git commit -m "xingePush#19 增加缺省信任证书管理器。缺省信任证书管理器 信任任何服务器证书， 用户也可以自定义信任证书管理器，并通过setTrustManager 接口进行设置"

bulezeng(曾卫进) · bulezeng(曾卫进) · commit 9c309bb443af · 2018-10-11T09:33:58.000+08:00
diff --git a/src/main/java/com/tencent/xinge/DefaultX509TrustManager.java b/src/main/java/com/tencent/xinge/DefaultX509TrustManager.java
@@ -0,0 +1,32 @@
+package com.tencent.xinge;
+
+
+
+import javax.net.ssl.X509TrustManager;
+import java.security.cert.CertificateException;
+import java.security.cert.X509Certificate;
+
+/**
+ * ȱʡ���ι�����
+ */
+
+class DefaultX509TrustManager implements X509TrustManager {
+
+
+    @Override
+    public void checkClientTrusted(X509Certificate[] x509Certificates, String s) throws CertificateException {
+
+    }
+
+    @Override
+    public void checkServerTrusted(X509Certificate[] x509Certificates, String s) throws CertificateException {
+
+    }
+
+    public X509Certificate[] getAcceptedIssuers() {
+        return null;
+    }
+
+
+
+}
diff --git a/src/main/java/com/tencent/xinge/XingeApp.java b/src/main/java/com/tencent/xinge/XingeApp.java
@@ -5,16 +5,16 @@
 import java.net.HttpURLConnection;
 import java.net.MalformedURLException;
 import java.net.URL;
+import java.security.KeyManagementException;
+import java.security.NoSuchAlgorithmException;
 
 import com.tencent.xinge.push.app.PushAppRequest;
 import org.apache.commons.codec.binary.Base64;
 import org.json.JSONObject;
 
 import com.tencent.xinge.api.RESTAPI_V3;
 
-import javax.net.ssl.HostnameVerifier;
-import javax.net.ssl.HttpsURLConnection;
-import javax.net.ssl.SSLSession;
+import javax.net.ssl.*;
 
 /**
  * 提供V3接口<br>
@@ -29,6 +29,7 @@ public class XingeApp {
 
     private String authString = null;
     private String authStringEnc = null;
+    X509TrustManager trustManager = new DefaultX509TrustManager();
 
     /**
      * HTTP Header Authorization 的值：Basic base64_auth_string<br>
@@ -104,8 +105,9 @@ private synchronized JSONObject callRestful(String apiAddress, String jsonReques
             https.setReadTimeout(10000);
             https.setRequestProperty("Content-Type", "application/json");
             https.setRequestProperty("Authorization", "Basic " + authStringEnc);
-            https.setRequestProperty("Connection", "Keep-Alive ");
+            https.setRequestProperty("Connection", "Keep-Alive");
 
+            https.setSSLSocketFactory(this.getSSLSocketFactory());
 
           byte[] out = jsonRequestString.getBytes(Charsets.UTF_8);
             int length = out.length;
@@ -152,6 +154,14 @@ private synchronized JSONObject callRestful(String apiAddress, String jsonReques
             jsonRet.put("ret_code", 10101);
             jsonRet.put("err_msg", stringifyError(e));
             
+        } catch (NoSuchAlgorithmException e) {
+            jsonRet = new JSONObject();
+            jsonRet.put("ret_code", 10102);
+            jsonRet.put("err_msg", stringifyError(e));
+        } catch (KeyManagementException e) {
+            jsonRet = new JSONObject();
+            jsonRet.put("ret_code", 10103);
+            jsonRet.put("err_msg", stringifyError(e));
         } finally {
             if (br != null) {
                 try {
@@ -183,6 +193,22 @@ public static String stringifyError(Throwable error) {
         return result.toString();
     }
 
+    private SSLSocketFactory getSSLSocketFactory() throws KeyManagementException, NoSuchAlgorithmException {
+        TrustManager[] tm = {this.trustManager};
+        SSLContext sslContext = SSLContext.getInstance("TLSv1");
+        sslContext.init(null, tm, new java.security.SecureRandom());
+        SSLSocketFactory ssf  = sslContext.getSocketFactory();
+        return ssf;
+    }
+
+    /**
+     * 设置证书信任管理器
+     * @param trustManager
+     */
+    public void setTrustManager(X509TrustManager trustManager) {
+        this.trustManager = trustManager;
+    }
+
     public class TrustAnyHostnameVerifier implements HostnameVerifier {
         public boolean verify(String hostname, SSLSession session) {
             // 直接返回true
