我试图执行https请求，但当我试图匹配本地和远程ssl证书时，Xcode显示了上述错误。我已经附上了一个错误的图片也代码如下，任何帮助将不胜感激提前。
下面是URLSessionDelegate的完整委托方法。
func urlSession(_ session: URLSession, didReceive challenge: URLAuthenticationChallenge, completionHandler: @escaping (URLSession.AuthChallengeDisposition, URLCredential?) -> Void) {
if challenge.protectionSpace.authenticationMethod == (NSURLAuthenticationMethodServerTrust) {
let serverTrust:SecTrust = challenge.protectionSpace.serverTrust!
let certificate: SecCertificate = SecTrustGetCertificateAtIndex(serverTrust, 0)!
let remoteCertificateData = CFBridgingRetain(SecCertificateCopyData(certificate))!
let cerPath: String = Bundle.main.path(forResource: "xxxxx", ofType: "der")!
let localCertificateData = NSData(contentsOfFile:cerPath)!
print(localCertificateData.length)
let result = remoteCertificateData.isEqual(localCertificateData as Data)
let certDataRef = localCertificateData as! CFData
var cert: SecCertificate = SecCertificateCreateWithData(nil, certDataRef)!
let certArrayRef = CFArrayCreate(nil, cert, 1, nil)
SecTrustSetAnchorCertificates(serverTrust, certArrayRef)
SecTrustSetAnchorCertificatesOnly(serverTrust, false)
print(result)
var trustResult: SecTrustResultType = SecTrustResultType.invalid
SecTrustEvaluate(serverTrust, &trustResult)
if (trustResult == SecTrustResultType.unspecified ||
trustResult == SecTrustResultType.proceed)
{
let credential:URLCredential = URLCredential(trust: serverTrust)
challenge.sender?.use(credential, for: challenge)
completionHandler(URLSession.AuthChallengeDisposition.useCredential, URLCredential(trust: challenge.protectionSpace.serverTrust!))
} else {
completionHandler(URLSession.AuthChallengeDisposition.cancelAuthenticationChallenge, nil)
}
}
else if challenge.protectionSpace.authenticationMethod == NSURLAuthenticationMethodClientCertificate
{
let path: String = Bundle.main.path(forResource: "client", ofType: "p12")!
let PKCS12Data = NSData(contentsOfFile:path)!
let identityAndTrust:IdentityAndTrust = self.extractIdentity(certData: PKCS12Data);
let urlCredential:URLCredential = URLCredential(
identity: identityAndTrust.identityRef,
certificates: identityAndTrust.certArray as? [AnyObject],
persistence: URLCredential.Persistence.forSession);
completionHandler(URLSession.AuthChallengeDisposition.useCredential, urlCredential);
}
else
{
completionHandler(URLSession.AuthChallengeDisposition.cancelAuthenticationChallenge, nil);
}
}
最佳答案
导致错误的行是创建CFArray。
创建CFArray的一个简单方法是使用SwiftArray到CFArray的桥接。
尝试更改行：
let certArrayRef = CFArrayCreate(nil, cert, 1, nil)
致：
let certArrayRef = [cert] as CFArray