这是一些相关的代码:
// Create a trust manager that does not validate certificate chainsTrustManager[] trustAllCerts = new TrustManager[]{ new X509TrustManager() { public java.security.cert.X509Certificate[] getAcceptedIssuers() { return null; } public void checkClientTrusted( java.security.cert.X509Certificate[] certs, String authType) { } public void checkServerTrusted( java.security.cert.X509Certificate[] certs, String authType) { } }};// Install the all-trusting trust managertry { SSLContext sc = SSLContext.getInstance("SSL"); sc.init(null, trustAllCerts, new java.security.SecureRandom()); HttpsURLConnection.setDefaultSSLSocketFactory(sc.getSocketFactory());} catch (Exception e) {}// Now you can access an https URL without having the certificate in the truststoretry { URL url = new URL("https://hostname/index.html");} catch (MalformedURLException e) {}这将完全禁用SSL检查-只是不要从此类代码中学习异常处理!
要执行你想要的操作,你必须在TrustManager中实施提示用户的检查。



