故障描述
在用戶端出現如下日誌。
com.android.org.bouncycastle.jce.exception.ExtCertPathValidatorException:
Could not validate certificate: Certificate expired at Sat No
v 06 20:00:00 GMT+08:00 2021 (compared to Wed Jan 12 10:12:30 GMT+08:00 2022)\"",問題原因
此故障為 Android 5.x 手機系統問題，解決辦法是信任所有認證。
解決方案
在用戶端設定 TinyAppRequestPluginProvider。
// H5Utils.setProvider(TinyAppRequestPluginProvider.class.getName() ,
new TinyAppRequestPluginProviderImp() );
public class TinyAppRequestPluginProviderImpl implements TinyAppRequestPluginProvider {
private static final String TAG = "TinyAppRequestPluginProviderImpl";
SSLSocketFactoryImp sf;
public void onAndroidHttpClientCreate(AndroidHttpClient androidHttpClient) {
setCA(androidHttpClient);
}
private void setCA(AndroidHttpClient client) {
//5.x以下手機信任認證設定
if (Build.VERSION.SDK_INT < 23) {
KeyStore trustStore;
try {
trustStore = KeyStore.getInstance(KeyStore.getDefaultType());
trustStore.load(null ,null);
//建立SSLSocketFactory，建立相關的Socket
sf = new SSLSocketFactoryImp(trustStore);
sf.setHostnameVerifier(SSLSocketFactory.ALLOW_ALL_HOSTNAME_VERIFIER);
client.getConnectionManager().getSchemeRegistry()
.register(new Scheme("https" ,sf ,443));
}catch (Exception e){
}
}
}
}
/*基準版本21--*/
public class SSLSocketFactoryImp extends SSLSocketFactory {
final SSLContext sslContext = SSLContext.getInstance("TLS");
public SSLSocketFactoryImp(KeyStore truststore)
throws NoSuchAlgorithmException, KeyManagementException,
KeyStoreException, UnrecoverableKeyException {
super(truststore);
TrustManager tm = new X509TrustManager() {
public java.security.cert.X509Certificate[] getAcceptedIssuers() {
return null;
}
@Override
public void checkClientTrusted(
java.security.cert.X509Certificate[] chain,
String authType)
throws java.security.cert.CertificateException {
}
@Override
public void checkServerTrusted(
java.security.cert.X509Certificate[] chain,
String authType)
throws java.security.cert.CertificateException {
}
};
sslContext.init(null, new TrustManager[] { tm }, null);
}
@Override
public Socket createSocket(Socket socket, String host, int port,
boolean autoClose) throws IOException, UnknownHostException {
return sslContext.getSocketFactory().createSocket(socket, host,
port, autoClose);
}
@Override
public Socket createSocket() throws IOException {
return sslContext.getSocketFactory().createSocket();
}
}