Webview HTTPS握手失败

时间:2018-02-09 09:02:37

标签: java android ssl webview boringssl

我尝试使用WebView库从Android应用程序访问网站,所以我有:

import android.support.v7.app.AppCompatActivity;
import android.os.Bundle;
import android.webkit.SslErrorHandler;
import android.webkit.WebSettings;
import android.webkit.WebView;
import android.webkit.WebViewClient;

public class MainActivity extends AppCompatActivity {

    @Override
    protected void onCreate(Bundle savedInstanceState) {
        super.onCreate(savedInstanceState);
        setContentView(R.layout.activity_main);

        WebView myWebView = (WebView) findViewById(R.id.webview);
        WebSettings webSettings = myWebView.getSettings();
        webSettings.setJavaScriptEnabled(true);
        webSettings.setDomStorageEnabled(true);
        webSettings.setUseWideViewPort(true);
        webSettings.setLoadWithOverviewMode(true);
        webSettings.setJavaScriptCanOpenWindowsAutomatically(true);
        myWebView.setWebViewClient(
                new SSLTolerentWebViewClient()
        );
        myWebView.loadUrl("https://www.mywebsite.ro");
    }
}
class SSLTolerentWebViewClient extends WebViewClient {
    @Override
    public void onReceivedSslError(WebView view, SslErrorHandler handler, SslError error) {
        if (error.toString() == "piglet")
            handler.cancel();
        else
            handler.proceed(); // Ignore SSL certificate errors
    }
}

在调试中我有:

  

D / OpenSSLLib:OpensslErr:Module:20(119:258); file:external / openssl / ssl / s23_clnt.c; Line:714;功能:ssl23_get_server_hello

     

W / chromium:external / chromium / net / socket / ssl_client_socket_openssl.cc:171 [0209/105028:警告:ssl_client_socket_openssl.cc(171)]未映射的错误原因:258

     

E / chromium:external / chromium / net / socket / ssl_client_socket_openssl.cc:792 [0209/105028:ERROR:ssl_client_socket_openssl.cc(792)]握手失败;返回-1,SSL错误代码1,net_error -2

     

D / chromium / tcp:LogConnectCompletion,错误:-2

     

D / WebRequest:请求错误:-2

     

D /铬:未知的铬误差:-2

     

V / webview:setCertificate = null

     

V / webcore:setupViewport mRestoredScale = 0.0 mViewScale = 2.0 mTextWrapScale = 2.0 data.mScale = 2.0

     

V / webcore:viewSizeChanged w = 360; H = 559; textwrapWidth = 360;标度= 2.0

     

D / skia:标志不是10

3 个答案:

答案 0 :(得分:5)

此问题是因为4.4以下的android版本不支持新版本的TLS 1.1,TLS 1.2,几乎所有站点都使用这些版本。

此处是android版本和对TLS支持的列表。 enter image description here

答案 1 :(得分:3)

如果您没有将应用上传到Play商店,则可以忽略SSL证书错误:

@Override
public void onReceivedSslError(WebView view, SslErrorHandler handler, SslError error) {
    handler.proceed(); // Ignore SSL certificate errors
}

答案 2 :(得分:0)

请勿尝试在android webview中处理ssl错误网址,否则android您的应用将被Play商店拒绝

不要尝试handler.proceed();

执行此操作

@Override
public void onReceivedSslError(WebView view, SslErrorHandler handler, SslError error) {
          super.onReceivedSslError(view, handler, error);
          Log.e("onReceivedSslError", "-- " + error.getUrl() + " " + error.getCertificate() + " " + view.getUrl());
          showDialog(error.getUrl());
}

public void showDialog(String url) {
      AlertDialog.Builder alertDialog = new AlertDialog.Builder(this);
      alertDialog.setTitle("Error");
      alertDialog.setCancelable(false);
      alertDialog.setMessage("Getting SSL Error open in other browser");
      alertDialog.setPositiveButton("Ok", new DialogInterface.OnClickListener() {
          @Override
          public void onClick(DialogInterface dialog, int which) {
              openBrowser(WebViewActivity.this, url);
              dialog.dismiss();
          }
      });
      alertDialog.create().show();
  }




  public static void openBrowser(AppCompatActivity activity, String url) {
      Intent browserIntent = new Intent(Intent.ACTION_VIEW, Uri.parse(url));
      if (activity == null) return;
      if (browserIntent.resolveActivity(activity.getPackageManager()) != null) {
          activity.startActivity(Intent.createChooser(browserIntent, "Choose browser"));
      } else {
          showToast(activity, "No application can handle this request.\"\n" +
                  "        + \" Please install a webbrowser");
      }
  }