java - Android 中针对 Salesforce Web 服务的 SSL 证书问题

Question

获得:

javax.net.ssl.SSLPeerUnverifiedException: No peer certificate error in Android for a web service.

我分析了我的 keystore 中缺少证书的问题。这个“https://www.salesforce.com/servlet/servlet.WebToLead?encoding=UTF-8”网络服务在我的 salesforce 组织上，但是我如何从 Salesforce 获得证书，我可以将它添加到我在 android 中的 KeyStore？

如果有人觉得有帮助，下面是我的目录。

我已经检查了这个链接“'No peer certificate' error in Android 2.3 but NOT in 4”，但在此之前我需要在我的原始文件夹中有一个证书，如果没有任何证书我该怎么做。我的应用程序中需要 Salesforce 客户端证书。

`08-13 10:53:04.150    9152-9931/scrapos.techila.com.scrapos W/System.err﹕
 javax.net.ssl.SSLPeerUnverifiedException: No peer certificate
 08-13 10:53:04.150    9152-9931/scrapos.techila.com.scrapos W/System.err﹕ 
 at org.apache.harmony.xnet.provider.jsse.SSLSessionImpl.getPeerCertificates(SSLSesionImpl.java:146)
 08-13 10:53:04.150    9152-9931/scrapos.techila.com.scrapos W/System.err﹕ at  org.apache.http.conn.ssl.AbstractVerifier.verify(AbstractVerifier.java:92)
 08-13 10:53:04.150    9152-9931/scrapos.techila.com.scrapos W/System.err﹕ at  org.apache.http.conn.ssl.SSLSocketFactory.createSocket(SSLSocketFactory.java:387)
 08-13 10:53:04.150    9152-9931/scrapos.techila.com.scrapos W/System.err﹕ at org.apache.http.impl.conn.DefaultClientConnectionOperator.openConnection(DefaultClientConnectionOperator.java:165)
 08-13 10:53:04.150    9152-9931/scrapos.techila.com.scrapos W/System.err﹕ at org.apache.http.impl.conn.AbstractPoolEntry.open(AbstractPoolEntry.java:164)
 08-13 10:53:04.150    9152-9931/scrapos.techila.com.scrapos W/System.err﹕ at org.apache.http.impl.conn.AbstractPooledConnAdapter.open(AbstractPooledConnAdapter.java:119)
 08-13 10:53:04.150    9152-9931/scrapos.techila.com.scrapos W/System.err﹕ at org.apache.http.impl.client.DefaultRequestDirector.execute(DefaultRequestDirector.java:360)
 08-13 10:53:04.150    9152-9931/scrapos.techila.com.scrapos W/System.err﹕ at org.apache.http.impl.client.AbstractHttpClient.execute(AbstractHttpClient.java:555)
 08-13 10:53:04.150    9152-9931/scrapos.techila.com.scrapos W/System.err﹕ at org.apache.http.impl.client.AbstractHttpClient.execute(AbstractHttpClient.java:487)
 08-13 10:53:04.160    9152-9931/scrapos.techila.com.scrapos W/System.err﹕ at org.apache.http.impl.client.AbstractHttpClient.execute(AbstractHttpClient.java:465)
 08-13 10:53:04.160    9152-9931/scrapos.techila.com.scrapos W/System.err﹕ at scrapos.techila.com.scrapos.MainActivity$RequestDate.doInBackground(MainActivity.java:342)
 08-13 10:53:04.160    9152-9931/scrapos.techila.com.scrapos W/System.err﹕ at scrapos.techila.com.scrapos.MainActivity$RequestDate.doInBackground(MainActivity.java:311)
 08-13 10:53:04.160    9152-9931/scrapos.techila.com.scrapos W/System.err﹕ at android.os.AsyncTask$2.call(AsyncTask.java:287)
 08-13 10:53:04.160    9152-9931/scrapos.techila.com.scrapos W/System.err﹕ at java.util.concurrent.FutureTask$Sync.innerRun(FutureTask.java:305)
 08-13 10:53:04.160    9152-9931/scrapos.techila.com.scrapos W/System.err﹕ at java.util.concurrent.FutureTask.run(FutureTask.java:137)
 08-13 10:53:04.160    9152-9931/scrapos.techila.com.scrapos W/System.err﹕ at android.os.AsyncTask$SerialExecutor$1.run(AsyncTask.java:230)
 08-13 10:53:04.160    9152-9931/scrapos.techila.com.scrapos W/System.err﹕ at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1076)
 08-13 10:53:04.170    9152-9931/scrapos.techila.com.scrapos W/System.err﹕ at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:569)
 08-13 10:53:04.170    9152-9931/scrapos.techila.com.scrapos W/System.err﹕ at java.lang.Thread.run(Thread.java:856)
 08-13 10:53:27.240    9152-9152/scrapos.techila.com.scrapos W/IInputConnectionWrapper﹕ getSelectedText on inactive InputConnection
 08-13 10:53:27.240    9152-9152/scrapos.techila.com.scrapos W/IInputConnectionWrapper﹕ setComposingText on inactive InputConnection
 08-13 10:53:27.240    9152-9152/scrapos.techila.com.scrapos W/IInputConnectionWrapper﹕ getExtractedText on inactive InputConnection` 

Answer 1

Android 有一组受信任的 CA 证书列表，您可以在设置 -> 安全 -> 受信任的凭据下看到它。旧版本的 android 没有一些 CA 证书并成为此类错误的原因。您可以根据 android 版本修改您的代码。如果版本低于 2.3，则使用自己的信任库传递证书 [网络上可用的示例]，否则使用您的 CA 证书。