ios - 我在 ios 中的 webview 上传递 ssl 证书时遇到问题

Question

我正在使用 uiwebview。我已将 ssl pinning 应用于 AFNetworking API 调用。但我无法在 webview 上传递证书固定。我需要知道如何在 webview 重定向上传递 ssl 证书固定。

- (BOOL)webView:(UIWebView *)webView shouldStartLoadWithRequest:(NSURLRequest *)request navigationType:(UIWebViewNavigationType)navigationType{
    AFHTTPRequestOperationManager *manager = [AFHTTPRequestOperationManager manager];
    [LivefyreAPICalls sslpinning:manager :@"certificate.com" :@"cer"];

NSString *content =[request.URL absoluteString];
    NSArray *urlComponents = [content componentsSeparatedByString:@"&"];

for (NSString *keyValuePair in urlComponents)
{
    NSArray *pairComponents = [keyValuePair componentsSeparatedByString:@"="];
    NSString *key = [[pairComponents firstObject] stringByRemovingPercentEncoding];
    NSString *value = [[pairComponents lastObject] stringByRemovingPercentEncoding];
    [queryStringDictionary setObject:value forKey:key];
}

if ([queryStringDictionary valueForKey:@"id_token"]) {
    [[UserNetwork manager] setUserFromSessionFromToken:[queryStringDictionary valueForKey:@"id_token"] :nil];
    if ([UserNetwork manager].networkUsers.count >=1) {

        SettingsViewController *settingsView=[self.storyboard instantiateViewControllerWithIdentifier:@"SettingsViewController"];
        [self.navigationController pushViewController:settingsView animated:NO];
    }else{
        LiveBlogsTableViewController *blogView=[self.storyboard instantiateViewControllerWithIdentifier:@"liveblog"];
        [self.navigationController pushViewController:blogView animated:YES];
    }
}
return YES;
}

Answer 1

UiWebView 没有公开任何直接的 API，但它仍然可以使用 NSURLProtocol 实现，它使您能够验证所有传出网络请求的证书。虽然它确实需要做很多工作，但更好的解决方案是使用 WKWebView，它提供了一种通过 WKNavigationDelegate's webView:didReceiveAuthenticationChallenge 进行固定的明确方法: completionHandler: ( https://developer.apple.com/library/ios/documentation/WebKit/Reference/WKNavigationDelegate_Ref/index.html ).

本文的“在 Web View 中固定”部分有更多详细信息:https://datatheorem.github.io/TrustKit/getting-started.html它也是一个用于在 iOS 应用程序中实现公钥固定的库。

也请查看此链接:

https://github.com/antekarin/ssl-pinning-swift

同时查看此博客: http://ryandavis.io/allowing-uiwebview-to-accept-self-signed-certificates/