Android 7 不允许我的 LetsEncrypt SSL 证书

Question

我将 nginx 与我自己的 SSL 证书链一起使用，但我遇到了 android 7 的问题。我不明白this solution .

我的 nginx 配置是:

server {

   listen 443 ssl;
   listen [::]:443 ssl;
   ssl_certificate /etc/letsencrypt/live/server.mydomain.cloud/fullchain.pem;
   ssl_certificate_key /etc/letsencrypt/live/server.mydomain.com/privkey.pem;
   include snippets/ssl-params.conf;

我该怎么办？谢谢!

Answer 1

我的解决方案，现在可以使用了:

      ConnectionSpec spec = new ConnectionSpec.Builder(ConnectionSpec.MODERN_TLS)
           .tlsVersions(TlsVersion.TLS_1_2)
           .cipherSuites(
                   CipherSuite.TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, //aws ssl
                   CipherSuite.TLS_DHE_RSA_WITH_AES_256_CBC_SHA) //letsencrypt
           .build();

   OkHttpClient.Builder builder = new OkHttpClient.Builder()
           .connectionSpecs(Collections.singletonList(spec))
           .addInterceptor(new HttpLoggingInterceptor().setLevel(HttpLoggingInterceptor.Level.BODY));

   Parse.initialize(new Parse.Configuration.Builder(getApplicationContext())
           .clientBuilder(builder)
           .applicationId("")
           .clientKey("")
           .server("")
           .build());