将多个SSL证书添加到Android KeyStore不起作用。（来自资源文件）

感谢@Dan Getz，现在可以使用了。

1.具有SSL上下文和自签名证书的解决方案：

public static SSLContext getSSLContext() throws Exception {        if (sslContext==null) { // loading CA from an InputStream InputStream is = AVApplication.getContext().getResources().openRawResource(R.raw.certificates); String certificates = Converter.convertStreamToString(is); String certificateArray[] = certificates.split("-----BEGIN CERTIFICATE-----"); // creating a KeyStore containing our trusted CAs KeyStore ks = KeyStore.getInstance("BKS"); ks.load(null, null); for (int i = 1; i < certificateArray.length; i++) {     certificateArray[i] = "-----BEGIN CERTIFICATE-----" + certificateArray[i];     //LogAV.d("cert:" + certificateArray[i]);     // generate input stream for certificate factory     InputStream stream = IOUtils.toInputStream(certificateArray[i]);     // CertificateFactory     CertificateFactory cf = CertificateFactory.getInstance("X.509");     // certificate     Certificate ca;     try {         ca = cf.generateCertificate(stream);     } finally {         is.close();     }     ks.setCertificateEntry("av-ca" + i, ca); } // TrustManagerFactory String algorithm = TrustManagerFactory.getDefaultAlgorithm(); TrustManagerFactory tmf = TrustManagerFactory.getInstance(algorithm); // Create a TrustManager that trusts the CAs in our KeyStore tmf.init(ks); // Create a SSLContext with the certificate that uses tmf (TrustManager) sslContext = SSLContext.getInstance("TLS"); sslContext.init(null, tmf.getTrustManagers(), new SecureRandom());        }        return sslContext;    }

然后使用SSL上下文：

client = okHttpClient.newBuilder()         .sslSocketFactory(getSslContext(context).getSocketFactory())         .build();

2.通过指纹通过OkHttp固定非根证书的解决方案：

固定 非 根CA，我使用的

CertificatePinner

CertificatePinner = new CertificatePinner.Builder() .add(new URL(url).getHost(), "sha256/<certificate1 fingerprint [base64]>") .add(new URL(url).getHost(), "sha256/<certificate2 fingerprint [base64]>") .build();OkHttpClient client;    client = okHttpClient.newBuilder()        .certificatePinner(certificatePinner)        .build();