blocks|key|65694|text|忽视这一警告是不安全的。有人可能试图使用假证书进行中间人攻击，以便通过更新过程在您的计算机上安装恶意软件。这可能没有发生，但在涉及到安全性时，正确处理总是更好。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|65695|相反，您应该将信任的根证书添加到Android+Studio密钥库。密钥库的位置和默认密码应该列在该警告的底部。例如，我的网站是~/Library/Caches/AndroidStudio/tasks/cacerts。接下来，您需要在服务器提供的链中查找根证书。不幸的是，警告没有列出整个链，所以需要一些工作才能找到它。Google+Internet+Authority+G2证书与用于签署谷歌网站证书的证书相同。你可以通过转到google.com，点击绿色锁，然后在连接选项卡中的“证书信息”来查看Chrome中的链。此时，您可以验证警告中的散列是否与实际G2证书的散列匹配。您还将看到根证书名为Equifax+Secure+Certificate+Authority。你可以从https://www.geotrust.com/resources/root-certificates/下载。接下来，您需要将其添加到密钥库：|offset|length|style|CODE|65696|keytool+-import+-alias+equifaxca+\
-file+Equifax_Secure_Certificate_Authority.pem+-keystore+cacerts|code-block|syntax|javascript|65697|最后，重启Android+Studio。该警告在2018年8月22日之前不会再次出现，除非有人真的出示了假证书。|65698|entityMap|0|LINK|mutability|MUTABLE|url|https://www.geotrust.com/resources/root-certificates/^0|0|1S|18|4G|S|8B|10|9G|1H|0|0|0|0^^$0|@$1|2|3|4|5|6|7|W|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|X|8|@$D|Y|E|Z|F|G]|$D|10|E|11|F|G]|$D|12|E|13|F|G]]|9|@$D|14|E|15|1|16]]|A|$]]|$1|H|3|I|5|J|7|17|8|@]|9|@]|A|$K|L]]|$1|M|3|N|5|6|7|18|8|@]|9|@]|A|$]]|$1|O|3|-4|5|6|7|19|8|@]|9|@]|A|$]]]|P|$Q|$5|R|S|T|A|$U|V]]]]

It is not safe to ignore that warning. Someone could be attempting a man-in-the-middle attack with a fake certificate in order to install malicious software on your computer through the update process. This probably isn't happening but it's always better to do things correctly when it comes to security.

You should instead add root certificates you trust to the Android Studio keystore. The location and default password of the keystore should be listed at the bottom of that warning. For example, mine is at <code>~/Library/Caches/AndroidStudio/tasks/cacerts</code>. Next you'll want to find the root certificate in the chain the server is presenting. Unfortunately the warning doesn't list the whole chain so it takes a little work to find it. The <code>Google Internet Authority G2</code> certificate is the same one that is used to sign the certificates for google's sites. You can view the chain in Chrome by going to google.com, clicking on the green lock, then "Certificate Information" in the connection tab. At this point you can verify that the hashes in the warning match the hashes for the real G2 certificate. You'll also see that the root certificate is named <code>Equifax Secure Certificate Authority</code>. You can download it from <a href="https://www.geotrust.com/resources/root-certificates/" rel="noreferrer">https://www.geotrust.com/resources/root-certificates/</a>. Next you'll need to add it to the keystore:

<pre><code>keytool -import -alias equifaxca \
-file Equifax_Secure_Certificate_Authority.pem -keystore cacerts
</code></pre>

Finally, restart Android Studio. That warning should not appear again until August 22, 2018 unless someone is actually presenting a fake certificate.

blocks|key|65708|text|对于Mac操作系统，它位于菜单Android+Studio->首选项->工具->服务器证书中。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|65709|在右侧窗口的顶部，选中“自动接受非信任证书”复选框。点击apply和ok。|65710|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|F|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|G|8|@]|9|@]|A|$]]|$1|D|3|-4|5|6|7|H|8|@]|9|@]|A|$]]]|E|$]]

For Mac Operating System it is in the menu Android Studio->Preferences->Tools->Server Certificates. 

In the top of the right side window select the checkbox Accept non-trusted certificates automatically. Hit apply and ok.

blocks|key|4572101|text|从AndroidStudio+1.5.1开始，您可以转到Preferences+->+Tools+->服务器证书，然后单击%2B按钮手动添加应信任的证书。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|4572102|entityMap^0|0^^$0|@$1|2|3|4|5|6|7|D|8|@]|9|@]|A|$]]|$1|B|3|-4|5|6|7|E|8|@]|9|@]|A|$]]]|C|$]]

As of AndroidStudio 1.5.1 You can go to Preferences -> Tools -> Server Certificates and click the + button to manually add certificates that should be trusted.

blocks|key|65763|text|缺少特定于Java的系统证书。如果您使用的是Ubuntu和Oracle+JRE/JDK，请安装ca-certificates+java软件包。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|65764|entityMap^0|0^^$0|@$1|2|3|4|5|6|7|D|8|@]|9|@]|A|$]]|$1|B|3|-4|5|6|7|E|8|@]|9|@]|A|$]]]|C|$]]

It is missing system certificate specific for Java. If you are using Ubuntu and Oracle JRE/JDK, install ca-certificates-java package.

blocks|key|4572151|text|我关注了SELF_SIGNED_CERT_IN_CHAIN错误很多。在node.js中解决npm解决了证书问题。|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|4572152|npm+config+set+cafile+/path/to/cert.pem|code-block|syntax|javascript|4572153|请参阅下面的https://mmx5002.blogspot.com/2020/02/selfsignedcertinchain.html|4572154|entityMap|0|LINK|mutability|MUTABLE|url|https://mmx5002.blogspot.com/2020/02/selfsignedcertinchain.html^0|4|P|0|0|6|1R|0|0^^$0|@$1|2|3|4|5|6|7|U|8|@$9|V|A|W|B|C]]|D|@]|E|$]]|$1|F|3|G|5|H|7|X|8|@]|D|@]|E|$I|J]]|$1|K|3|L|5|6|7|Y|8|@]|D|@$9|Z|A|10|1|11]]|E|$]]|$1|M|3|-4|5|6|7|12|8|@]|D|@]|E|$]]]|N|$O|$5|P|Q|R|E|$S|T]]]]

I followed the <code>SELF_SIGNED_CERT_IN_CHAIN</code> error a lot.
Solving npm in node.js solves the certificate problem.

<pre><code>npm config set cafile /path/to/cert.pem
</code></pre>

See below
<a href="https://mmx5002.blogspot.com/2020/02/selfsignedcertinchain.html" rel="nofollow noreferrer">https://mmx5002.blogspot.com/2020/02/selfsignedcertinchain.html</a>

Is it safe to ignore this warning? It shows up when I create a new project in Android Studio:

<pre><code>Server's certificate is not trusted

Certificate details

Issued To

CN (Common Name) *.google.com
O (Organization) Google Inc
L (Locality) Mountain View
C (Country) US
ST (State or Province) California

Issued By

CN (Common Name) Google Internet Authority G2
O (Organization) Google Inc
C (Country) US

Validity Period

Valid from: 9/24/14
Valid until: 12/23/14

...
</code></pre>

The date looks alright and I checked my computer's date settings to be sure. Why else would it be "not trusted"?

Android Studio: Server's certificate is not trusted

Android Studio

服务器

Android

Ubuntu

Java

忽略此警告是否安全？当我在Android Studio中创建一个新项目时，它会显示出来：Server's certificate is not trustedCertificate detailsIssued ToCN (Common Name)       *.google.comO (Organization)  ...

问Android Studio:服务器的证书不可信
EN

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问Android Studio:服务器的证书不可信EN

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问Android Studio:服务器的证书不可信
EN