最近,SSL证书被添加到服务器上,因此我已经将android中的url从http://appname.com更改为https://www.appname.com,这在棉花糖设备和邮递员上运行良好,但在Lollipop设备上抛出javax.net.ssl.SSLException: hostname证书不匹配: www.appname.com != www.companyname.com或www.companyname.com或companyname.com
我尝试过在companyname.com中添加setHostnameVerifier,但是没有帮助。以下是代码:
HashMap<String, String> postDataParams=new HashMap<>();
postDataParams.put("u_phone",CN);
postDataParams.put("u_code",st);
postDataParams.put("device_flag",mob_device);
postDataParams.put("app_type","PRO");
HostnameVerifier hostnameVerifier = new HostnameVerifier() {
@Override
public boolean verify(String hostname, SSLSession session) {
HostnameVerifier hv =
HttpsURLConnection.getDefaultHostnameVerifier();
return hv.verify("companyname.com", session);
}
};
try{
URL url = new URL("https://www.appname.com/sync/validatecheck.php");
HttpsURLConnection urlConnection =
(HttpsURLConnection)url.openConnection();
//urlConnection.setHostnameVerifier(hostnameVerifier);
urlConnection.setReadTimeout(10000);
urlConnection.setConnectTimeout(15000);
urlConnection.setRequestMethod("POST");
urlConnection.setDoInput(true);
urlConnection.setDoOutput(true);
OutputStream os = urlConnection.getOutputStream();
BufferedWriter writer = new BufferedWriter(
new OutputStreamWriter(os, "UTF-8"));
writer.write(getPostDataString(postDataParams));
writer.flush();
writer.close();
os.close();
int responseCode=urlConnection.getResponseCode();
if (responseCode == HttpsURLConnection.HTTP_OK) {
String line;
BufferedReader br=new BufferedReader(new InputStreamReader(urlConnection.getInputStream()));
while ((line=br.readLine()) != null) {
result+=line;
}
}
else {
result="";
}
} catch (Exception e) {
Log.e("log_tag", "Error in http connection "+e.toString());
}
这里可能有什么问题?以及如何解决这个问题?
发布于 2017-03-30 12:02:29
此错误意味着已颁发证书的主机名(subject中的CN字段)与服务器名不匹配。
如果您使用的是URL https://www.appname.com
,那么证书应该颁发给www.appname.com
或*.appname.com
。证书的主机名为appname.com
,则错误是正确的,您可以使用https://appname.com
,但不能使用https://www.appname.com.
。
在https://appname.com
中部署服务器,为www.appname.com
颁发新证书或设置允许www.appname.com
的HostnameVerifier
https://stackoverflow.com/questions/43090874
复制相似问题