android - 我在 webview 中遇到 CertPathValidatorException 问题

Question

这是我的网页 View :

  if(bundle != null){
        String file = bundle.getString("url");
        Log.i("","url is:" + file);
        wv.setWebViewClient(new MyWebViewClient());
        wv.setLayerType(View.LAYER_TYPE_SOFTWARE, null);
        WebSettings settings = wv.getSettings();
        settings.setJavaScriptEnabled(true);
        settings.setJavaScriptCanOpenWindowsAutomatically(true);
        settings.setCacheMode(WebSettings.LOAD_NO_CACHE);
        settings.setAppCacheEnabled(false);
        settings.setDomStorageEnabled(true);
        wv.setWebViewClient(new WebViewClient() {
            @Override
            public void onPageFinished(WebView view, String url) {
                loadingPanel.setVisibility(View.GONE);
            }
        });
        wv.loadUrl(file);
    }

这是我的 WebViewClient:

  private class MyWebViewClient extends WebViewClient {
    @Override
    public boolean shouldOverrideUrlLoading(WebView view, String url) {
        wv.loadUrl(url);
        return true;
    }

    @Override
    public void onReceivedSslError(WebView view, SslErrorHandler handler,
                                   SslError error) {
        super.onReceivedSslError(view, handler, error);
        Log.e("","error is certificate:" + error.getCertificate());
        Log.e("","error is:" + error.getPrimaryError());
        Log.e("","error is url:" + error.getUrl());
        handler.proceed();
    }
}

我收到此错误:

10-12 13:27:43.174: I/X509Util(14748): Failed to validate the certificate chain, error: java.security.cert.CertPathValidatorException: Trust anchor for certification path not found.

此外，“未到达 onReceivedSSLError 方法。我没有获取在该函数中添加的日志”。我做错了什么？

这也是我拥有的权限，我不知道是否需要更多权限:

android.permission.INTERNET"
android.permission.READ_EXTERNAL_STORAGE"

我什至尝试将证书添加到 WebView 中，如下所示:

 try {
            String keyStoreType = KeyStore.getDefaultType();
            KeyStore keyStore = KeyStore.getInstance(keyStoreType);
            keyStore.load(null, null);
            Certificate cer = keyStore.getCertificate("ca");
            if(cer != null) {
                Log.i("", "certificate is:" + cer);
                Log.i("", "certificate is:" + cer.toString());
                Log.i("", "certificate is:" + cer.getType());
                Log.i("", "certificate is:" + cer.getPublicKey());
                X509Certificate x509 = (X509Certificate) cer;
                SslCertificate sslCert = new SslCertificate(x509);
                wv.setCertificate(sslCert);
            }
        }catch (Exception e){
            Log.e("","error trying to get it:" + e.getMessage());
        }

但运气不佳。

Answer 1

MyWebViewClient() 类包含 SSL 错误处理程序。您在代码 fragment 的第 4 行中正确设置了它:

 wv.setWebViewClient(new MyWebViewClient());

但是在第 12 行中，您再次调用 wv.setWebViewClient(...) 来替换之前设置的 WebViewClient。因此该代码永远不会被调用...