java - Google Play 商店接受自签名证书应用吗？

Question

我是开发 Android 应用程序的新手。它实现了套接字连接，并且必须绕过或允许所有主机才能使用我们安装在服务器上的自签名证书。我听说 Google Play 商店在已发布的应用程序中不接受这种连接。这是真的吗？或者还有另一种方法可以做到吗？谢谢。

Answer 1

and had to bypass or allow all host in order to work with our self-signed certificate installed on server

从安全的角度来看，这并不是一个特别好的举动。

I heard that google play store doesnt accept this kind of connection in the published app

Play 商店已禁止绕过 SSL 有效性检查并盲目接受所有传入 SSL 证书的应用。

Or there is another way to do it ?

Android 7.0+ 有 support for self-signed certificates 。我backported that code适用于 Android 4.2+。还有其他库提供自签名证书支持，例如 this one 。已有articles written on using self-signed certificates .