使用SSLCertificateSocketFactory支持Android HTTPS SNI

Question

           final SSLCertificateSocketFactory sslSocketFactory = (SSLCertificateSocketFactory) SSLCertificateSocketFactory.getDefault(0);

            socket = (SSLSocket) sslSocketFactory.createSocket(InetAddress.getByName("theserver"), 443);


            socket.setEnabledProtocols(socket.getSupportedProtocols());

            String[] cipherArray = socket.getEnabledCipherSuites();
            for(int i = 0; i<cipherArray.length; i++) {
                Log.e("","Available Cipher:"+cipherArray[i]);
            }
            if (Build.VERSION.SDK_INT >= Build.VERSION_CODES.JELLY_BEAN_MR1) {
                sslSocketFactory.setHostname(socket, "thehostname");
            } else {
                try {
                    java.lang.reflect.Method setHostnameMethod = socket.getClass().getMethod("setHostname", String.class);
                    setHostnameMethod.invoke(socket, "thehostname");
                } catch (Exception e) {
                    Log.w("", "SNI not useable", e);
                }
            }
            socket.setSoTimeout(20000);
            socket.setUseClientMode(true);
            Log.i(getClass().toString(), "Connected.");
            socket.startHandshake();
            SSLSession session = socket.getSession();
            boolean secured = session.isValid();

现在sslcontext返回SSLSOCKETFACTORY,我想使用SSLCertificateSocketFactory（对于sethostname方法）做什么..我希望问题是清楚的，如果不是让我知道或者随意说的更清楚

Answer 1

在使用包括SNI支持的Android的HttpSurlConnection时，可以使用NetCipher库获得现代TLS配置。NetCipher将HttpSurlConnection实例配置为使用支持的最佳TLS版本以及该TLS版本的最佳密码套件。首先，将其添加到您的构建中。Gradle：

compile 'info.guardianproject.netcipher:netcipher:2.0.0-alpha1'

或者您可以下载NetCipher.jar并将其直接包含在您的应用程序中。则不是调用：

HttpURLConnection connection = (HttpURLConnection) sourceUrl.openConnection();

称之为：

HttpsURLConnection connection = NetCipher.getHttpsURLConnection(sourceUrl);