END CERTIFICATE-----
subject=/C=XXX/ST=XXX/L=XXX/O=XXX/OU=XXX/CN=XXX
issuer=/C=XXX/ST=XXX/L=XXX/O=XXX/OU=XXX/CN=XXX
---
No client certificate CA names sent
---
SSL handshake has read 1499 bytes and written 501 bytes
---
New, TLSv1/SSLv3, Cipher is ECDHE-RSA-AES128-GCM-SHA256
Server public key is 2048 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
SSL-Session:
    Protocol  : TLSv1.2
    Cipher    : ECDHE-RSA-AES128-GCM-SHA256
    Session-ID: a_long_id_number
    Session-ID-ctx: 
    Master-Key: a_long_id_number
    Key-Arg   : None
    PSK identity: None
    PSK identity hint: None
    SRP username: None
    Start Time: 1486978425
    Timeout   : 300 (sec)
    Verify return code: 18 (self signed certificate)
---

我的服务器在8080中可以很好地用于HTTP。此外,我还测试了另一个自签名web,之前粘贴的代码连接没有问题

更新1:

<?xml version="1.0" encoding="utf-8"?>
<manifest xmlns:安卓="http://schemas.安卓.com/apk/res/安卓"
    package="gasnatural.appcountermanager">

    <uses-permission 安卓:name="安卓.permission.BLUETOOTH_ADMIN" />
    <uses-permission 安卓:name="安卓.permission.BLUETOOTH" />
    <uses-permission 安卓:name="安卓.permission.READ_EXTERNAL_STORAGE" />
    <uses-permission 安卓:name="安卓.permission.WRITE_EXTERNAL_STORAGE" />
    <uses-permission 安卓:name="安卓.permission.WAKE_LOCK" />
    <uses-permission 安卓:name="安卓.permission.INTERNET" />

    <application
        安卓:allowBackup="true"
        安卓:icon="@mipmap/ic_launcher"
        安卓:label="@string/app_name"
        安卓:supportsRtl="true"
        安卓:theme="@style/AppTheme">

        <activity 安卓:name=".main.MainActivity">
            <intent-filter>
                <action 安卓:name="安卓.intent.action.MAIN" />

                <category 安卓:name="安卓.intent.category.LAUNCHER" />
            </intent-filter>
        </activity>
        <activity 安卓:name=".listconcentrators.ListConcentratorsActivity" 安卓:screenOrientation="portrait"/>
        <activity 安卓:name=".informationconcentrator.InformationConcentratorActivity" 安卓:screenOrientation="portrait"/>
        <activity 安卓:name=".newconcentrator.NewConcentratorActivity" 安卓:screenOrientation="portrait"/>
        <activity 安卓:name=".listcameras.ListCamerasActivity" 安卓:screenOrientation="portrait"/>
        <activity 安卓:name=".configurecamera.ConfigureCameraActivity" 安卓:screenOrientation="portrait"/>
        <activity 安卓:name=".mock.MockTestActivity" 安卓:screenOrientation="portrait"/>
        <activity  安卓:screenOrientation="landscape" 安卓:configChanges="orientation|keyboardHidden" 安卓:name=".drawrectangle.DrawRectangleActivity" />


        <service 安卓:name="gasnatural.appcountermanager.bluetooth.BTService"
            安卓:enabled="true"
            安卓:exported="false">
        </service>
    </application>

</manifest>

评论:(我知道,自签名是不安全的,但它是我们公司的原型,对于未来可能的生产版本,它将得到很好的配置)


共 (0) 个答案