blocks|key|1673108|text|据我所知，仅靠UIWebView是不可能的。据我所知，您需要使用NSURLConnection来处理所有HTTP/HTTPS，然后通过-loadHtmlString:baseURL:或-loadData:MIMEType:textEncodingName:baseURL:将其结果传递给UIWebView。|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|1673109|entityMap^0|7|9|W|F|1V|O|2K|18|3Z|9|0^^$0|@$1|2|3|4|5|6|7|H|8|@$9|I|A|J|B|C]|$9|K|A|L|B|C]|$9|M|A|N|B|C]|$9|O|A|P|B|C]|$9|Q|A|R|B|C]]|D|@]|E|$]]|$1|F|3|-4|5|6|7|S|8|@]|D|@]|E|$]]]|G|$]]

As far as I know, that isn't possible with just <code>UIWebView</code>. As I understand it, you need to use <code>NSURLConnection</code> to handle all the HTTP/HTTPS mojo and then feed its results to the <code>UIWebView</code> via <code>-loadHtmlString:baseURL:</code> or <code>-loadData:MIMEType:textEncodingName:baseURL:</code>.

blocks|key|1673133|text|--请注意：这个API目前不受支持，应该只在安全的测试环境中使用。要了解更多细节，请看一下这个CocoaNetics文章。|type|unstyled|depth|inlineStyleRanges|offset|length|style|BOLD|entityRanges|data|1673134|[NSURLRequest+setAllowsAnyHTTPSCertificate:YES+forHost:[url+host]];将允许您忽略证书错误。您还需要将以下内容添加到文件的开头，以授予您访问这些私有API的权限：|CODE|1673135|@interface+NSURLRequest+(DummyInterface)
%2B+(BOOL)allowsAnyHTTPSCertificateForHost:(NSString*)host;
%2B+(void)setAllowsAnyHTTPSCertificate:(BOOL)allow+forHost:(NSString*)host;
@end|code-block|syntax|javascript|1673136|entityMap|0|LINK|mutability|MUTABLE|url|http://www.cocoanetics.com/2009/11/ignoring-certificate-errors-on-nsurlrequest/^0|0|5|1B|D|0|0|0|1V|0|0^^$0|@$1|2|3|4|5|6|7|V|8|@$9|W|A|X|B|C]]|D|@$9|Y|A|Z|1|10]]|E|$]]|$1|F|3|G|5|6|7|11|8|@$9|12|A|13|B|H]]|D|@]|E|$]]|$1|I|3|J|5|K|7|14|8|@]|D|@]|E|$L|M]]|$1|N|3|-4|5|6|7|15|8|@]|D|@]|E|$]]]|O|$P|$5|Q|R|S|E|$T|U]]]]

Please note: This API is currently unsupported, and should really only be used in a safe testing environment. For further details, take a look at this <a href="http://www.cocoanetics.com/2009/11/ignoring-certificate-errors-on-nsurlrequest/" rel="noreferrer">CocoaNetics article</a>.

<code>[NSURLRequest setAllowsAnyHTTPSCertificate:YES forHost:[url host]];</code> will allow you to ignore certificate errors. You will also need to add the following to the beginning of your file to grant you access to these private APIs:

<pre><code>@interface NSURLRequest (DummyInterface)
+ (BOOL)allowsAnyHTTPSCertificateForHost:(NSString*)host;
+ (void)setAllowsAnyHTTPSCertificate:(BOOL)allow forHost:(NSString*)host;
@end
</code></pre>

blocks|key|1673162|text|让大家都知道..。以上使用的隐藏接口将不被苹果接受。他们希望使用私有API，这是一个不可接受的解决方案。因此，请不要将上面描述的解决方案作为修复它的方法，因为尽管它有效，但它会在AppStore中给您带来拒绝。这样就没用了。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1673163|下面是忽略无效服务器证书的可接受方法。您需要使用NSURLConnection并手动加载网页的数据，如下所示：|1673164|.
.
.
++++//Create+a+URL+object.
++++url+=+[NSURL+URLWithString:urlAddress];
++++NSURLRequest+*requestObj+=+[NSURLRequest+requestWithURL:url];
++++NSURLConnection+*connection+=+[[NSURLConnection+alloc]+initWithRequest:requestObj+delegate:self];
++++[connection+start];
}|code-block|syntax|javascript|1673165|然后，在你的代表里..。|1673166|-+(BOOL)connection:(NSURLConnection+*)connection+canAuthenticateAgainstProtectionSpace:(NSURLProtectionSpace+*)protectionSpace+
{
++++return+[protectionSpace.authenticationMethod+isEqualToString:NSURLAuthenticationMethodServerTrust];
}

-+(void)connection:(NSURLConnection+*)connection+didReceiveAuthenticationChallenge:(NSURLAuthenticationChallenge+*)challenge+
{
++++if+([challenge.protectionSpace.authenticationMethod+isEqualToString:NSURLAuthenticationMethodServerTrust])
++++{
++++++++[challenge.sender+useCredential:[NSURLCredential+credentialForTrust:challenge.protectionSpace.serverTrust]+forAuthenticationChallenge:challenge];
++++}
++++else
++++{
++++++++[challenge.sender+continueWithoutCredentialForAuthenticationChallenge:challenge];
++++}
}

-+(void)connection:(NSURLConnection+*)connection+didReceiveData:(NSData+*)data+
{
[resultData+appendData:data];
}


-+(void)connectionDidFinishLoading:(NSURLConnection+*)connection+
{
++++NSString+*htmlString+=+[[NSString+alloc]+initWithBytes:[resultData+bytes]+length:[resultData+length]+encoding:NSUTF8StringEncoding];
++++[webView+loadHTMLString:htmlString+baseURL:url];
}
@end|1673167|其中resultData是您先前实例化的NSMutableData，而url和urlAddress都是您在其他地方实例化和填充的内容。|1673168|不幸的是，我目前还不知道如何让实际的UIWebView在没有有效证书的情况下直接加载页面。|1673169|你的，GC|1673170|entityMap^0|0|0|0|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|U|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|V|8|@]|9|@]|A|$]]|$1|D|3|E|5|F|7|W|8|@]|9|@]|A|$G|H]]|$1|I|3|J|5|6|7|X|8|@]|9|@]|A|$]]|$1|K|3|L|5|F|7|Y|8|@]|9|@]|A|$G|H]]|$1|M|3|N|5|6|7|Z|8|@]|9|@]|A|$]]|$1|O|3|P|5|6|7|10|8|@]|9|@]|A|$]]|$1|Q|3|R|5|6|7|11|8|@]|9|@]|A|$]]|$1|S|3|-4|5|6|7|12|8|@]|9|@]|A|$]]]|T|$]]

Just so everyone knows... the above use of hidden interfaces WILL NOT BE ACCEPTED BY APPLE. They look for use of private APIs and it is NOT an acceptable solution. So, please do not go posting the solution described above around as THE way to fix it because, although it works, it will buy you a rejection in the AppStore. That makes it useless.

What follows is the ACCEPTABLE method of ignoring invalid server certificates. You need to use NSURLConnection and load the data for the webpage manually like so:

<pre><code>.
.
.
 //Create a URL object.
 url = [NSURL URLWithString:urlAddress];
 NSURLRequest *requestObj = [NSURLRequest requestWithURL:url];
 NSURLConnection *connection = [[NSURLConnection alloc] initWithRequest:requestObj delegate:self];
 [connection start];
}
</code></pre>

And then, in your delegate....

<pre><code>- (BOOL)connection:(NSURLConnection *)connection canAuthenticateAgainstProtectionSpace:(NSURLProtectionSpace *)protectionSpace 
{
 return [protectionSpace.authenticationMethod isEqualToString:NSURLAuthenticationMethodServerTrust];
}

- (void)connection:(NSURLConnection *)connection didReceiveAuthenticationChallenge:(NSURLAuthenticationChallenge *)challenge 
{
 if ([challenge.protectionSpace.authenticationMethod isEqualToString:NSURLAuthenticationMethodServerTrust])
 {
 [challenge.sender useCredential:[NSURLCredential credentialForTrust:challenge.protectionSpace.serverTrust] forAuthenticationChallenge:challenge];
 }
 else
 {
 [challenge.sender continueWithoutCredentialForAuthenticationChallenge:challenge];
 }
}

- (void)connection:(NSURLConnection *)connection didReceiveData:(NSData *)data 
{
[resultData appendData:data];
}


- (void)connectionDidFinishLoading:(NSURLConnection *)connection 
{
 NSString *htmlString = [[NSString alloc] initWithBytes:[resultData bytes] length:[resultData length] encoding:NSUTF8StringEncoding];
 [webView loadHTMLString:htmlString baseURL:url];
}
@end
</code></pre>

Where resultData is an NSMutableData you instantiated earlier and where url and urlAddress are both things you've instantiated and filled in elsewhere.

Unfortunately, I currently don't know a way to get the actual UIWebView to load a page directly without having a valid certificate.

Yours, GC

blocks|key|3226925|text|事实证明，一旦被取消的NSURLConnection对站点进行了身份验证，UIWebView就可以向站点发出请求。这里有一个完整的解释。|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|3226926|entityMap|0|LINK|mutability|MUTABLE|url|https://stackoverflow.com/questions/11573164/uiwebview-to-view-self-signed-websites-no-private-api-not-nsurlconnection-i/15074358#15074358^0|1L|B|0|0^^$0|@$1|2|3|4|5|6|7|L|8|@]|9|@$A|M|B|N|1|O]]|C|$]]|$1|D|3|-4|5|6|7|P|8|@]|9|@]|C|$]]]|E|$F|$5|G|H|I|C|$J|K]]]]

It turns out that once the site is authenticated by a cancelled NSURLConnection, the UIWebView can make requests to the site. <a href="https://stackoverflow.com/questions/11573164/uiwebview-to-view-self-signed-websites-no-private-api-not-nsurlconnection-i/15074358#15074358">There is a complete explanation here.</a>

We have an iOS app that uses a UIWebView to display content. We load it up with data with code that looks like this:

<pre><code>NSURL *url = [NSURL URLWithString:myURLString];
NSURLRequest *request = [NSURLRequest requestWithURL:url];
[_webView setDelegate:self];
[_webView loadRequest:request];
</code></pre>

This used to work fine with HTTP requests, but now we are using HTTPS against a server with a self-signed SSL certificate. When the above is run, the <code>webView:didFailLoadWithError:</code> delegate method gets called, with this error:

<blockquote>
 The certificate for this server is invalid. You might be connecting to a server that is pretending to be "blah.blah.blah.com" which could put your confidential information at risk."
</blockquote>

I would like to simply ignore the invalid certificate and go on with the request, as one can do in Mobile Safari.

I have seen how to work around this issue when using <code>NSURLConnection</code> (see <a href="https://stackoverflow.com/questions/4861103/https-request-on-old-iphone-3g">HTTPS request on old iphone 3g</a>, for example), but what can one do with a <code>UIWebView</code>?

I imagine that I could rework the code so that it uses <code>NSURLConnection</code> to make the requests and then puts the results into the web view by calling its <code>loadHTMLString:baseURL:</code> method, but that's going to get complicated when the pages have images, CSS, JavaScript, and so on. Is there an easier way?

Ignoring Invalid Server Certificates with UIWebView

翻译质量差，导致语言生硬或混乱。

没有提供实际的解决方法或示例。

解答不清晰，无法理解或解决问题。

页面排版不美观，阅读体验差。

文章

问答

视频

学习中心

腾讯云实验室

直播

竞赛

腾讯云代码分析专区

腾讯iOA零信任安全管理系统专区

腾讯云架构师技术同盟交流圈

腾讯云数据库专区

腾讯云顾问专区

腾讯云原生专区

腾讯混元专区

腾讯云TCE专区

腾讯云Lighthouse专区

腾讯云HAI专区

腾讯云Edgeone专区

腾讯云存储专区

腾讯云智能专区

腾讯轻联专区 

腾讯云开发专区

TAPD专区

腾讯轻量云游戏服专区

腾讯云最具价值专家

腾讯云架构师技术同盟

腾讯云创作之星

腾讯云开发者先锋

腾讯云代码助手

云原生构建

TAPD 敏捷项目管理

Cloud Studio

SDK中心

API中心

命令行工具

涵盖代码开发、场景应用、自动测试全流程，助你从零构建专属AI助手

一站式MCP教程库，解锁AI应用新玩法

我们有一个iOS应用程序，它使用UIWebView来显示内容。我们用如下代码加载数据：NSURL *url = [NSURL URLWithString:myURLString];NSURLRequest *request = [NSURLRequest requestWithURL:url];[_webView se...

问使用UIWebView忽略无效的服务器证书
EN

Stack Overflow用户

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问使用UIWebView忽略无效的服务器证书EN