javax.net.ssl.SSLException: hostname in certificate didn't match:

標籤：exceptio   ssl   網路請求   android   https   

 每個協議有自己的一套SSL東西，Android 連結https經常會拋出如下錯誤

 javax.net.ssl.SSLException: hostname in certificate didn't match: <test.rigbee.cn> != <rigbee.cn> OR <rigbee.cn> OR <www.rigbee.cn> at org.apache.http.conn.ssl.AbstractVerifier.verify(AbstractVerifier.java:185) at org.apache.http.conn.ssl.BrowserCompatHostnameVerifier.verify(BrowserCompatHostnameVerifier.java:54) at org.apache.http.conn.ssl.AbstractVerifier.verify(AbstractVerifier.java:114) at org.apache.http.conn.ssl.AbstractVerifier.verify(AbstractVerifier.java:95) at org.apache.http.conn.ssl.SSLSocketFactory.createSocket(SSLSocketFactory.java:381) at org.apache.http.impl.conn.DefaultClientConnectionOperator.openConnection(DefaultClientConnectionOperator.java:165) at org.apache.http.impl.conn.AbstractPoolEntry.open(AbstractPoolEntry.java:164) at org.apache.http.impl.conn.AbstractPooledConnAdapter.open(AbstractPooledConnAdapter.java:119) at org.apache.http.impl.client.DefaultRequestDirector.execute(DefaultRequestDirector.java:360) at org.apache.http.impl.client.AbstractHttpClient.execute(AbstractHttpClient.java:555) at org.apache.http.impl.client.AbstractHttpClient.execute(AbstractHttpClient.java:487) at org.apache.http.impl.client.AbstractHttpClient.execute(AbstractHttpClient.java:465)

如果使用org.apache.http，修改主機名稱驗證解決問題

import org.apache.http.conn.ssl.AllowAllHostnameVerifier;  import org.apache.http.conn.ssl.SSLSocketFactory;  

SSLSocketFactory.getSocketFactory().setHostnameVerifier(new AllowAllHostnameVerifier()); 

如果使用原生URLConnect的話添加如下設定

try {             SSLContext sc = SSLContext.getInstance("TLS");      sc.init(null, new TrustManager[] { new X509TrustManager() {          @Override          public void checkClientTrusted(X509Certificate[] chain, String authType) throws CertificateException {          }              @Override          public void checkServerTrusted(X509Certificate[] chain, String authType)              throws CertificateException {          }              @Override          public X509Certificate[] getAcceptedIssuers() {              return null;          }      } }, new SecureRandom());      HttpsURLConnection.setDefaultSSLSocketFactory(sc.getSocketFactory());      HttpsURLConnection.setDefaultHostnameVerifier(new HostnameVerifier() {          @Override          public boolean verify(String arg0, SSLSession arg1) {              return true;          }      });  } catch (Exception e) {      e.printStackTrace();  }  

著作權聲明：本文為博主原創文章，未經博主允許不得轉載。

javax.net.ssl.SSLException: hostname in certificate didn't match: