自己制作證書

很明顯沒有綠鎖, 當打開的時候會詢問是否連接這個不受信任的連接才會進一步打開, 下面就來一步步的實現(xiàn)(包括怎么制作證書)

iOS使用自簽名證書實現(xiàn)HTTPS請求

iOS Https協(xié)議 自簽證書訪問數(shù)據(jù)

參考這個例子的時候,博主自帶的Demo AFN框架請求不了數(shù)據(jù), 我用了最新AFN版本的成功返回數(shù)據(jù)

還可以參考一下

iOS 10 適配 ATS app支持https通過App Store審核

我在利用原生的代碼測試時遇到的問題

@interface ViewController ()

@end

@implementation ViewController

- (void)viewDidLoad {

}

- (void)touchesBegan:(NSSet *)touches withEvent:(UIEvent *)event

{

NSURLSession *session = [NSURLSession sessionWithConfiguration:[NSURLSessionConfiguration defaultSessionConfiguration] delegate:self delegateQueue:[NSOperationQueue mainQueue]];

NSURLSessionDataTask *task =? [session dataTaskWithURL:[NSURL URLWithString:@"https://www.baidu.com"] completionHandler:^(NSData *data, NSURLResponse *response, NSError *error) {

NSLog(@"%@", [[NSString alloc] initWithData:data encoding:NSUTF8StringEncoding]);

}];

[task resume];

}

- (void)URLSession:(NSURLSession *)session dataTask:(NSURLSessionDataTask *)dataTask

didReceiveResponse:(NSURLResponse *)response

completionHandler:(void (^)(NSURLSessionResponseDisposition disposition))completionHandler {

NSLog(@"接收到服務(wù)器響應(yīng)");

//注意：這里需要使用completionHandler回調(diào)告訴系統(tǒng)應(yīng)該如何處理服務(wù)器返回的數(shù)據(jù)

//默認是取消

/**

NSURLSessionResponseCancel = 0,? ? ? ? ? ? 默認的處理方式，取消

NSURLSessionResponseAllow = 1,? ? ? ? ? ?接收服務(wù)器返回的數(shù)據(jù)

NSURLSessionResponseBecomeDownload = 2,? ? 變成一個下載請求

NSURLSessionResponseBecomeStream? ? ? ? ?變成一個流

*/

completionHandler(NSURLSessionResponseAllow);

}

- (void)URLSession:(NSURLSession *)session dataTask:(NSURLSessionDataTask *)dataTask

didReceiveData:(NSData *)data {

NSLog(@"獲取到服務(wù)段數(shù)據(jù)");

NSLog(@"%@",[self jsonToDictionary:data]);

}

- (void)URLSession:(NSURLSession *)session task:(NSURLSessionTask *)task

didCompleteWithError:(nullable NSError *)error {

NSLog(@"請求完成%@", error);

}

- (void)URLSession:(NSURLSession *)session didReceiveChallenge:(NSURLAuthenticationChallenge *)challenge

completionHandler:(void (^)(NSURLSessionAuthChallengeDisposition disposition, NSURLCredential * _Nullable credential))completionHandler {

NSLog(@"證書認證");

if ([[[challenge protectionSpace] authenticationMethod] isEqualToString: NSURLAuthenticationMethodServerTrust]) {

do

{

SecTrustRef serverTrust = [[challenge protectionSpace] serverTrust];

NSCAssert(serverTrust != nil, @"serverTrust is nil");

if(nil == serverTrust)

break; /* failed */

/**

*? 導(dǎo)入多張CA證書（Certification Authority，支持SSL證書以及自簽名的CA），請?zhí)鎿Q掉你的證書名稱

*/

NSString *cerPath = [[NSBundle mainBundle] pathForResource:@"ca" ofType:@"cer"];//自簽名證書

NSData* caCert = [NSData dataWithContentsOfFile:cerPath];

NSCAssert(caCert != nil, @"caCert is nil");

if(nil == caCert)

break; /* failed */

SecCertificateRef caRef = SecCertificateCreateWithData(NULL, (__bridge CFDataRef)caCert);

NSCAssert(caRef != nil, @"caRef is nil");

if(nil == caRef)

break; /* failed */

//可以添加多張證書

NSArray *caArray = @[(__bridge id)(caRef)];

NSCAssert(caArray != nil, @"caArray is nil");

if(nil == caArray)

break; /* failed */

//將讀取的證書設(shè)置為服務(wù)端幀數(shù)的根證書

OSStatus status = SecTrustSetAnchorCertificates(serverTrust, (__bridge CFArrayRef)caArray);

NSCAssert(errSecSuccess == status, @"SecTrustSetAnchorCertificates failed");

if(!(errSecSuccess == status))

break; /* failed */

SecTrustResultType result = -1;

//通過本地導(dǎo)入的證書來驗證服務(wù)器的證書是否可信

status = SecTrustEvaluate(serverTrust, &result);

if(!(errSecSuccess == status))

break; /* failed */

NSLog(@"stutas:%d",(int)status);

NSLog(@"Result: %d", result);

BOOL allowConnect = (result == kSecTrustResultUnspecified) || (result == kSecTrustResultProceed);

if (allowConnect) {

NSLog(@"success");

}else {

NSLog(@"error");

}

/* kSecTrustResultUnspecified and kSecTrustResultProceed are success */

if(! allowConnect)

{

break; /* failed */

}

#if 0

/* Treat kSecTrustResultConfirm and kSecTrustResultRecoverableTrustFailure as success */

/*?since the user will likely tap-through to see the dancing bunnies */

if(result == kSecTrustResultDeny || result == kSecTrustResultFatalTrustFailure || result == kSecTrustResultOtherError)

break; /* failed to trust cert (good in this case) */

#endif

// The only good exit point

NSLog(@"信任該證書");

NSURLCredential *credential = [NSURLCredential credentialForTrust:challenge.protectionSpace.serverTrust];

completionHandler(NSURLSessionAuthChallengeUseCredential,credential);

return [[challenge sender] useCredential: credential

forAuthenticationChallenge: challenge];

}

while(0);

}

// Bad dog

NSURLCredential *credential = [NSURLCredential credentialForTrust:challenge.protectionSpace.serverTrust];

completionHandler(NSURLSessionAuthChallengeCancelAuthenticationChallenge,credential);

return [[challenge sender] cancelAuthenticationChallenge: challenge];

}

- (NSDictionary *)jsonToDictionary:(NSData *)jsonData {

NSError *jsonError;

NSDictionary *resultDic = [NSJSONSerialization JSONObjectWithData:jsonData options:NSJSONReadingMutableLeaves error:&jsonError];

return resultDic;

}

@end

下面說說我在配置自己制作證書過程中遇到的問題:

1.轉(zhuǎn)換證書: 把后臺給你的.crt證書轉(zhuǎn)化為.cer后綴

終端命令行openssl x509 -in 你的證書.crt -out 你的證書.cer -outform der

2.利用系統(tǒng)的方法來不到- (void)URLSession:(NSURLSession *)session didReceiveChallenge:(NSURLAuthenticationChallenge *)challenge completionHandler:(void (^)(NSURLSessionAuthChallengeDisposition disposition, NSURLCredential * _Nullable credential))completionHandler { NSLog(@"證書認證"); }這個方法的時候, 是因為后臺的傳輸協(xié)議還沒升級到TLS1.2, 叫后臺升級后就可以來到驗證證書的這個方法了.

3.拖入證書讀取不出證書數(shù)據(jù)

參考: https的證書錯誤，錯誤碼-1012問題及解決方案

SDWebImage: 項目中大家用到AFN請求網(wǎng)絡(luò)數(shù)據(jù), 升級驗證SSL證書的方案相信你看完上面的參考文章已經(jīng)沒問題了, 我給出的代碼, 自定義網(wǎng)絡(luò)請求也沒問題了, 還有就是SDWebImage框架的請求HTTPS的圖片時,大家可以繞過證書驗證去加載圖片[imageView sd_setImageWithURL:[NSURL URLWithString:urlString] placeholderImage:self.placeholder options:SDWebImageAllowInvalidSSLCertificates];

恩, 這就是這幾天升級HTTPS覺得有幫助的參考和總結(jié).希望幫到你

本頁內(nèi)容由塔燈網(wǎng)絡(luò)科技有限公司通過網(wǎng)絡(luò)收集編輯所得，所有資料僅供用戶學習參考，本站不擁有所有權(quán)，如您認為本網(wǎng)頁中由涉嫌抄襲的內(nèi)容，請及時與我們聯(lián)系，并提供相關(guān)證據(jù)，工作人員會在5工作日內(nèi)聯(lián)系您，一經(jīng)查實，本站立刻刪除侵權(quán)內(nèi)容。本文鏈接:http://jstctz.cn/20487.html