blocks|key|2869361|text|我终于明白了！|type|unstyled|depth|inlineStyleRanges|entityRanges|data|2869362|你能做的是：|2869363|照常使用UIWebView发起请求。然后-在webView:shouldStartLoadWithRequest中-我们回复NO，并使用相同的请求启动一个NSURLConnection。|offset|length|style|CODE|BOLD|2869364|使用NSURLConnection，您可以与自签名服务器通信，因为我们能够通过UIWebView不可用的额外委托方法控制身份验证。因此，使用connection:didReceiveAuthenticationChallenge，我们可以对自签名服务器进行身份验证。|2869365|然后，在connection:didReceiveData中，我们取消NSURLConnection请求，并使用UIWebView再次启动相同的请求-现在可以工作了，因为我们已经通过了服务器身份验证:)|2869366|下面是相关的代码片段。|2869367|注意:您将看到的实例变量具有以下类型：|2869368|UIWebView+*_web|2869369|NSURLConnection+*_urlConnection|2869370|NSURLRequest+*_request|2869371|(我对_request使用了一个instance+var，因为在我的例子中，它是一个包含大量登录详细信息的POST，但是如果需要的话，您可以改为使用传入的请求作为方法的参数。)|2869372|#pragma+mark+-+Webview+delegate

//+Note:+This+method+is+particularly+important.+As+the+server+is+using+a+self+signed+certificate,
//+we+cannot+use+just+UIWebView+-+as+it+doesn't+allow+for+using+self-certs.+Instead,+we+stop+the
//+request+in+this+method+below,+create+an+NSURLConnection+(which+can+allow+self-certs+via+the+delegate+methods
//+which+UIWebView+does+not+have),+authenticate+using+NSURLConnection,+then+use+another+UIWebView+to+complete
//+the+loading+and+viewing+of+the+page.+See+connection:didReceiveAuthenticationChallenge+to+see+how+this+works.
-+(BOOL)webView:(UIWebView+*)webView+shouldStartLoadWithRequest:(NSURLRequest+*)request+navigationType:(UIWebViewNavigationType)navigationType;
{
++++NSLog(@"Did+start+loading:+%25@+auth:%25d",+[[request+URL]+absoluteString],+_authenticated);

++++if+(!_authenticated)+{
++++++++_authenticated+=+NO;

++++++++_urlConnection+=+[[NSURLConnection+alloc]+initWithRequest:_request+delegate:self];

++++++++[_urlConnection+start];

++++++++return+NO;
++++}

++++return+YES;
}


#pragma+mark+-+NURLConnection+delegate

-+(void)connection:(NSURLConnection+*)connection+didReceiveAuthenticationChallenge:(NSURLAuthenticationChallenge+*)challenge;
{
++++NSLog(@"WebController+Got+auth+challange+via+NSURLConnection");

++++if+([challenge+previousFailureCount]+==+0)
++++{
++++++++_authenticated+=+YES;

++++++++NSURLCredential+*credential+=+[NSURLCredential+credentialForTrust:challenge.protectionSpace.serverTrust];

++++++++[challenge.sender+useCredential:credential+forAuthenticationChallenge:challenge];

++++}+else
++++{
++++++++[[challenge+sender]+cancelAuthenticationChallenge:challenge];
++++}
}

-+(void)connection:(NSURLConnection+*)connection+didReceiveResponse:(NSURLResponse+*)response;
{
++++NSLog(@"WebController+received+response+via+NSURLConnection");

++++//+remake+a+webview+call+now+that+authentication+has+passed+ok.
++++_authenticated+=+YES;
++++[_web+loadRequest:_request];

++++//+Cancel+the+URL+connection+otherwise+we+double+up+(webview+%2B+url+connection,+same+url+=+no+good!)
++++[_urlConnection+cancel];
}

//+We+use+this+method+is+to+accept+an+untrusted+site+which+unfortunately+we+need+to+do,+as+our+PVM+servers+are+self+signed.
-+(BOOL)connection:(NSURLConnection+*)connection+canAuthenticateAgainstProtectionSpace:(NSURLProtectionSpace+*)protectionSpace
{
++++return+[protectionSpace.authenticationMethod+isEqualToString:NSURLAuthenticationMethodServerTrust];
}|code-block|syntax|javascript|2869373|我希望这能帮助其他人解决我遇到的同样的问题！|2869374|entityMap^0|0|0|4|9|M|Y|1Q|2|0|2|F|13|9|1Y|18|0|4|P|Z|F|1K|9|0|0|0|0|F|0|0|V|0|0|M|0|3|8|0|0|0^^$0|@$1|2|3|4|5|6|7|19|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|1A|8|@]|9|@]|A|$]]|$1|D|3|E|5|6|7|1B|8|@$F|1C|G|1D|H|I]|$F|1E|G|1F|H|I]|$F|1G|G|1H|H|J]]|9|@]|A|$]]|$1|K|3|L|5|6|7|1I|8|@$F|1J|G|1K|H|I]|$F|1L|G|1M|H|I]|$F|1N|G|1O|H|I]]|9|@]|A|$]]|$1|M|3|N|5|6|7|1P|8|@$F|1Q|G|1R|H|I]|$F|1S|G|1T|H|I]|$F|1U|G|1V|H|I]]|9|@]|A|$]]|$1|O|3|P|5|6|7|1W|8|@]|9|@]|A|$]]|$1|Q|3|R|5|6|7|1X|8|@]|9|@]|A|$]]|$1|S|3|T|5|6|7|1Y|8|@$F|1Z|G|20|H|I]]|9|@]|A|$]]|$1|U|3|V|5|6|7|21|8|@$F|22|G|23|H|I]]|9|@]|A|$]]|$1|W|3|X|5|6|7|24|8|@$F|25|G|26|H|I]]|9|@]|A|$]]|$1|Y|3|Z|5|6|7|27|8|@$F|28|G|29|H|I]]|9|@]|A|$]]|$1|10|3|11|5|12|7|2A|8|@]|9|@]|A|$13|14]]|$1|15|3|16|5|6|7|2B|8|@]|9|@]|A|$]]|$1|17|3|-4|5|6|7|2C|8|@]|9|@]|A|$]]]|18|$]]

Finally I got it!

What you can do is this:

Initiate your request using <code>UIWebView</code> as normal. Then - in <code>webView:shouldStartLoadWithRequest</code> - we reply NO, and instead start an NSURLConnection with the same request. 

Using <code>NSURLConnection</code>, you can communicate with a self-signed server, as we have the ability to control the authentication through the extra delegate methods which are not available to a <code>UIWebView</code>. So using <code>connection:didReceiveAuthenticationChallenge</code> we can authenticate against the self signed server. 

Then, in <code>connection:didReceiveData</code>, we cancel the <code>NSURLConnection</code> request, and start the same request again using <code>UIWebView</code> - which will work now, because we've already got through the server authentication :)

Here are the relevant code snippets below.

Note: Instance variables you will see are of the following type: 
<code>UIWebView *_web</code> 
<code>NSURLConnection *_urlConnection</code> 
<code>NSURLRequest *_request</code> 

(I use an instance var for <code>_request</code> as in my case it's a POST with lots of login details, but you could change to use the request passed in as arguments to the methods if you needed.)

<pre><code>#pragma mark - Webview delegate

// Note: This method is particularly important. As the server is using a self signed certificate,
// we cannot use just UIWebView - as it doesn't allow for using self-certs. Instead, we stop the
// request in this method below, create an NSURLConnection (which can allow self-certs via the delegate methods
// which UIWebView does not have), authenticate using NSURLConnection, then use another UIWebView to complete
// the loading and viewing of the page. See connection:didReceiveAuthenticationChallenge to see how this works.
- (BOOL)webView:(UIWebView *)webView shouldStartLoadWithRequest:(NSURLRequest *)request navigationType:(UIWebViewNavigationType)navigationType;
{
 NSLog(@"Did start loading: %@ auth:%d", [[request URL] absoluteString], _authenticated);

 if (!_authenticated) {
 _authenticated = NO;

 _urlConnection = [[NSURLConnection alloc] initWithRequest:_request delegate:self];

 [_urlConnection start];

 return NO;
 }

 return YES;
}


#pragma mark - NURLConnection delegate

- (void)connection:(NSURLConnection *)connection didReceiveAuthenticationChallenge:(NSURLAuthenticationChallenge *)challenge;
{
 NSLog(@"WebController Got auth challange via NSURLConnection");

 if ([challenge previousFailureCount] == 0)
 {
 _authenticated = YES;

 NSURLCredential *credential = [NSURLCredential credentialForTrust:challenge.protectionSpace.serverTrust];

 [challenge.sender useCredential:credential forAuthenticationChallenge:challenge];

 } else
 {
 [[challenge sender] cancelAuthenticationChallenge:challenge];
 }
}

- (void)connection:(NSURLConnection *)connection didReceiveResponse:(NSURLResponse *)response;
{
 NSLog(@"WebController received response via NSURLConnection");

 // remake a webview call now that authentication has passed ok.
 _authenticated = YES;
 [_web loadRequest:_request];

 // Cancel the URL connection otherwise we double up (webview + url connection, same url = no good!)
 [_urlConnection cancel];
}

// We use this method is to accept an untrusted site which unfortunately we need to do, as our PVM servers are self signed.
- (BOOL)connection:(NSURLConnection *)connection canAuthenticateAgainstProtectionSpace:(NSURLProtectionSpace *)protectionSpace
{
 return [protectionSpace.authenticationMethod isEqualToString:NSURLAuthenticationMethodServerTrust];
}
</code></pre>

I hope this helps others with the same issue I was having!

blocks|key|3083263|text|Stretch的答案似乎是一个很好的变通方法，但它使用的是过时的API。因此，我认为它可能值得对代码进行升级。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|3083264|对于这个代码示例，我将例程添加到包含我的UIWebView的ViewController中。我把我的UIViewController做成了UIWebViewDelegate和NSURLConnectionDataDelegate。然后我添加了两个数据成员：_Authenticated和_FailedRequest。这样，代码看起来就像这样：|3083265|-(BOOL)webView:(UIWebView+*)webView+shouldStartLoadWithRequest:(NSURLRequest+*)request+navigationType:(UIWebViewNavigationType)navigationType+{
++++BOOL+result+=+_Authenticated;
++++if+(!_Authenticated)+{
++++++++_FailedRequest+=+request;
++++++++[[NSURLConnection+alloc]+initWithRequest:request+delegate:self];
++++}
++++return+result;
}

-(void)connection:(NSURLConnection+*)connection+willSendRequestForAuthenticationChallenge:(NSURLAuthenticationChallenge+*)challenge+{
++++if+([challenge.protectionSpace.authenticationMethod+isEqualToString:NSURLAuthenticationMethodServerTrust])+{
++++++++NSURL*+baseURL+=+[_FailedRequest+URL];
++++++++if+([challenge.protectionSpace.host+isEqualToString:baseURL.host])+{
++++++++++++NSLog(@"trusting+connection+to+host+%25@",+challenge.protectionSpace.host);
++++++++++++[challenge.sender+useCredential:[NSURLCredential+credentialForTrust:challenge.protectionSpace.serverTrust]+forAuthenticationChallenge:challenge];
++++++++}+else
++++++++++++NSLog(@"Not+trusting+connection+to+host+%25@",+challenge.protectionSpace.host);
++++}
++++[challenge.sender+continueWithoutCredentialForAuthenticationChallenge:challenge];
}

-(void)connection:(NSURLConnection+*)connection+didReceiveResponse:(NSURLResponse+*)pResponse+{
++++_Authenticated+=+YES;
++++[connection+cancel];
++++[_WebView+loadRequest:_FailedRequest];
}|code-block|syntax|javascript|3083266|当我加载视图时，我将_Authenticated设置为NO，并且没有重置它。这似乎允许UIWebView向同一站点发出多个请求。我没有尝试切换网站，也没有试图回来。这可能会导致需要重置_Authenticated。此外，如果您要切换站点，您应该为_Authenticated保留一个字典(每个主机一个条目)，而不是BOOL。|3083267|entityMap^0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|M|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|N|8|@]|9|@]|A|$]]|$1|D|3|E|5|F|7|O|8|@]|9|@]|A|$G|H]]|$1|I|3|J|5|6|7|P|8|@]|9|@]|A|$]]|$1|K|3|-4|5|6|7|Q|8|@]|9|@]|A|$]]]|L|$]]

Stretch's answer appears to be a great workaround, but it uses deprecated APIs. So, I thought it might be worthy of an upgrade to the code.

For this code sample, I added the routines to the ViewController which contains my UIWebView. I made my UIViewController a UIWebViewDelegate and a NSURLConnectionDataDelegate. Then I added 2 data members: _Authenticated and _FailedRequest. With that, the code looks like this:

<pre><code>-(BOOL)webView:(UIWebView *)webView shouldStartLoadWithRequest:(NSURLRequest *)request navigationType:(UIWebViewNavigationType)navigationType {
 BOOL result = _Authenticated;
 if (!_Authenticated) {
 _FailedRequest = request;
 [[NSURLConnection alloc] initWithRequest:request delegate:self];
 }
 return result;
}

-(void)connection:(NSURLConnection *)connection willSendRequestForAuthenticationChallenge:(NSURLAuthenticationChallenge *)challenge {
 if ([challenge.protectionSpace.authenticationMethod isEqualToString:NSURLAuthenticationMethodServerTrust]) {
 NSURL* baseURL = [_FailedRequest URL];
 if ([challenge.protectionSpace.host isEqualToString:baseURL.host]) {
 NSLog(@"trusting connection to host %@", challenge.protectionSpace.host);
 [challenge.sender useCredential:[NSURLCredential credentialForTrust:challenge.protectionSpace.serverTrust] forAuthenticationChallenge:challenge];
 } else
 NSLog(@"Not trusting connection to host %@", challenge.protectionSpace.host);
 }
 [challenge.sender continueWithoutCredentialForAuthenticationChallenge:challenge];
}

-(void)connection:(NSURLConnection *)connection didReceiveResponse:(NSURLResponse *)pResponse {
 _Authenticated = YES;
 [connection cancel];
 [_WebView loadRequest:_FailedRequest];
}
</code></pre>

I set _Authenticated to NO when I load the view and don't reset it. This seems to allow the UIWebView to make multiple requests to the same site. I did not try switching sites and trying to come back. That may cause the need for resetting _Authenticated. Also, if you are switching sites, you should keep a dictionary (one entry for each host) for _Authenticated instead of a BOOL.

blocks|key|3083319|text|这是一种巧妙的解决方法。然而，一种可能更好的解决方案(虽然代码更密集)是使用苹果的CustomHTTPProtocol示例代码中演示的NSURLProtocol。从自述文件中：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|3083320|"CustomHTTPProtocol显示了如何使用HTTPS子类截获由不公开其网络连接的高级子系统生成的NSURLConnections。在此特定情况下，它截取由web视图生成的HTTPS并覆盖服务器信任评估，从而允许您浏览默认情况下证书不受信任的站点。“|3083321|查看完整的示例：https://developer.apple.com/library/ios/samplecode/CustomHTTPProtocol/Introduction/Intro.html|offset|length|3083322|entityMap|0|LINK|mutability|MUTABLE|url|https://developer.apple.com/library/ios/samplecode/CustomHTTPProtocol/Introduction/Intro.html^0|0|0|8|2L|0|0^^$0|@$1|2|3|4|5|6|7|P|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|Q|8|@]|9|@]|A|$]]|$1|D|3|E|5|6|7|R|8|@]|9|@$F|S|G|T|1|U]]|A|$]]|$1|H|3|-4|5|6|7|V|8|@]|9|@]|A|$]]]|I|$J|$5|K|L|M|A|$N|O]]]]

This is a clever workaround. However, a possibly better (although more code intensive) solution would be to use an NSURLProtocol as demonstrated in Apple's CustomHTTPProtocol sample code. From the README:

"CustomHTTPProtocol shows how to use an NSURLProtocol subclass to intercept the NSURLConnections made by a high-level subsystem that does not otherwise expose its network connections. In this specific case, it intercepts the HTTPS requests made by a web view and overrides server trust evaluation, allowing you to browse a site whose certificate is not trusted by default."

Checkout the full example:
<a href="https://developer.apple.com/library/ios/samplecode/CustomHTTPProtocol/Introduction/Intro.html" rel="nofollow">https://developer.apple.com/library/ios/samplecode/CustomHTTPProtocol/Introduction/Intro.html</a>

blocks|key|217336|text|这是灵丹妙药！|type|unstyled|depth|inlineStyleRanges|entityRanges|data|217337|217338|BOOL+_Authenticated;
NSURLRequest+*_FailedRequest;

#pragma+UIWebViewDelegate

-(BOOL)webView:(UIWebView+*)webView+shouldStartLoadWithRequest:(NSURLRequest+*)request+++navigationType:(UIWebViewNavigationType)navigationType+{
++++BOOL+result+=+_Authenticated;
++++if+(!_Authenticated)+{
++++++++_FailedRequest+=+request;
++++++++NSURLConnection+*urlConnection+=+[[NSURLConnection+alloc]+initWithRequest:request+delegate:self];
++++++++[urlConnection+start];
++++}
++++return+result;
}

#pragma+NSURLConnectionDelegate

-(void)connection:(NSURLConnection+*)connection+willSendRequestForAuthenticationChallenge:(NSURLAuthenticationChallenge+*)challenge+{
++++if+([challenge.protectionSpace.authenticationMethod+isEqualToString:NSURLAuthenticationMethodServerTrust])+{
++++++++NSURL*+baseURL+=+[NSURL+URLWithString:@"your+url"];
++++++++if+([challenge.protectionSpace.host+isEqualToString:baseURL.host])+{
++++++++++++NSLog(@"trusting+connection+to+host+%25@",+challenge.protectionSpace.host);
++++++++++++[challenge.sender+useCredential:[NSURLCredential+credentialForTrust:challenge.protectionSpace.serverTrust]+forAuthenticationChallenge:challenge];
++++++++}+else
++++++++++++NSLog(@"Not+trusting+connection+to+host+%25@",+challenge.protectionSpace.host);
++++}
++++[challenge.sender+continueWithoutCredentialForAuthenticationChallenge:challenge];
}

-(void)connection:(NSURLConnection+*)connection+didReceiveResponse:(NSURLResponse+*)pResponse+{
_Authenticated+=+YES;
++++[connection+cancel];
++++[self.webView+loadRequest:_FailedRequest];
}

-+(void)viewDidLoad{
+++[super+viewDidLoad];

++++NSURL+*url+=+[NSURL+URLWithString:@"your+url"];
++++NSURLRequest+*requestURL+=+[NSURLRequest+requestWithURL:url];
++++[self.webView+loadRequest:requestURL];

//+Do+any+additional+setup+after+loading+the+view.
}|code-block|syntax|javascript|217339|entityMap^0|0|0|0^^$0|@$1|2|3|4|5|6|7|J|8|@]|9|@]|A|$]]|$1|B|3|-4|5|6|7|K|8|@]|9|@]|A|$]]|$1|C|3|D|5|E|7|L|8|@]|9|@]|A|$F|G]]|$1|H|3|-4|5|6|7|M|8|@]|9|@]|A|$]]]|I|$]]

This is the Panacea!

<hr>

<pre><code>BOOL _Authenticated;
NSURLRequest *_FailedRequest;

#pragma UIWebViewDelegate

-(BOOL)webView:(UIWebView *)webView shouldStartLoadWithRequest:(NSURLRequest *)request navigationType:(UIWebViewNavigationType)navigationType {
 BOOL result = _Authenticated;
 if (!_Authenticated) {
 _FailedRequest = request;
 NSURLConnection *urlConnection = [[NSURLConnection alloc] initWithRequest:request delegate:self];
 [urlConnection start];
 }
 return result;
}

#pragma NSURLConnectionDelegate

-(void)connection:(NSURLConnection *)connection willSendRequestForAuthenticationChallenge:(NSURLAuthenticationChallenge *)challenge {
 if ([challenge.protectionSpace.authenticationMethod isEqualToString:NSURLAuthenticationMethodServerTrust]) {
 NSURL* baseURL = [NSURL URLWithString:@"your url"];
 if ([challenge.protectionSpace.host isEqualToString:baseURL.host]) {
 NSLog(@"trusting connection to host %@", challenge.protectionSpace.host);
 [challenge.sender useCredential:[NSURLCredential credentialForTrust:challenge.protectionSpace.serverTrust] forAuthenticationChallenge:challenge];
 } else
 NSLog(@"Not trusting connection to host %@", challenge.protectionSpace.host);
 }
 [challenge.sender continueWithoutCredentialForAuthenticationChallenge:challenge];
}

-(void)connection:(NSURLConnection *)connection didReceiveResponse:(NSURLResponse *)pResponse {
_Authenticated = YES;
 [connection cancel];
 [self.webView loadRequest:_FailedRequest];
}

- (void)viewDidLoad{
 [super viewDidLoad];

 NSURL *url = [NSURL URLWithString:@"your url"];
 NSURLRequest *requestURL = [NSURLRequest requestWithURL:url];
 [self.webView loadRequest:requestURL];

// Do any additional setup after loading the view.
}
</code></pre>

blocks|key|217359|text|如果您只想使用自签名证书访问私有服务器进行测试，则不必编写代码。您可以手动在系统范围内导入证书。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|217360|为此，您需要使用mobile+safari下载服务器证书，然后会提示您进行导入。|217361|在以下情况下，这将是可用的：|217362|217363|the+number+of+test+devices+is+small|unordered-list-item|217364|您信任服务器的证书|217365|217366|如果你没有访问服务器证书的权限，你可以使用following+method从任何HTTPS服务器上提取证书(至少在Linux/Mac上，windows用户必须从某个地方下载一个OpenSSL二进制文件)：|offset|length|217367|echo+""+%7C+openssl+s_client+-connect+$server:$port+-prexit+2>/dev/null+%7C+sed+-n+-e+'/BEGIN\+CERTIFICATE/,/END\+CERTIFICATE/+p'+>server.pem|code-block|syntax|javascript|217368|请注意，根据OpenSSL版本的不同，证书可能会在文件中加倍，因此最好使用文本编辑器查看它。将文件放在网络上的某个位置，或使用|217369|python+-m+SimpleHTTPServer+8000|217370|从http://$your_device_ip:8000/server.pem的移动safari中访问它的快捷方式。|217371|entityMap|0|LINK|mutability|MUTABLE|url|https://stackoverflow.com/questions/7885785/using-openssl-to-get-the-certificate-from-a-server|1|http://$your/_device/_ip:8000/server.pem^0|0|0|0|0|0|0|0|L|G|0|0|0|0|0|1|12|1|0^^$0|@$1|2|3|4|5|6|7|1B|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|1C|8|@]|9|@]|A|$]]|$1|D|3|E|5|6|7|1D|8|@]|9|@]|A|$]]|$1|F|3|-4|5|6|7|1E|8|@]|9|@]|A|$]]|$1|G|3|H|5|I|7|1F|8|@]|9|@]|A|$]]|$1|J|3|K|5|I|7|1G|8|@]|9|@]|A|$]]|$1|L|3|-4|5|6|7|1H|8|@]|9|@]|A|$]]|$1|M|3|N|5|6|7|1I|8|@]|9|@$O|1J|P|1K|1|1L]]|A|$]]|$1|Q|3|R|5|S|7|1M|8|@]|9|@]|A|$T|U]]|$1|V|3|W|5|6|7|1N|8|@]|9|@]|A|$]]|$1|X|3|Y|5|6|7|1O|8|@]|9|@]|A|$]]|$1|Z|3|10|5|6|7|1P|8|@]|9|@$O|1Q|P|1R|1|1S]]|A|$]]|$1|11|3|-4|5|6|7|1T|8|@]|9|@]|A|$]]]|12|$13|$5|14|15|16|A|$17|18]]|19|$5|14|15|16|A|$17|1A]]]]

If you want to access a private server with a self-signed certificate just for testing you don't have to write code. You can manually do a system-wide import of the certificate. 

To do this, you need to download the server certificate with mobile safari, which then prompts for an import. 

This would be usable under the following circumstances:

<ul>
<li>the number of test devices is small</li>
<li>you're trusting the certificate of the server</li>
</ul>

If you don't have access to the server certificate, you can fallback to the <a href="https://stackoverflow.com/questions/7885785/using-openssl-to-get-the-certificate-from-a-server">following method</a> for extracting it from any HTTPS-server (at least on Linux/Mac, windows guys will have to download an OpenSSL binary somewhere):

<pre><code>echo "" | openssl s_client -connect $server:$port -prexit 2&gt;/dev/null | sed -n -e '/BEGIN\ CERTIFICATE/,/END\ CERTIFICATE/ p' &gt;server.pem
</code></pre>

Note, that depending on the OpenSSL version, the certificate may be doubled in the file, so best have a look at it with a text editor. Put the file somewhere on the network or use the 

python -m SimpleHTTPServer 8000

shortcut to access it from your mobile safari at http://$your_device_ip:8000/server.pem.

blocks|key|220736|text|这是一个与swift+2.0兼容的等价物，适用于我。我没有将这段代码转换为使用NSURLSession而不是NSURLConnection，我怀疑这样做会增加很多复杂性。|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|220737|var+authRequest+:+NSURLRequest?+=+nil
var+authenticated+=+false
var+trustedDomains+=+[:]+//+set+up+as+necessary

func+webView(webView:+UIWebView,+shouldStartLoadWithRequest+request:+NSURLRequest,+navigationType:+UIWebViewNavigationType)+->+Bool+{
++++if+!authenticated+{
++++++++authRequest+=+request
++++++++let+urlConnection:+NSURLConnection+=+NSURLConnection(request:+request,+delegate:+self)!
++++++++urlConnection.start()
++++++++return+false
++++}
++++else+if+isWebContent(request.URL!)+{+//+write+your+method+for+this
++++++++return+true
++++}
++++return+processData(request)+//+write+your+method+for+this
}

func+connection(connection:+NSURLConnection,+willSendRequestForAuthenticationChallenge+challenge:+NSURLAuthenticationChallenge)+{
++++if+challenge.protectionSpace.authenticationMethod+==+NSURLAuthenticationMethodServerTrust+{
++++++++let+challengeHost+=+challenge.protectionSpace.host
++++++++if+let+_+=+trustedDomains[challengeHost]+{
++++++++++++challenge.sender!.useCredential(NSURLCredential(forTrust:+challenge.protectionSpace.serverTrust!),+forAuthenticationChallenge:+challenge)
++++++++}
++++}
++++challenge.sender!.continueWithoutCredentialForAuthenticationChallenge(challenge)
}

func+connection(connection:+NSURLConnection,+didReceiveResponse+response:+NSURLResponse)+{
++++authenticated+=+true
++++connection.cancel()
++++webview!.loadRequest(authRequest!)
}|code-block|syntax|javascript|220738|entityMap^0|13|C|1I|F|0|0^^$0|@$1|2|3|4|5|6|7|M|8|@$9|N|A|O|B|C]|$9|P|A|Q|B|C]]|D|@]|E|$]]|$1|F|3|G|5|H|7|R|8|@]|D|@]|E|$I|J]]|$1|K|3|-4|5|6|7|S|8|@]|D|@]|E|$]]]|L|$]]

This is a swift 2.0 compatible equivalent that works for me. I have not converted this code to use <code>NSURLSession</code> instead of <code>NSURLConnection</code>, and suspect that it would add a lot of complexity to get it right.

<pre><code>var authRequest : NSURLRequest? = nil
var authenticated = false
var trustedDomains = [:] // set up as necessary

func webView(webView: UIWebView, shouldStartLoadWithRequest request: NSURLRequest, navigationType: UIWebViewNavigationType) -&gt; Bool {
 if !authenticated {
 authRequest = request
 let urlConnection: NSURLConnection = NSURLConnection(request: request, delegate: self)!
 urlConnection.start()
 return false
 }
 else if isWebContent(request.URL!) { // write your method for this
 return true
 }
 return processData(request) // write your method for this
}

func connection(connection: NSURLConnection, willSendRequestForAuthenticationChallenge challenge: NSURLAuthenticationChallenge) {
 if challenge.protectionSpace.authenticationMethod == NSURLAuthenticationMethodServerTrust {
 let challengeHost = challenge.protectionSpace.host
 if let _ = trustedDomains[challengeHost] {
 challenge.sender!.useCredential(NSURLCredential(forTrust: challenge.protectionSpace.serverTrust!), forAuthenticationChallenge: challenge)
 }
 }
 challenge.sender!.continueWithoutCredentialForAuthenticationChallenge(challenge)
}

func connection(connection: NSURLConnection, didReceiveResponse response: NSURLResponse) {
 authenticated = true
 connection.cancel()
 webview!.loadRequest(authRequest!)
}
</code></pre>

blocks|key|222383|text|下面是swift+2.0的工作代码|type|unstyled|depth|inlineStyleRanges|entityRanges|data|222384|var+authRequest+:+NSURLRequest?+=+nil
var+authenticated+=+false


func+webView(webView:+UIWebView,+shouldStartLoadWithRequest+request:+NSURLRequest,+navigationType:+UIWebViewNavigationType)+->+Bool+{
++++++++++++++++if+!authenticated+{
++++++++++++++++++++authRequest+=+request
++++++++++++++++++++let+urlConnection:+NSURLConnection+=+NSURLConnection(request:+request,+delegate:+self)!
++++++++++++++++++++urlConnection.start()
++++++++++++++++++++return+false
++++++++++++++++}
++++++++++++++++return+true
}

func+connection(connection:+NSURLConnection,+didReceiveResponse+response:+NSURLResponse)+{
++++++++++++++++authenticated+=+true
++++++++++++++++connection.cancel()
++++++++++++++++webView!.loadRequest(authRequest!)
}

func+connection(connection:+NSURLConnection,+willSendRequestForAuthenticationChallenge+challenge:+NSURLAuthenticationChallenge)+{

++++++++++++++++let+host+=+"www.example.com"

++++++++++++++++if+challenge.protectionSpace.authenticationMethod+==+NSURLAuthenticationMethodServerTrust+&&
++++++++++++++++++++challenge.protectionSpace.host+==+host+{
++++++++++++++++++++let+credential+=+NSURLCredential(forTrust:+challenge.protectionSpace.serverTrust!)
++++++++++++++++++++challenge.sender!.useCredential(credential,+forAuthenticationChallenge:+challenge)
++++++++++++++++}+else+{
++++++++++++++++++++challenge.sender!.performDefaultHandlingForAuthenticationChallenge!(challenge)
++++++++++++++++}
}|code-block|syntax|javascript|222385|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|I|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|J|8|@]|9|@]|A|$E|F]]|$1|G|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|H|$]]

Here the working code of swift 2.0

<pre><code>var authRequest : NSURLRequest? = nil
var authenticated = false


func webView(webView: UIWebView, shouldStartLoadWithRequest request: NSURLRequest, navigationType: UIWebViewNavigationType) -&gt; Bool {
 if !authenticated {
 authRequest = request
 let urlConnection: NSURLConnection = NSURLConnection(request: request, delegate: self)!
 urlConnection.start()
 return false
 }
 return true
}

func connection(connection: NSURLConnection, didReceiveResponse response: NSURLResponse) {
 authenticated = true
 connection.cancel()
 webView!.loadRequest(authRequest!)
}

func connection(connection: NSURLConnection, willSendRequestForAuthenticationChallenge challenge: NSURLAuthenticationChallenge) {

 let host = "www.example.com"

 if challenge.protectionSpace.authenticationMethod == NSURLAuthenticationMethodServerTrust &amp;&amp;
 challenge.protectionSpace.host == host {
 let credential = NSURLCredential(forTrust: challenge.protectionSpace.serverTrust!)
 challenge.sender!.useCredential(credential, forAuthenticationChallenge: challenge)
 } else {
 challenge.sender!.performDefaultHandlingForAuthenticationChallenge!(challenge)
 }
}
</code></pre>

blocks|key|222407|text|为了在@spirographer's+answer的基础上构建，我用NSURLSession组合了一个SWIFT2.0用例。然而，这仍然是不是工作。请参阅下面的更多内容。|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|BOLD|entityRanges|data|222408|func+webView(webView:+UIWebView,+shouldStartLoadWithRequest+request:+NSURLRequest,+navigationType:+UIWebViewNavigationType)+->+Bool+{
++++let+result+=+_Authenticated
++++if+!result+{
++++++++let+sessionConfiguration+=+NSURLSessionConfiguration.defaultSessionConfiguration()
++++++++let+session+=+NSURLSession(configuration:+sessionConfiguration,+delegate:+self,+delegateQueue:+NSOperationQueue.mainQueue())
++++++++let+task+=+session.dataTaskWithRequest(request)+{
++++++++++++(data,+response,+error)+->+Void+in
++++++++++++if+error+==+nil+{
++++++++++++++++if+(!self._Authenticated)+{
++++++++++++++++++++self._Authenticated+=+true;
++++++++++++++++++++let+pageData+=+NSString(data:+data!,+encoding:+NSUTF8StringEncoding)
++++++++++++++++++++self.webView.loadHTMLString(pageData+as!+String,+baseURL:+request.URL!)

++++++++++++++++}+else+{
++++++++++++++++++++self.webView.loadRequest(request)
++++++++++++++++}
++++++++++++}
++++++++}
++++++++task.resume()
++++++++return+false
++++}
++++return+result
}

func+URLSession(session:+NSURLSession,+didReceiveChallenge+challenge:+NSURLAuthenticationChallenge,+completionHandler:+(NSURLSessionAuthChallengeDisposition,+NSURLCredential?)+->+Void)+{
++++completionHandler(NSURLSessionAuthChallengeDisposition.UseCredential,+NSURLCredential(forTrust:+challenge.protectionSpace.serverTrust!))
}|code-block|syntax|javascript|222409|我将得到初始的HTML响应，这样页面就会呈现纯HTML，但没有应用CSS样式(获取CSS的请求似乎被拒绝了)。我看到了一堆这样的错误：|222410|NSURLSession/NSURLConnection+HTTP+load+failed+(kCFStreamErrorDomainSSL,+-9813)|222411|使用webView.loadRequest发出的任何请求似乎都不是在会话中完成的，这就是连接被拒绝的原因。我在Info.plist中设置了Allow+Arbitrary+Loads。让我困惑的是，为什么NSURLConnection可以工作(看起来是一样的想法)，而NSURLSession却不行。|222412|entityMap|0|LINK|mutability|MUTABLE|url|https://stackoverflow.com/a/33005059/1368032^0|Y|C|1X|2|3|M|0|0|0|0|0|2|J|1J|A|1X|L|2T|F|3P|C|0^^$0|@$1|2|3|4|5|6|7|Z|8|@$9|10|A|11|B|C]|$9|12|A|13|B|D]]|E|@$9|14|A|15|1|16]]|F|$]]|$1|G|3|H|5|I|7|17|8|@]|E|@]|F|$J|K]]|$1|L|3|M|5|6|7|18|8|@]|E|@]|F|$]]|$1|N|3|O|5|I|7|19|8|@]|E|@]|F|$J|K]]|$1|P|3|Q|5|6|7|1A|8|@$9|1B|A|1C|B|C]|$9|1D|A|1E|B|C]|$9|1F|A|1G|B|C]|$9|1H|A|1I|B|C]|$9|1J|A|1K|B|C]]|E|@]|F|$]]|$1|R|3|-4|5|6|7|1L|8|@]|E|@]|F|$]]]|S|$T|$5|U|V|W|F|$X|Y]]]]

To build off of <a href="https://stackoverflow.com/a/33005059/1368032">@spirographer's answer</a>, I put something together for a Swift 2.0 use case with <code>NSURLSession</code>. However, this is still NOT working. See more below.

<pre><code>func webView(webView: UIWebView, shouldStartLoadWithRequest request: NSURLRequest, navigationType: UIWebViewNavigationType) -&gt; Bool {
 let result = _Authenticated
 if !result {
 let sessionConfiguration = NSURLSessionConfiguration.defaultSessionConfiguration()
 let session = NSURLSession(configuration: sessionConfiguration, delegate: self, delegateQueue: NSOperationQueue.mainQueue())
 let task = session.dataTaskWithRequest(request) {
 (data, response, error) -&gt; Void in
 if error == nil {
 if (!self._Authenticated) {
 self._Authenticated = true;
 let pageData = NSString(data: data!, encoding: NSUTF8StringEncoding)
 self.webView.loadHTMLString(pageData as! String, baseURL: request.URL!)

 } else {
 self.webView.loadRequest(request)
 }
 }
 }
 task.resume()
 return false
 }
 return result
}

func URLSession(session: NSURLSession, didReceiveChallenge challenge: NSURLAuthenticationChallenge, completionHandler: (NSURLSessionAuthChallengeDisposition, NSURLCredential?) -&gt; Void) {
 completionHandler(NSURLSessionAuthChallengeDisposition.UseCredential, NSURLCredential(forTrust: challenge.protectionSpace.serverTrust!))
}
</code></pre>

I will get back the initial HTML response, so the page renders the plain HTML, but there is no CSS styles applied to it (seems like the request to get CSS is denied). I see a bunch of these errors:

<pre><code>NSURLSession/NSURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9813)
</code></pre>

It seems like any request made with <code>webView.loadRequest</code> is done not within the session, which is why the connection is rejected. I do have <code>Allow Arbitrary Loads</code> set in <code>Info.plist</code>. What confuses me is why <code>NSURLConnection</code> would work (seemingly the same idea), but not <code>NSURLSession</code>.

blocks|key|222435|text|第一件事是UIWebView被弃用|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|222436|请改用WKWebView+(可从iOS8获得)|222437|设置webView.navigationDelegate+=+self|222438|实施|222439|extension+ViewController:+WKNavigationDelegate+{

func+webView(_+webView:+WKWebView,+didReceive+challenge:+URLAuthenticationChallenge,+completionHandler:+@escaping+(URLSession.AuthChallengeDisposition,+URLCredential?)+->+Void)+{
++++let+trust+=+challenge.protectionSpace.serverTrust!
++++let+exceptions+=+SecTrustCopyExceptions(trust)
++++SecTrustSetExceptions(trust,+exceptions)
++++++++completionHandler(.useCredential,+URLCredential(trust:+trust))
++++}

}|code-block|syntax|javascript|222440|并在plist中添加您想要允许的域名|222441|<key>NSAppTransportSecurity</key>
<dict>
++++<key>NSExceptionDomains</key>
++++<dict>
++++++++<key>localhost</key>
++++++++<dict>
++++++++++++<key>NSTemporaryExceptionAllowsInsecureHTTPSLoads</key>
++++++++++++<false/>
++++++++++++<key>NSIncludesSubdomains</key>
++++++++++++<true/>
++++++++++++<key>NSTemporaryExceptionAllowsInsecureHTTPLoads</key>
++++++++++++<true/>
++++++++++++<key>NSTemporaryExceptionMinimumTLSVersion</key>
++++++++++++<string>1.0</string>
++++++++++++<key>NSTemporaryExceptionRequiresForwardSecrecy</key>
++++++++++++<false/>
++++++++</dict>
++++</dict>
</dict>|222442|entityMap^0|5|9|0|3|9|0|2|X|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|W|8|@$9|X|A|Y|B|C]]|D|@]|E|$]]|$1|F|3|G|5|6|7|Z|8|@$9|10|A|11|B|C]]|D|@]|E|$]]|$1|H|3|I|5|6|7|12|8|@$9|13|A|14|B|C]]|D|@]|E|$]]|$1|J|3|K|5|6|7|15|8|@]|D|@]|E|$]]|$1|L|3|M|5|N|7|16|8|@]|D|@]|E|$O|P]]|$1|Q|3|R|5|6|7|17|8|@]|D|@]|E|$]]|$1|S|3|T|5|N|7|18|8|@]|D|@]|E|$O|P]]|$1|U|3|-4|5|6|7|19|8|@]|D|@]|E|$]]]|V|$]]

First thing <code>UIWebView</code> is deprecated

use <code>WKWebView</code> instead (available from iOS8)

set <code>webView.navigationDelegate = self</code>

implement

<pre><code>extension ViewController: WKNavigationDelegate {

func webView(_ webView: WKWebView, didReceive challenge: URLAuthenticationChallenge, completionHandler: @escaping (URLSession.AuthChallengeDisposition, URLCredential?) -&gt; Void) {
 let trust = challenge.protectionSpace.serverTrust!
 let exceptions = SecTrustCopyExceptions(trust)
 SecTrustSetExceptions(trust, exceptions)
 completionHandler(.useCredential, URLCredential(trust: trust))
 }

}
</code></pre>

And add this in plist with domains you want to allow

<pre><code>&lt;key&gt;NSAppTransportSecurity&lt;/key&gt;
&lt;dict&gt;
 &lt;key&gt;NSExceptionDomains&lt;/key&gt;
 &lt;dict&gt;
 &lt;key&gt;localhost&lt;/key&gt;
 &lt;dict&gt;
 &lt;key&gt;NSTemporaryExceptionAllowsInsecureHTTPSLoads&lt;/key&gt;
 &lt;false/&gt;
 &lt;key&gt;NSIncludesSubdomains&lt;/key&gt;
 &lt;true/&gt;
 &lt;key&gt;NSTemporaryExceptionAllowsInsecureHTTPLoads&lt;/key&gt;
 &lt;true/&gt;
 &lt;key&gt;NSTemporaryExceptionMinimumTLSVersion&lt;/key&gt;
 &lt;string&gt;1.0&lt;/string&gt;
 &lt;key&gt;NSTemporaryExceptionRequiresForwardSecrecy&lt;/key&gt;
 &lt;false/&gt;
 &lt;/dict&gt;
 &lt;/dict&gt;
&lt;/dict&gt;
</code></pre>

There's a load of questions which ask this: Can I get <code>UIWebView</code> to view a self signed HTTPS website?

And the answers always involve either:

<ol>
<li>Use the private api call for <code>NSURLRequest</code>: <code>allowsAnyHTTPSCertificateForHost</code></li>
<li>Use <code>NSURLConnection</code> instead and the delegate <code>canAuthenticateAgainstProtectionSpace</code> etc</li>
</ol>

For me, these won't do. (1) - means I can't submit to the app store successfully. (2) - using NSURLConnection means the CSS, images and other things that have to be fetched from the server after receiving the initial HTML page do not load.

Does anyone know how to use UIWebView to view a self-signed https webpage please, which does not involve the two methods above?

Or - If using <code>NSURLConnection</code> can in fact be used to render a webpage complete with CSS, images and everything else - that would be great!

Cheers, 
Stretch.

UIWebView to view self signed websites (No private api, not NSURLConnection) - is it possible?

身份验证

服务器

Linux

有一大堆问题提出了这样的问题:我能让UIWebView查看一个自签名的HTTPS网站吗？答案总是涉及到以下两种情况：改为使用NSURLRequest的私有api调用：NSURLRequest NSURLConnection和委托canAuthenticateAgainstProtectionSpace etc对我来说，...

问查看自签名网站的UIWebView (没有私有api，不是NSURLConnection) -这是可能的吗？
EN

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问查看自签名网站的UIWebView (没有私有api，不是NSURLConnection) -这是可能的吗？EN

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问查看自签名网站的UIWebView (没有私有api，不是NSURLConnection) -这是可能的吗？
EN