Question

嗨，我想尝试从HTTPS网址获取请求。但我不断得到错误。

2017-10-13 18:13:43.372427+0800 VQ Smart Home[13412:2155414] Unknown class _TtC13VQ_Smart_Home16ManageUserstable in Interface
构建器文件。 2017-10-13 18：13：43.403238 + 0800 VQ Smart Home [13412：2155471] TIC SSL Trust Error [6：0x604000167680]：3：0 2017-10-13 18：13：43.403672 + 0800 VQ Smart Home [13412：2155471] NSURLSession / NSURLConnection HTTP加载失败（kCFStreamErrorDomainSSL，-9813） 2017-10-13 18：13：43.404000 + 0800 VQ智能家居[13412：2155471]任务＆lt; 8BB05664-B56E-41CA-92F7-BBAECC8008E3＆gt;。＆lt; 5＆gt; HTTP加载失败（错误代码：-1202 [3：-9813]） 2017-10-13 18：13：43.404496 + 0800 VQ智能家居[13412：2155472]任务＆lt; 8BB05664-B56E-41CA-92F7-BBAECC8008E3＆gt;。＆lt; 5＆gt;。完成错误 - 代码： -1202 error =可选（错误域= NSURLErrorDomain代码= -1202＆＃34;此服务器的证书无效。您可能正在连接到假装是“202.73.46.176”的服务器可能会把你的有风险的机密信息。＆＃34; UserInfo = {NSURLErrorFailingURLPeerTrustErrorKey =，NSLocalizedRecoverySuggestion =你想要吗？无论如何连接到服务器？，_kCFStreamErrorDomainKey = 3， _kCFStreamErrorCodeKey = -9813，NSErrorPeerCertificateChainKey =（＆＃34;＆＃34; ），NSUnderlyingError = 0x60400025c920 {错误域= kCFErrorDomainCFNetwork代码= -1202＆＃34;（null）＆＃34; 的UserInfo = {_ kCFStreamPropertySSLClientCertificateState = 0， kCFStreamPropertySSLPeerTrust =， _kCFNetworkCFStreamSSLErrorOriginalValue = -9813，_kCFStreamErrorDomainKey = 3，_kCFStreamErrorCodeKey = -9813，kCFStreamPropertySSLPeerCertificates =（＆＃34;＆＃34; ）}，NSLocalizedDescription =此服务器的证书无效。您可能正在连接到假装的服务器 “202.73.46.176”可以提供您的机密信息风险。， NSErrorFailingURLKey = https://202.73.46.176/api/v1/user/find/all/1， NSErrorFailingURLStringKey = https://202.73.46.176/api/v1/user/find/all/1， NSErrorClientCertificateStateKey = 0}）

viewDidLoad中

let urlstr: String = "https://202.73.46.176/api/v1/user/find/all/1"

let request = NSMutableURLRequest(url: NSURL(string: urlstr)! as URL)
request.httpMethod = "GET"
let postString = ""
request.httpBody = postString.data(using: String.Encoding.utf8)

let task = URLSession.shared.dataTask(with: request as URLRequest) {
    data, response, error in
    if error != nil {
        print("error=\(error)")
        return
    }
    print("response = \(response)")

    let responseString = NSString(data: data!, encoding: String.Encoding.utf8.rawValue)
    print("responseString = \(responseString)")
}
task.resume()

方式

    func urlSession(_ session: URLSession, didReceive challenge: URLAuthenticationChallenge, completionHandler: @escaping (URLSession.AuthChallengeDisposition, URLCredential?) -> Void) {
        //Implementation 1: VERY WEAK METHOD
        /*if challenge.previousFailureCount > 0{
         completionHandler(URLSession.AuthChallengeDisposition.cancelAuthenticationChallenge, nil)
         }else{
         completionHandler(URLSession.AuthChallengeDisposition.useCredential, URLCredential(trust:challenge.protectionSpace.serverTrust!))
         }*/

        //Implementation 2:
        var disposition: URLSession.AuthChallengeDisposition = URLSession.AuthChallengeDisposition.performDefaultHandling
        var credential:URLCredential?

        if challenge.protectionSpace.authenticationMethod == NSURLAuthenticationMethodServerTrust {
            //certificate-based server credentials are used when verifying the server’s identity
            credential = URLCredential(trust: challenge.protectionSpace.serverTrust!)

            if (credential != nil) {
                disposition = URLSession.AuthChallengeDisposition.useCredential
            }
            else{
                disposition = URLSession.AuthChallengeDisposition.performDefaultHandling
            }
        }
        else{
            disposition = URLSession.AuthChallengeDisposition.cancelAuthenticationChallenge
        }
        print("==============", #function,"  disposition: ", disposition)
        print("==============", #function,"  disposition: ", credential!)

        //completionHandler(disposition, credential);




        //Implementation 3:
        let serverTrust = challenge.protectionSpace.serverTrust
        let certificate = SecTrustGetCertificateAtIndex(serverTrust!, 0)

        // Set SSL policies for domain name check
        let policies = NSMutableArray();
        policies.add(SecPolicyCreateSSL(true, (challenge.protectionSpace.host as CFString)))
        SecTrustSetPolicies(serverTrust!, policies);

        // Evaluate server certificate
        var result = SecTrustResultType(rawValue: 0)!
        SecTrustEvaluate(serverTrust!, &result)

        let isServerTrusted:Bool = (result == SecTrustResultType.unspecified || result == SecTrustResultType.unspecified || result == SecTrustResultType.proceed)
        print("==============",#function,"  isServerTrusted: ", isServerTrusted)
        print("==============", #function,"  result: ", result.hashValue,"  SecTrustResultType.unspecified: ", SecTrustResultType.unspecified.hashValue,"  SecTrustResultType.proceed: ", SecTrustResultType.proceed.hashValue)
        var certName = ""
//        if self.isSimulatingCertificateCorruption {
//            certName = corruptedCert
//        } else {
//            certName = cert
//        }

        // Get local and remote cert data
        let remoteCertificateData = SecCertificateCopyData(certificate!) as Data
        let pathToCert            = Bundle.main.path(forResource: certName, ofType: "der")
        let localCertificate      = try! Data(contentsOf: URL(fileURLWithPath: pathToCert!))
        print(" remoteCertificateData: ", remoteCertificateData,"       localCertificate: ", localCertificate, "       serverTrust: ", serverTrust.debugDescription  )

        if ( remoteCertificateData == localCertificate) { //TODO:- this is strictly for tesing puposes, to allow untrusted severs. REMOVE IN PRODUCTION.
            let credential:URLCredential = URLCredential(trust: serverTrust!)
            completionHandler(.useCredential, credential)
        }else if (isServerTrusted && (remoteCertificateData == localCertificate)) {
            let credential:URLCredential = URLCredential(trust: serverTrust!)
            completionHandler(.useCredential, credential)
        } else {
            completionHandler(.cancelAuthenticationChallenge, nil)
        }
    }

有人可以帮我解决这个问题。

Answer 1

我找到了更好的答案..

创建 SecurityCertificateManager

import Foundation
import Alamofire


class SecurityCertificateManager {
    static let sharedInstance = SecurityCertificateManager()

    let defaultManager: Alamofire.SessionManager = {
        let serverTrustPolicies: [String: ServerTrustPolicy] = [
            "12.3.3.3": .disableEvaluation
        ]

        let configuration = URLSessionConfiguration.default
        configuration.httpAdditionalHeaders = Alamofire.SessionManager.defaultHTTPHeaders

        return Alamofire.SessionManager(
            configuration: configuration,
            serverTrustPolicyManager: ServerTrustPolicyManager(policies: serverTrustPolicies)
        )
    }()
}

并像这样称呼它

        let service = CommanLinksUtility().getServiceAuthUrl()
        let ticket = UserDefaults.standard.value(forKey: "servicket") as! String
        let baseUrl = "https://12.3.3.3:5051/api/v1/user/find/all/1"
        let header = [ "content-type" : "application/json", "url": service,  "ticket" : ticket ]

      SecurityCertificateManager.sharedInstance.defaultManager.request(baseUrl, method: .get, parameters: header as? [String : AnyObject], encoding: URLEncoding.queryString, headers: header)
            .responseJSON { response in
                let jsonResult = JSON(data: response.data!)
                for anItem in jsonResult["result"].arrayValue {

                }

}

Answer 2

您收到该错误是因为您的服务器没有SSL证书，因此它不受信任

＆＃34;此服务器的证书无效。您可能连接到假装为“202.73.46.176”的服务器，这可能会使您的机密信息处于危险之中。＆＃34;`

仅此部分错误就足以了解正在发生的事情。一旦安装了受信任的正确有效证书，错误就会消失。您也可以通过在plist

中指定它来忽略它

<key>NSAppTransportSecurity</key>
<dict>
    <key>NSExceptionDomains</key>
    <dict>
        <key>yourdomain.com</key>
        <dict>
            <!--Include to allow subdomains-->
            <key>NSIncludesSubdomains</key>
            <true/>
            <!--Include to allow HTTP requests-->
            <key>NSTemporaryExceptionAllowsInsecureHTTPLoads</key>
            <true/>
            <!--Include to specify minimum TLS version-->
            <key>NSTemporaryExceptionMinimumTLSVersion</key>
            <string>TLSv1.1</string>
        </dict>
    </dict>
</dict>

但我不会这样做，只是为您的服务器获取SSL证书

从How can I add NSAppTransportSecurity to my info.plist file?引用.plist键

Answer 3

您可以使用AFNETWorking或Almofire库

Swift 3 HTTPS GET请求

3 个答案: