锟斤拷锟斤拷位锟矫ｏ拷锟斤拷页 > 锟斤拷锟斤拷学院 > Android HTTPS锟叫硷拷锟剿劫筹拷漏锟斤拷浅锟斤拷

Android HTTPS锟叫硷拷锟剿劫筹拷漏锟斤拷浅锟斤拷

锟斤拷源锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷|锟斤拷时锟戒：2015-03-19 11:13:19 |锟斤拷锟侥讹拷锟斤拷94锟斤拷|锟斤拷锟斤拷签锟斤拷漏锟斤拷锟斤拷 |锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷

4.Android HTTPS锟叫硷拷锟剿癸拷锟斤拷漏锟斤拷证锟斤拷

1) 锟酵伙拷锟剿诧拷校锟斤拷SSL证锟介（锟斤拷锟斤拷签锟斤拷CA锟角凤拷戏锟斤拷锟斤拷锟斤拷锟斤拷欠锟狡ワ拷洹拷欠锟斤拷锟角╋拷锟街わ拷椤⒅わ拷锟斤拷欠锟斤拷锟节ｏ拷锟斤拷锟斤拷锟斤拷锟铰硷拷锟街憋拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷

a. 锟斤拷实锟街的诧拷校锟斤拷证锟斤拷锟絏509TrustManager锟接口碉拷Java锟斤拷锟斤拷片锟斤拷 (锟斤拷锟叫碉拷checkServerTrusted()锟斤拷锟斤拷实锟斤拷为锟秸ｏ拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟角凤拷锟斤拷锟�):

Android HTTPS中间人劫持漏洞浅析

b. 锟斤拷锟斤拷锟秸撅拷锟斤拷锟斤拷锟斤拷锟秸撅拷锟街わ拷锟斤拷锟斤拷锟斤拷锟角凤拷匹锟斤拷锟絁ava锟斤拷锟斤拷片锟斤拷:

Android HTTPS中间人劫持漏洞浅析

c. 锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷Java锟斤拷锟斤拷片锟轿ｏ拷

SSLSocketFactory sf; 锟斤拷锟斤拷 sf.setHostnameVerifier(SSLSocketFactory.ALLOW_ALL_HOSTNAME_VERIFIER);

2)锟斤拷锟侥筹拷锟斤拷锟叫ｏ拷锟絊SL证锟斤拷目突锟斤拷私锟斤拷锟斤拷屑锟斤拷斯锟斤拷锟斤拷锟绞撅拷锟斤拷锟酵硷拷锟绞撅拷锟斤拷锟酵拷锟斤拷屑锟斤拷私俪只锟饺★拷锟斤拷锟铰硷拷没锟斤拷锟斤拷锟斤拷锟斤拷锟�(锟斤拷锟斤拷锟斤拷锟斤拷锟街伙拷嵌锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷一锟斤拷MD5)锟斤拷

Android HTTPS中间人劫持漏洞浅析

锟睫革拷锟斤拷锟斤拷

锟斤拷SSL证锟斤拷锟斤拷锟角啃ｏ拷锟�

锟斤拷锟节帮拷全锟斤拷锟角ｏ拷锟斤拷锟斤拷锟絊SL证锟斤拷锟斤拷锟角啃ｏ拷椋ㄇ╋拷锟紺A锟角凤拷戏锟斤拷锟街わ拷锟斤拷欠锟斤拷锟斤拷锟角╋拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷锟斤拷欠锟狡ワ拷洹⒅わ拷锟斤拷欠锟斤拷锟节等ｏ拷锟斤拷锟斤拷细锟睫革拷锟斤拷锟斤拷锟斤拷锟斤拷锟紾oogle锟劫凤拷锟斤拷锟斤拷SSL锟侥帮拷全锟斤拷锟介。

小锟斤拷锟狡硷拷锟侥讹拷