Android 日常开发 （39）javax.net.ssl.SSLHandshakeException: java.security.cert.CertPathValidatorException:

运维说服务器证书到期了，更新了证书，结果出现了上述问题。

通过排查项目代码，发现之前没有做证书信赖验证。这里先提供一个能解决问题但是不是最佳做法的方案，方便大家快速处理问题

项目使用了okhttp
通过对okhttp的builder添加证书校验

OkHttpClient.Builder builder
SSLContext sslContext = SSLContextUtil.getDefaultSLLContext();
  if (sslContext != null) {
      SSLSocketFactory socketFactory = sslContext.getSocketFactory();
      builder.sslSocketFactory(socketFactory);
  }
  builder.hostnameVerifier(SSLContextUtil.HOSTNAME_VERIFIER);

SSLContextUtil工具类

package cn.droidlover.xdroidmvp.net;

import java.security.SecureRandom;
import java.security.cert.CertificateException;
import java.security.cert.X509Certificate;

import javax.net.ssl.HostnameVerifier;
import javax.net.ssl.SSLContext;
import javax.net.ssl.SSLSession;
import javax.net.ssl.TrustManager;
import javax.net.ssl.X509TrustManager;


public class SSLContextUtil {

  
  public static SSLContext getDefaultSLLContext() {
    SSLContext sslContext = null;
    try {
      sslContext = SSLContext.getInstance("TLS");
      sslContext.init(null, new TrustManager[] {trustManagers}, new SecureRandom());
    } catch (Exception e) {
      e.printStackTrace();
    }
    return sslContext;
  }

  
  private static TrustManager trustManagers = new X509TrustManager() {

    @Override
    public void checkClientTrusted(X509Certificate[] chain, String authType)
        throws CertificateException {}

    @Override
    public void checkServerTrusted(X509Certificate[] chain, String authType)
        throws CertificateException {

    }

    @Override
    public X509Certificate[] getAcceptedIssuers() {
      return new X509Certificate[0];
    }
  };

  
  public static final HostnameVerifier HOSTNAME_VERIFIER = new HostnameVerifier() {
    public boolean verify(String hostname, SSLSession session) {
      return true;
    }
  };

}

上面的方法虽然能快速帮你解决因为证书问题无法请求服务器接口，但是还是不够的，后面的文章，将会给大家正确的姿势讲解