我正在尝试使用Poco Libraries(版本poco-1.4.6p1-all)在C ++中编写客户端应用程序,并在Visual Studio 2010中编译,它将HTTPS请求发送到具有自写证书的服务器。我有一个错误,因为证书无法识别:
First-chance exception at 0x76e8c41f in httprequest.exe: Microsoft C++ exception: Poco::Net::SSLException at memory location 0x0044ed38..
我尝试更改库中编写的验证函数(在X509Certificate.h中),以便它们始终返回true并重建库。同样的错误。
以下是代码:
try{
const Poco::URI uri("https://www.theServer.com");
Poco::Net::Context::Ptr context =
new Poco::Net::Context(Poco::Net::Context::CLIENT_USE, "",
"","",Poco::Net::Context::VERIFY_RELAXED,
9, true, "ALL:!ADH:!LOW:!EXP:!MD5:@STRENGTH");
Poco::SharedPtr<Poco::Net::InvalidCertificateHandler> pAcceptCertHandler = new Poco::Net::AcceptCertificateHandler(true);
Poco::Net::SSLManager::instance().initializeClient(NULL, pAcceptCertHandler, context);
Poco::Net::HTTPSClientSession session(uri.getHost(), uri.getPort(), context );
Poco::Net::HTTPRequest req(Poco::Net::HTTPRequest::HTTP_GET, "" );
req.setContentType("application/x-javascript; charset=utf-8\r\n");
req.setKeepAlive(true);
Poco::Net::HTTPBasicCredentials cred("lala@lala.lala", "lala");
cred.authenticate(req);
session.sendRequest(req);
Poco::Net::HTTPResponse res;
std::istream& rs = session.receiveResponse(res);
std::string resp;
std::vector<Poco::Net::HTTPCookie> cookies;
res.getCookies( cookies );
res.write(std::cout);
}
catch( const Poco::Net::SSLException& e )
{
std::cerr << e.what() << ": " << e.message() << std::endl;
}
catch( const std::exception& e )
{
std::cerr << e.what() << std::endl;;
}
谢谢!
答案 0 :(得分:9)
我找到了答案。我没有真正拿到证书。它的工作原理如下:
try{
Poco::Net::initializeSSL();
Poco::SharedPtr<Poco::Net::InvalidCertificateHandler> ptrHandler = new AcceptCertificateHandler(false);
Context::Ptr ptrContext = new Context(Context::CLIENT_USE, "", "", "", Context::VERIFY_RELAXED, 9, true, "ALL:!ADH:!LOW:!EXP:!MD5:@STRENGTH");
SSLManager::instance().initializeClient(0, ptrHandler, ptrContext);
Poco::Net::SocketAddress address("www.server.com:443");
Poco::Net::SecureStreamSocket socket(address);
if (socket.havePeerCertificate())
{
X509Certificate cert = socket.peerCertificate();
std::cout<<cert.issuerName()<<"\n";
}
else
{
std::cout<<"No certificate";
}
}catch (Poco::Exception& e) {
std::cout << "Error: " << e.displayText() << "\n";
return -1;
}