当前位置：首页 > 编程日记 > 正文

HTTPS网络加密双向验证-使用AFNetworking封装

编程日记 2024-12-15 15:30:00

1.首先使用OC封装请求头

#import <Foundation/Foundation.h>

#import "AFNetworking.h"

@interface HttpsHandler : NSObject

+ (AFHTTPSessionManager *)setHttpsMange;

@end

2.实现方法

+ (AFHTTPSessionManager *)setHttpsMange;

{

NSString *certFilePath = [[NSBundle mainBundle] pathForResource:@"mykey" ofType:@"cer"];

NSData *certData = [NSData dataWithContentsOfFile:certFilePath];

NSSet *certSet = [NSSet setWithObject:certData];

AFSecurityPolicy *policy = [AFSecurityPolicy policyWithPinningMode:AFSSLPinningModeNone withPinnedCertificates:certSet];

policy.allowInvalidCertificates = YES;//是否允许不信任的证书通过验证，默认为NO

policy.validatesDomainName = NO;//是否验证主机名，默认为YES

__weak AFHTTPSessionManager *_manager = [AFHTTPSessionManager manager];

_manager.securityPolicy = policy;

_manager.requestSerializer = [AFHTTPRequestSerializer serializer];

_manager.responseSerializer = [AFHTTPResponseSerializer serializer];

_manager.requestSerializer = [AFHTTPRequestSerializer serializer];

_manager.responseSerializer = [AFJSONResponseSerializer serializer];

[_manager.requestSerializer setValue:@"application/json" forHTTPHeaderField:@"Content-Type"];

_manager.responseSerializer.acceptableContentTypes = [NSSet setWithObject:@"application/json"];

[_manager.requestSerializer setValue:@"application/json" forHTTPHeaderField:@"Accept"];

_manager.responseSerializer.acceptableContentTypes = [NSSet setWithObjects:@"application/json", @"text/json", @"text/javascript", @"text/plain", @"text/html",@"application/text", nil];

//关闭缓存避免干扰测试r

_manager.requestSerializer.cachePolicy = NSURLRequestReloadIgnoringLocalCacheData;

[_manager setSessionDidBecomeInvalidBlock:^(NSURLSession * _Nonnull session, NSError * _Nonnull error) {

NSLog(@"setSessionDidBecomeInvalidBlock");

}];

//客户端请求验证重写 setSessionDidReceiveAuthenticationChallengeBlock 方法

__weak typeof(self)weakSelf = self;

[_manager setSessionDidReceiveAuthenticationChallengeBlock:^NSURLSessionAuthChallengeDisposition(NSURLSession*session, NSURLAuthenticationChallenge *challenge, NSURLCredential *__autoreleasing*_credential) {

NSURLSessionAuthChallengeDisposition disposition = NSURLSessionAuthChallengePerformDefaultHandling;

__autoreleasing NSURLCredential *credential =nil;

if([challenge.protectionSpace.authenticationMethod isEqualToString:NSURLAuthenticationMethodServerTrust]) {

if([_manager.securityPolicy evaluateServerTrust:challenge.protectionSpace.serverTrust forDomain:challenge.protectionSpace.host]) {

credential = [NSURLCredential credentialForTrust:challenge.protectionSpace.serverTrust];

if(credential) {

disposition =NSURLSessionAuthChallengeUseCredential;

} else {

disposition =NSURLSessionAuthChallengePerformDefaultHandling;

}

} else {

disposition = NSURLSessionAuthChallengeCancelAuthenticationChallenge;

}

} else {

// client authentication

SecIdentityRef identity = NULL;

SecTrustRef trust = NULL;

NSString *p12 = [[NSBundle mainBundle] pathForResource:@"mykey"ofType:@"p12"];

NSFileManager *fileManager =[NSFileManager defaultManager];

if(![fileManager fileExistsAtPath:p12])

{

NSLog(@"client.p12:not exist");

}

else

{

NSData *PKCS12Data = [NSData dataWithContentsOfFile:p12];

if ([[weakSelf class]extractIdentity:&identity andTrust:&trust fromPKCS12Data:PKCS12Data])

{

SecCertificateRef certificate = NULL;

SecIdentityCopyCertificate(identity, &certificate);

const void*certs[] = {certificate};

CFArrayRef certArray =CFArrayCreate(kCFAllocatorDefault, certs,1,NULL);

credential =[NSURLCredential credentialWithIdentity:identity certificates:(__bridge NSArray*)certArray persistence:NSURLCredentialPersistencePermanent];

disposition =NSURLSessionAuthChallengeUseCredential;

}

*_credential = credential;

return disposition;

}];

return _manager;

}

最后加上这些

+(BOOL)extractIdentity:(SecIdentityRef*)outIdentity andTrust:(SecTrustRef *)outTrust fromPKCS12Data:(NSData *)inPKCS12Data {

OSStatus securityError = errSecSuccess;

//client certificate password

NSDictionary*optionsDictionary = [NSDictionary dictionaryWithObject:@"password" forKey:(__bridge id)kSecImportExportPassphrase];

CFArrayRef items = CFArrayCreate(NULL, 0, 0, NULL);

securityError = SecPKCS12Import((__bridge CFDataRef)inPKCS12Data,(__bridge CFDictionaryRef)optionsDictionary,&items);

if(securityError == 0) {

CFDictionaryRef myIdentityAndTrust =CFArrayGetValueAtIndex(items,0);

const void*tempIdentity =NULL;

tempIdentity= CFDictionaryGetValue (myIdentityAndTrust,kSecImportItemIdentity);

*outIdentity = (SecIdentityRef)tempIdentity;

const void*tempTrust =NULL;

tempTrust = CFDictionaryGetValue(myIdentityAndTrust,kSecImportItemTrust);

*outTrust = (SecTrustRef)tempTrust;

} else {

NSLog(@"Failedwith error code %d",(int)securityError);

return NO;

}

return YES;

}

https://www.dkcj.cn/info/31951.html

HTTPS网络加密双向验证-使用AFNetworking封装

相关文章：

30分钟搞定数据竞赛刷分夺冠神器LightGBM！

js模块化例子

swift3.0提示框新用法

FFmpeg在Windows上通过dshow编解码方式设置为mjpeg并实时显示测试代码

基于深度学习的低光照图像增强方法总结（2017-2019）| CSDN博文精选

ios多线程和进程的区别（转载）

OC封装的轮播图-只用调用即可

多核时代，并行编程为何“臭名昭著”？

Linux下获取usb视频设备vendor id和product id的8种方法

JAVA 设计模式模板方法模式

这类程序员成华为宠儿，分分钟秒杀众应届毕业生

Swift 使用CoreLocation获取定位与位置信息

FFmpeg在Windows上设置dshow mjpeg编码+libyuv解码显示测试代码

转：浅谈Linux的内存管理机制

swift3.0阿里百川反馈

通俗易懂：8大步骤图解注意力机制

Windows上VS2017单步调试FFmpeg源码的方法

ormlite 多表联合查询

C++中关键字volatile和mutable用法

基于生成对抗网络（GAN）的人脸变形（附链接） | CSDN博文精选

Jmeter连接Oracle数据库

swift3.0友盟分享

C++11中std::future的使用

给算法工程师和研究员的「霸王餐」| 附招聘信息

swift3.0三种反向传值

C++11中std::shared_future的使用

聊聊抖音、奈飞、Twitch、大疆、快手、B站的多媒体关键技术

Linux安全事件应急响应排查方法总结

C++11中std::packaged_task的使用

Swift3.0和OC桥接方法