android - com.android.org.conscrypt.OpenSSLX509Certificate 无法转换为 java.security.Certificate

Question

        CertificateFactory cf = CertificateFactory.getInstance("X.509");
        AssetManager assetManager = MyApp.getAppContext().getAssets();
        InputStream caInput = assetManager.open("cert.pem");
        Certificate ca = null;
        try {
            ca = (Certificate) cf.generateCertificate(caInput);
            System.out.println("ca=" + ((X509Certificate) ca).getSubjectDN());
        } catch(Exception er)
        {
            System.out.println("ssdad222a "+er.getMessage());
        }finally {
            caInput.close();
        }
        String keyStoreType = KeyStore.getDefaultType();
        KeyStore keyStore = KeyStore.getInstance(keyStoreType);
        keyStore.load(null, null);
        keyStore.setCertificateEntry("ca", (java.security.cert.Certificate) ca);
        String tmfAlgorithm = TrustManagerFactory.getDefaultAlgorithm();
        TrustManagerFactory tmf = TrustManagerFactory.getInstance(tmfAlgorithm);
        tmf.init(keyStore);
        SSLContext context = SSLContext.getInstance("TLS");
        context.init(null, tmf.getTrustManagers(), null);       
        return context;

所以我得到 09-10 22:18:35.329: I/System.out(18269): ssdad222a com.android.org.conscrypt.OpenSSLX509Certificate cannot be cast to java.security.Certificate ，每当我使用证书时出错。我得到的 pem 或 cert.der 文件。错误是什么，解决方法是什么？

Answer 1

从错误消息来看，您似乎正在导入已弃用的 java.security.Certificate 类。这应该更改为 java.security.cert.Certificate。但是，您可以直接转换为 X509Certificate，因为您正在请求“X.509”CertificateFactory 的实例。它不会返回 X509Certificate 实例以外的任何内容。