我为一家公司设计了一个应用程序,它支持API级别13+(3.0+)。它通过XML从其CMS收集数据,并将其显示在应用程序上。这是通过HTTPS进行的,该方法运行良好,直到将服务器升级到TLS 1.2。现在,由于SSLPeerUnverifiedException
,低于API级别20的android版本将无法获取XML,并且很多手机都无法再看到此应用程序。
有没有办法在启用TLS 1.2的情况下通过SSLPeerUnverified
?
注意:当前的SSL证书如下:
AddTrust External CA Root
--> COMODO High-Assurance Secure Server CA
--> *.appdomain.com
迄今为止最有用的SOF文章:
Implementing TLS 1.2 on Android 2.3.3
最佳答案
团队中的其他人回答了这个问题,但结果包括以下内容:SSLContext helper=null;
helper.init(null,null,null);
SSLContext.getInstance("TLSv1.2");
SSLEngine engine = helper.createSSLEngine();
这是他用来检查ssl并将所有内容放入其中的函数:
public void sslCheck() {
int PLAY_SERVICES_RESOLUTION_REQUEST=9000;
int resultCode = GooglePlayServicesUtil.isGooglePlayServicesAvailable(this);
//Log.i("log_tag2", String.valueOf(resultCode));
if (resultCode != ConnectionResult.SUCCESS) {
if (GooglePlayServicesUtil.isUserRecoverableError(resultCode)) {
Log.i("log_tag2","Not good!");
if (MyAppActivity.instance != null) {
Log.i("log_tag2","but can fix");
GooglePlayServicesUtil.getErrorDialog(
resultCode,
MyAppActivity.instance,
PLAY_SERVICES_RESOLUTION_REQUEST).show();
}
}
}
else {
Log.i("log_tag2","Already good!");
try {
ProviderInstaller.installIfNeeded(this);
Log.i("log_tag", "1");
} catch (GooglePlayServicesRepairableException e) {
e.printStackTrace();
} catch (GooglePlayServicesNotAvailableException e) {
e.printStackTrace();
}
SSLContext helper=null;
try {
helper = SSLContext.getInstance("TLSv1.2");
Log.i("log_tag","2");
} catch (NoSuchAlgorithmException e) {
e.printStackTrace();
}
try {
helper.init(null,null,null);
Log.i("log_tag", "3");
} catch (KeyManagementException e) {
e.printStackTrace();
}
SSLEngine engine = helper.createSSLEngine();
}
}