javax.net.ssl.ssl握手异常:由com.android.org/conscrypt.NativeCrypt

Question

在api级别24之前，我的代码运行良好，但在api级别(7.0 Nougat)上出现错误。我不知道我的代码出了什么问题

第一种方法在这里：

<?xml version="1.0" encoding="utf-8"?> <network-security-config>
<base-config> <trust-anchors> <certificates src="system"/>
<certificates src="user"/> </trust-anchors> </base-config>
<domain-config> <domain includeSubdomains="true">xyz.com</domain>
<trust-anchors> <certificates src="@raw/my_ca"/> </trust-anchors>
</domain-config> </network-security-config>

内部清单文件：

android:network Security Config = "@xml/network_security_config"我在res/xml/network_security_config中包含了network_security_config，在res/raw/my_ca.pem中包含ca证书

第二种方法在这里：

import org.apache.http.client.HttpClient; 
import org.apache.http.conn.ClientConnectionManager;  
import org.apache.http.conn.scheme.Scheme; 
import org.apache.http.conn.scheme.SchemeRegistry; 
import org.apache.http.conn.ssl.SSLSocketFactory; 
import org.apache.http.impl.client.DefaultHttpClient; 
import java.io.IOException; import java.net.Socket; 
import java.net.UnknownHostException; 
import java.security.KeyManagementException; 
import java.security.KeyStore;
import java.security.KeyStoreException; 
import java.security.NoSuchAlgorithmException; 
import java.security.UnrecoverableKeyException; 
import java.security.cert.CertificateException; 
import java.security.cert.X509Certificate; import javax.net.ssl.SSLContext;
import javax.net.ssl.TrustManager; 
import javax.net.ssl.X509TrustManager; 
public class ExSSLSocketFactory extends SSLSocketFactory { 
SSLContext sslContext = SSLContext.getInstance("TLS"); 
public ExSSLSocketFactory(KeyStore truststore) throws 
NoSuchAlgorithmException, KeyManagementException,KeyStoreException,
UnrecoverableKeyException {
super(truststore);
TrustManager x509TrustManager = new X509TrustManager() { 
public void checkClientTrusted(X509Certificate[] chain, String authType)  
throws CertificateException {
} public void checkServerTrusted(X509Certificate[] chain, String authType)    
throws CertificateException {
} public X509Certificate[] getAcceptedIssuers()
{ 
return null; 
} 
}; 
sslContext.init(null, new TrustManager[] {
x509TrustManager }, null);
} public ExSSLSocketFactory(SSLContext
context) throws KeyManagementException, NoSuchAlgorithmException,
KeyStoreException, UnrecoverableKeyException {
super(null); 
sslContext = context; 
} @Override public Socket createSocket(Socket socket, String host, int port, boolean autoClose) throws IOException,
UnknownHostException {
return sslContext.getSocketFactory().createSocket(socket, host, port,
autoClose); 
} @Override public Socket createSocket() throws
IOException {
return sslContext.getSocketFactory().createSocket(); 
}
public static HttpClient getHttpsClient(HttpClient client) { 
try{
X509TrustManager x509TrustManager = new X509TrustManager() 
{ 
@Override
public void checkClientTrusted(X509Certificate[] chain, String
authType) throws CertificateException { }
@Override public void
checkServerTrusted(X509Certificate[] chain, String authType) throws
CertificateException {
}
@Override public X509Certificate[]
getAcceptedIssuers() { 
return null; 
}
}; 
SSLContext sslContext = SSLContext.getInstance("TLS"); sslContext.init(null, new
TrustManager[]{x509TrustManager}, null); SSLSocketFactory
sslSocketFactory = new ExSSLSocketFactory(sslContext);
sslSocketFactory.setHostnameVerifier(SSLSocketFactory.ALLOW_ALL_HOSTNAME_VERIFIER);
ClientConnectionManager clientConnectionManager =
client.getConnectionManager(); SchemeRegistry schemeRegistry =
clientConnectionManager.getSchemeRegistry();
schemeRegistry.register(new Scheme("https", sslSocketFactory, 443));
return new DefaultHttpClient(clientConnectionManager,
client.getParams()); 
} catch (Exception ex) 
{ return null; 
} } }

进行http连接时：

public String CallWebService(String url, String soapAction, String envelope){

final HttpClient httpClient = ExSSLSocketFactory.getHttpsClient(new DefaultHttpClient());
HttpParams params = httpClient.getParams();
HttpConnectionParams.setConnectionTimeout(params, 150000);
HttpConnectionParams.setSoTimeout(params, 150000);
HttpProtocolParams.setUseExpectContinue(httpClient.getParams(), true);
HttpPost httppost = new HttpPost(url);
httppost.setHeader("soapaction", soapAction);
httppost.setHeader("Content-Type", "text/xml; charset=utf-8");
String responseString = "";
try
{
HttpEntity entity = new StringEntity(envelope);
httppost.setEntity(entity);
ResponseHandler<String> rh = new ResponseHandler<String>()
{
public String handleResponse(HttpResponse response) throws ClientProtocolException, IOException
{
HttpEntity entity = response.getEntity();
StringBuffer out = new StringBuffer();
byte[] b = EntityUtils.toByteArray(entity);
out.append(new String(b, 0, b.length));
return out.toString();
}
};
responseString = httpClient.execute(httppost, rh);
Log.d("Response is here....", "responseString :  " + responseString);
}
catch (Exception e)
{
e.printStackTrace();
}
// close the connection
httpClient.getConnectionManager().shutdown();
return responseString;
}

我仍然得到错误：

javax.net.ssl.ssl握手异常：对等方关闭连接01-2410:28:03.182 32251-474/com.neosoft.meconnect W/系统错误：在com.android.org/conscrypt.NativeCrypto.SSL_do_handshake(本地方法)01-24 10:28:03.182 32251-474/com.neosoft.meconnect W/系统错误：
com.android.org/conscrypt.OpenSSLSocketImpl.startHandshake(OpenSSLSocket Impl.java:357)01-24 10:28:03.182 32251-474/com.neosoft.meconnect W/System.err:
在com.android.okhttp.Connection.connectTls(Connection.java:235)01-2410:28:03.182 32251-474/com.neosoft.meconnect W/系统错误：在com.android.okhttp.Connection.connectSocket(Connection.java：199)01-2410:28:03.182 32251-474/com.neosoft.meconnect W/系统错误：在com.android.okhttp.Connection.connect(Connection.java:172)01-2410:28:03.182 32251-474/com.neosoft.meconnect W/系统错误：在com.android.okhttp.Connection.connectAndSetOwner(Connection.java:367)01-24 10:28:03.182 32251-474/com.neosoft.meconnect W/系统错误：
com.android.okhttp.OkHttpClient$1.connectAndSetOwner(OkHttpClient.java:130)01-24 10:28:03.182 32251-474/com.neosoft.meconnect W/系统错误：
com.android.okhttp.internal.HttpEngine.connect(HttpEngine.java:329)01-24 10:28:03.182 32251-474/com.neosoft.meconnect W/系统错误：
com.android.okhttp.internal.HttpEngine.sendRequest(HttpEngine.java:246)01-24 10:28:03.183 32251-474/com.neosoft.meconnect W/系统错误：
com.android.okhttp://internal.huc.HttpURLConnection Impl.execute(HttpURLConnection impl.java:457)01-24 10:28:03.183 32251-474/com.neosoft.meconnect W/系统错误：
com.android.okhttp://internal.huc.HttpURLConnection Impl.connect(HttpURLConnection impl.java:126)01-24 10:28:03.183 32251-474/com.neosoft.meconnect W/系统错误：
com.android.okhttp.internal.huc.DelegatingHttpsURLConnection.connect(DelegatingHttpsURLConnection.java:89)01-24 10:28:03.184 32251-474/com.neosoft.meconnect W/系统错误：
com.android.okhttp.internal.huc.HttpsURLConnection Impl.connect(HttpsURLConnection impl.java)01-24 10:28:03.184 32251-474/com.neosoft.meconnect W/系统错误：
org.ksoap2.transport.ServiceConnectionSE.connect(ServiceConnectionSE.java:46)01-24 10:28:03.184 32251-474/com.neosoft.meconnect W/系统错误：
在org.ksoap2.transport.HttpTransportSE.call(HttpTransportSE.java:68)01-24 10:28:03.184 32251-474/com.neosoft.meconnect W/系统错误：
在srd.gshelp.GSOAPConWSDL.javaHit(GSSoapConWSDL.java:180)01-2410:28:03.184 32251-474/com.neosoft.meconnect W/系统错误：在srd.gshelp.GSoapConWSDL.access$0(GSSoapConWSDL.java:144)01-2410:28:03.185 32251-474/com.neosoft.meconnect W/系统错误：在srd.gshelp.GSoapConWSDL$TaskAsync.doInBackground(GSSoapConWSDL.java:215)01-24 10:28:03.185 32251-474/com.neosoft.meconnect W/系统错误：
srd.gshelp.GSoapConWSDL$TaskAsync.doInBackground(GSSoapConWSDL.java:1)01-24 10:28:03.185 32251-474/com.neosoft.meconnect W/System.err:
在android.os.AsyncTask$2.call(AsyncTask.java:304)01-24 10:28：03.18532251-474/com.neosoft.meconnect W/系统错误：位于java.util.concurrent.FFutureTask.run(FutureTask.java:237)01-2410:28:03.186 32251-474/com.neosoft.meconnect W/系统错误：在java.util.concurrent.ThreadPoolExecutiator.runWorker(ThreadPoolExecutiator.java:1133)01-24 10:28:03.186 32251-474/com.neosoft.meconnect W/系统错误：
java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:607)01-24 10:28:03.186 32251-474/com.neosoft.meconnect W/System.err:
在java.lang.Thread.run(Thread.java:761)01-24 10:28：03.18732251-474/com.neosoft.meconnect W/系统错误：已抑制：javax.net.ssl.ssl握手异常：连接被对等关闭

请提供帮助。提前感谢。

Answer 1

请确保已从服务器端设置启用了TLS。

Answer 2

我遇到了同样的问题，在API调用时抛出了相同的javax.net.ssl.SSLHandshakeException。

但就我而言，的问题如下

我的device是connected到wifi，但wifi路由器是具有internet连接的not，然后exception被抛出

Answer 3

您使用过Okhttp库吗？这是一个非常好的网络呼叫库。你也可以处理这个异常。

我也遇到过类似的问题，我已经解决了这个问题：

public static OkHttpClient getHttpClientForFile() {
ConnectionSpec spec = new ConnectionSpec.Builder(ConnectionSpec.MODERN_TLS)
.tlsVersions(TlsVersion.TLS_1_0)
.cipherSuites(
CipherSuite.TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,
CipherSuite.TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,
CipherSuite.TLS_DHE_RSA_WITH_AES_128_GCM_SHA256,
CipherSuite.TLS_DHE_RSA_WITH_AES_128_CBC_SHA,
CipherSuite.TLS_RSA_WITH_AES_128_CBC_SHA,
CipherSuite.TLS_RSA_WITH_3DES_EDE_CBC_SHA)
.build();
return new OkHttpClient.Builder()
.connectTimeout(2, TimeUnit.MINUTES)
.writeTimeout(2, TimeUnit.MINUTES)
.readTimeout(3, TimeUnit.MINUTES)
.connectionSpecs(Collections.singletonList(spec))
.protocols(Arrays.asList(Protocol.HTTP_1_1))
.build();
}

我不知道它是否好，但它对我有效。

在play store上发布应用程序后，您使用的SSLSocketFactory类可能会产生错误，或者play store可能会警告您更改代码。

您可以从中找到Okhttp库https://github.com/square/okhttp.