Android - SSL 인증서 오류 (javax.net.ssl.SSLHandshakeException: java.security.cert.CertPathValidatorException: Trust anchor for certification path not found.)

javax.net.ssl.SSLHandshakeException: java.security.cert.CertPathValidatorException: Trust anchor for certification path not found.

위 에러는 안드로이드에서 인증서가 있는 홈페이지를 인증서가 없이 연결할 때 발생하는 에러입니다. 기본 JAVA에서는 인증서를 받아 JDK 라이브러리에 추가해 해결(http://twinw.tistory.com/43) 하였습니다. 안드로이드 역시 OS안 해당 폴더에 추가하면 해결되지만 그 폴더에 접속하기가 힘들어 코드로서 강제로 접속을 해보았습니다.

1. SSLConnect.class

---

import java.security.cert.CertificateException; import java.security.cert.X509Certificate; import javax.net.ssl.HostnameVerifier; import javax.net.ssl.HttpsURLConnection; import javax.net.ssl.SSLContext; import javax.net.ssl.SSLSession; import javax.net.ssl.TrustManager; import javax.net.ssl.X509TrustManager; public class SSLConnect { // always verify the host - dont check for certificate final HostnameVerifier DO_NOT_VERIFY = new HostnameVerifier() { public boolean verify(String hostname, SSLSession session) { return true; } }; /** * Trust every server - don't check for any certificate */ private void trustAllHosts() { // Create a trust manager that does not validate certificate chains TrustManager[] trustAllCerts = new TrustManager[] { new X509TrustManager() { public java.security.cert.X509Certificate[] getAcceptedIssuers() { return new java.security.cert.X509Certificate[] {}; } @Override public void checkClientTrusted(X509Certificate[] chain, String authType) throws CertificateException { } @Override public void checkServerTrusted(X509Certificate[] chain, String authType) throws CertificateException { } }}; // Install the all-trusting trust manager try { SSLContext sc = SSLContext.getInstance("TLS"); sc.init(null, trustAllCerts, new java.security.SecureRandom()); HttpsURLConnection.setDefaultSSLSocketFactory(sc.getSocketFactory()); } catch (Exception e) { e.printStackTrace(); } } public HttpsURLConnection postHttps(String url, int connTimeout, int readTimeout) { trustAllHosts(); HttpsURLConnection https = null; try { https = (HttpsURLConnection) new URL(url).openConnection(); https.setHostnameVerifier(DO_NOT_VERIFY); https.setConnectTimeout(connTimeout); https.setReadTimeout(readTimeout); } catch (MalformedURLException e) { e.printStackTrace(); return null; } catch (IOException e) { e.printStackTrace(); return null; } return https; } }

사용법은 OnCreate에 통신하는 구문이 나오기전 SSLConnect를 생성하시면 됩니다.
추가로 getHttpHTML(GET, POST)에 대한 코드는 http://twinw.tistory.com/42로 가시면 됩니다.