keytool 生成 Android SSL 使用的 BKS

我是在Mac(JDK 1.6) 环境下生成的,Windows  也应该通用;

首先要从CA那里申请来签名的证书,我的是crt格式的;

然后使用如下命令,对应的BcProvider 是 bcprov-ext-jdk15on-146.jar ,放在 JDK 的lib 里面,其他版本貌似不可以.

keytool -import -alias 别名 -file 证书文件.crt -keystore 新建的BKS.keystore -storepass 密码 -storetype BKS -providername "BC"

真样就会在我的当前命令行目录生成一个keystore文件,密码是命令中指定的.

然后这个keystore 就可以放入Android 项目的res/raw 目录下了.

使用代码:

public class HTTPS {
    public static DefaultHttpClient httpclient;
    static HttpClient hc;
    static boolean isInit = false;


    //初始化
    public synchronized static void initKey(Context ctx) { 
        hc = new DefaultHttpClient(); 
        KeyStore trustStore;
        try {
            trustStore = KeyStore.getInstance("BKS");
            trustStore.load(ctx.getResources().openRawResource(R.raw.anyKeystore), "password".toCharArray()); 

            SSLSocketFactory socketFactory = new SSLSocketFactory(trustStore); 
            //不进行域名验证
            socketFactory.setHostnameVerifier(new X509HostnameVerifier() { 
                @Override
                public boolean verify(String arg0, SSLSession arg1) { 
                    return true;
                }
                @Override
                public void verify(String arg0, SSLSocket arg1)
                        throws IOException {
                }
                @Override
                public void verify(String arg0, X509Certificate arg1)
                        throws SSLException {
                }
                @Override
                public void verify(String arg0, String[] arg1, String[] arg2)
                        throws SSLException {
                }
            });

            Scheme sch = new Scheme("https", socketFactory, 8443); 
            hc.getConnectionManager().getSchemeRegistry().register(sch);
        } catch (Exception e) {
            e.printStackTrace();
        } 

    } 

    public static String getData(String url) { 

        HttpUriRequest hr = new HttpGet(url); 
        HttpParams httpparams = new BasicHttpParams();
        HttpConnectionParams.setConnectionTimeout(httpparams, Utils.timeOut);
        HttpConnectionParams.setSoTimeout(httpparams, 15000);

        hr.setParams(httpparams);

        HttpResponse hres = null;
        StringBuffer sb = null;
        try {
            hres = hc.execute(hr);
            HttpEntity he = hres.getEntity(); 
            InputStream is = he.getContent(); 
            sb = new StringBuffer(); 
            byte[] bytes = new byte[1024]; 
            for (int len = 0; (len = is.read(bytes)) != -1;) { 
                sb.append(new String(bytes, 0, len, "utf-8")); 
            } 
        } catch (Exception e) {
            e.printStackTrace();
            return null;
        } 
        System.out.println(sb.toString());
        return sb.toString(); 
    } 

    public static String getData(String url,Context ctx) { 

        if(!isInit){
            initKey(ctx);
        }

        HttpUriRequest hr = new HttpGet(url); 
        HttpResponse hres = null;
        StringBuffer sb = null;
        try {
            hres = hc.execute(hr);
            HttpEntity he = hres.getEntity(); 
            InputStream is = he.getContent(); 
            sb = new StringBuffer(); 
            byte[] bytes = new byte[1024]; 
            for (int len = 0; (len = is.read(bytes)) != -1;) { 
                sb.append(new String(bytes, 0, len, "utf-8")); 
            } 
        } catch (Exception e) {
            e.printStackTrace();
            return null;
        } 
        return sb.toString(); 
    } 
}

在应用启动的时候init 一下就行了,以后直接使用HTTPS.getData(); 获取数据