我们在MobileFirst 7.1.0.00.20170627-0807上运行移动混合项目。
ANDROID版本4.4.2和更早版本无法使用HTTPS连接到服务器,如果只有TLS 1.2已启用
在连接到worklight服务器时获取客户端日志。
07-25 06:13:06.236: W/System.err(4251): javax.net.ssl.SSLPeerUnverifiedException: No peer certificate
07-25 06:13:06.236: W/System.err(4251): at com.android.org.conscrypt.SSLSessionImpl.getPeerCertificates(SSLSessionImpl.java:146)
07-25 06:13:06.236: W/System.err(4251): at org.apache.http.conn.ssl.AbstractVerifier.verify(AbstractVerifier.java:93)
07-25 06:13:06.236: W/System.err(4251): at com.worklight.wlclient.certificatepinning.HostNameVerifierWithCertificatePinning.verify(HostNameVerifierWithCertificatePinning.java:42)
07-25 06:13:06.236: W/System.err(4251): at com.worklight.wlclient.TLSSniEnabledSocketFactory.createSocket(TLSSniEnabledSocketFactory.java:94)
07-25 06:13:06.236: W/System.err(4251): at org.apache.http.impl.conn.DefaultClientConnectionOperator.openConnection(DefaultClientConnectionOperator.java:165)
07-25 06:13:06.236: W/System.err(4251): at org.apache.http.impl.conn.AbstractPoolEntry.open(AbstractPoolEntry.java:164)
07-25 06:13:06.236: W/System.err(4251): at org.apache.http.impl.conn.AbstractPooledConnAdapter.open(AbstractPooledConnAdapter.java:119)
07-25 06:13:06.236: W/System.err(4251): at org.apache.http.impl.client.DefaultRequestDirector.execute(DefaultRequestDirector.java:360)
07-25 06:13:06.236: W/System.err(4251): at org.apache.http.impl.client.AbstractHttpClient.execute(AbstractHttpClient.java:555)
07-25 06:13:06.236: W/System.err(4251): at org.apache.http.impl.client.AbstractHttpClient.execute(AbstractHttpClient.java:487)
07-25 06:13:06.236: W/System.err(4251): at com.worklight.wlclient.WLRequestSender.run(WLRequestSender.java:47)
07-25 06:13:06.236: W/System.err(4251): at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1112)
07-25 06:13:06.236: W/System.err(4251): at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:587)
07-25 06:13:06.236: W/System.err(4251): at java.lang.Thread.run(Thread.java:841)
07-25 06:13:06.316: D/wl.certManager(4251): WLCertManager.clearKeystore in WLCertManager.java:262 :: Key store cleared.
07-25 06:13:06.636: D/wl.certManager(4251): WLCertManager.clearKeystore in WLCertManager.java:262 :: Key store cleared.
07-25 06:13:06.666: W/PluginManager(4251): THREAD WARNING: exec() call to WLAuthorizationManagerPlugin.getClientInstanceIdHeader blocked the main thread for 26ms. Plugin should use CordovaInterface.getThreadPool().
我们正在使用已经拥有支持TLS1.2的客户端SDK的mobilefirst iFix。 我是否需要在客户端/服务器端更改任何内容?