握手 使用 okHttp 失败，但使用 HttpURL 通信工作

Question

我正在尝试向服务器发送 get 请求(发送 get 请求进行测试，实际上我需要向同一服务器发送 post 请求。如果得到工作，帖子将工作(

链接到服务器是 https://bits-bosm.org/2017/registrations/signup/

问题是当我使用 okHttp 发送请求时，我收到一个失败响应，说握手失败。

这是我用来使用 okHttp 发送请求的代码(在 kotlin 中(

val request = Request.Builder()
.url("https://bits-bosm.org/2017/registrations/signup/")
.build()
okHttpClient.newCall(request).enqueue(object : Callback {
override fun onFailure(call: Call?, e: IOException?) {
val mMessage = e?.message?.toString()
Log.w("failure Response", mMessage)
}
override fun onResponse(call: Call?, response: Response?) {
val mMessage = response?.body()?.string()
Log.e("Message", mMessage)
}
})

但是，如果我使用 HttpUrlConnection 将 get 请求发送到同一服务器，则会得到响应。

这是相同的代码(java(

private static final String USER_AGENT = "Mozilla/5.0";
private static final String GET_URL = "https://bits-bosm.org/2017/registrations/signup/";

static void sendGET() throws IOException {
URL obj = new URL(GET_URL);
HttpURLConnection con = (HttpURLConnection) obj.openConnection();
con.setRequestMethod("GET");
con.setRequestProperty("User-Agent", USER_AGENT);
int responseCode = con.getResponseCode();
System.out.println("GET Response Code :: " + responseCode);
if (responseCode == HttpURLConnection.HTTP_OK) { // success
BufferedReader in = new BufferedReader(new InputStreamReader(
con.getInputStream()));
String inputLine;
StringBuffer response = new StringBuffer();
while ((inputLine = in.readLine()) != null) {
response.append(inputLine);
}
in.close();
// print result
Log.e("Result", response.toString());
} else {
System.out.println("GET request not worked");
}
}

根据我在互联网上搜索的内容以及我可以推断的内容，问题是该站点是使用自证书签名的，okHttp 不允许它们。我什至尝试使用我在互联网上找到的代码片段，这些代码片段不检查证书(自定义SSLSocketFactory(和更多解决方案，但没有一个有效。此外，我现在不关心安全性，我只想让它工作。但是我无法访问后端，也无法更改/删除SSL安全性。

怎样做才能让它发挥作用？我错过了什么吗？

Answer 1

这是不安全的OkHttpClient被广泛用作解决方法。

不要在生产中使用它，它仅用于开发目的。

import java.security.SecureRandom;
import java.security.cert.CertificateException;
import java.security.cert.X509Certificate;
import javax.net.ssl.HostnameVerifier;
import javax.net.ssl.SSLContext;
import javax.net.ssl.SSLSession;
import javax.net.ssl.SSLSocketFactory;
import javax.net.ssl.TrustManager;
import javax.net.ssl.X509TrustManager;
import okhttp3.OkHttpClient;
public class Http {
private final static String SSL = "SSL";
private static OkHttpClient InsecureHttpClient;
public static OkHttpClient client () {
if (InsecureHttpClient == null) {
try {
InsecureHttpClient = insecureOkHttpClient ();
} catch (Exception e) {
e.printStackTrace ();
}
}
return InsecureHttpClient;
}
private static OkHttpClient insecureOkHttpClient () throws Exception {
TrustManager [] trustAllCerts       = new TrustManager [] { trustManager () };
SSLContext sslContext               = SSLContext.getInstance (SSL);
sslContext.init (null, trustAllCerts, new SecureRandom ());
SSLSocketFactory sslSocketFactory   = sslContext.getSocketFactory ();
OkHttpClient.Builder builder        = new OkHttpClient.Builder ();
builder.sslSocketFactory (sslSocketFactory, (X509TrustManager)trustAllCerts [0]);
builder.hostnameVerifier (hostnameVerifier ());
return builder.build ();
}
private static TrustManager trustManager () {
return new X509TrustManager () {
@Override
public void checkClientTrusted (X509Certificate [] chain, String authType) throws CertificateException {  }
@Override
public void checkServerTrusted (X509Certificate[] chain, String authType) throws CertificateException {  }
@Override
public X509Certificate [] getAcceptedIssuers () {
return new X509Certificate [] {  };
}
};
}
private static HostnameVerifier hostnameVerifier () {
return new HostnameVerifier () {
@Override
public boolean verify (String hostname, SSLSession session) {
return true;
}
};
}
}

然后，您显然使用上述客户端，例如以下测试代码：(顺便说一下，它适用于您的URL(

final Request request = new Request.Builder ()
.url ("https://bits-bosm.org/2017/registrations/signup/")
.get ()
.addHeader ("Accept", "text/html")
.build ();
final OkHttpClient httpClient = Http.client ();
new Thread (new Runnable () {
@Override
public void run () {
try {
Response response = httpClient.newCall (request).execute ();
Logger.error (MainActivity.class.getSimpleName () + " --> Http Response", response.body ().string ());
} catch (IOException e) {
e.printStackTrace ();
}
}
}).start ();