iOS之Https自签名证书认证及数据请求的封装原理

#import <Foundation/Foundation.h>typedef enum{    AKNetWorkGET ,  /**< GET请求 */  AKNetWorkPOST = 1 /**< POST请求 */}AKNetWorkType;typedef void (^HttpSuccess)(id json);typedef void (^HttpErro)(NSError* error);@interface AKNetPackegeAFN : NSObject+(instancetype)shareHttpManager;/* * netWorkType:请求方式 GET 或 POST signature:是否使用签名证书，是的话直接写入证书名字，否的话填nil api:请求的URL接口 parameters:请求参数 sucess:请求成功时的返回值 fail:请求失败时的返回值 * */- (void)netWorkType:(AKNetWorkType)netWorkType Signature:(NSString *)signature API:(NSString *)api Parameters:(NSDictionary *)parameters Success:(HttpSuccess)sucess Fail:(HttpErro)fail;@end

#import "AKNetPackegeAFN.h"#import "AFNetworking.h"@interface AKNetPackegeAFN()@property (nonatomic,strong) AFHTTPSessionManager *manager;@end@implementation AKNetPackegeAFN+(instancetype)shareHttpManager{  static dispatch_once_t onece = 0;  static AKNetPackegeAFN *httpManager = nil;  dispatch_once(&onece, ^(void){    httpManager = [[self alloc]init];  });  return httpManager;}

- (void)netWorkType:(AKNetWorkType)netWorkType Signature:(NSString *)signature API:(NSString *)api Parameters:(NSDictionary *)parameters Success:(HttpSuccess)sucess Fail:(HttpErro)fail{    //开启证书验证模式  AFSecurityPolicy *securityPolicy = [AFSecurityPolicy policyWithPinningMode:AFSSLPinningModeCertificate];    //是否允许使用自签名证书  signature == nil ? (void)(securityPolicy.allowInvalidCertificates = NO):(securityPolicy.allowInvalidCertificates = YES);    //是否需要验证域名  securityPolicy.validatesDomainName = NO;    _manager = [[AFHTTPSessionManager alloc]initWithBaseURL:[NSURL URLWithString:api]];  _manager.responseSerializer = [AFJSONResponseSerializer serializer];  _manager.securityPolicy = securityPolicy;  _manager.responseSerializer.acceptableContentTypes = [NSSet setWithObjects:@"application/json",@"application/xml",@"text/xml",@"text/json",@"text/plain",@"text/javascript",@"text/html", nil];    if (signature != nil){        __weak typeof(self) weakSelf = self;    [_manager setSessionDidReceiveAuthenticationChallengeBlock:^NSURLSessionAuthChallengeDisposition(NSURLSession *session, NSURLAuthenticationChallenge *challenge, NSURLCredential *__autoreleasing *_credential) {            //获取服务器的 trust object      SecTrustRef serverTrust = [[challenge protectionSpace] serverTrust];            //导入自签名证书      NSString *cerPath = [[NSBundle mainBundle] pathForResource:@"你的证书名字" ofType:@"cer"];      NSData *cerData = [NSData dataWithContentsOfFile:cerPath];            if (!cerData) {                NSLog(@"==== .cer file is nil ====");                return 0;      }            NSArray *cerArray = @[cerData];      weakSelf.manager.securityPolicy.pinnedCertificates = cerArray;      SecCertificateRef caRef = SecCertificateCreateWithData(NULL, (__bridge CFDataRef)cerData);      NSCAssert(caRef != nil, @"caRef is nil");            NSArray *caArray = @[(__bridge id)(caRef)];      NSCAssert(caArray != nil, @"caArray is nil");            //将读取到的证书设置为serverTrust的根证书      OSStatus status = SecTrustSetAnchorCertificates(serverTrust, (__bridge CFArrayRef)caArray);      SecTrustSetAnchorCertificatesOnly(serverTrust, NO);      NSCAssert(errSecSuccess == status, @"SectrustSetAnchorCertificates failed");            //选择质询认证的处理方式      NSURLSessionAuthChallengeDisposition disposition = NSURLSessionAuthChallengePerformDefaultHandling;      __autoreleasing NSURLCredential *credential = nil;            //NSURLAuthenTicationMethodServerTrust质询认证方式      if ([challenge.protectionSpace.authenticationMethod isEqualToString:NSURLAuthenticationMethodServerTrust]) {        //基于客户端的安全策略来决定是否信任该服务器，不信任则不响应质询        if ([weakSelf.manager.securityPolicy evaluateServerTrust:challenge.protectionSpace.serverTrust forDomain:challenge.protectionSpace.host]) {                    //创建质询证书          credential = [NSURLCredential credentialForTrust:challenge.protectionSpace.serverTrust];                    //确认质询方式          if (credential) {            disposition = NSURLSessionAuthChallengeUseCredential;                      } else {                        disposition = NSURLSessionAuthChallengePerformDefaultHandling;          }                  } else {                    //取消挑战          disposition = NSURLSessionAuthChallengeCancelAuthenticationChallenge;        }              } else {                disposition = NSURLSessionAuthChallengePerformDefaultHandling;      }            return disposition;    }];  }    if (netWorkType == 0){        [_manager GET:api parameters:parameters progress:^(NSProgress * _Nonnull uploadProgress) {    } success:^(NSURLSessionDataTask * _Nonnull task, id _Nullable responseObject) {            if (sucess){                sucess(responseObject);      }else{                NSLog(@"链接异常或网络不存在");      }    } failure:^(NSURLSessionDataTask * _Nullable task, NSError * _Nonnull error) {            fail(error);    }];  }else if (netWorkType == 1){            [_manager POST:api parameters:parameters progress:^(NSProgress * _Nonnull uploadProgress) {    } success:^(NSURLSessionDataTask * _Nonnull task, id _Nullable responseObject) {            if (sucess){                sucess(responseObject);      }else{                NSLog(@"链接异常或网络不存在");      }    } failure:^(NSURLSessionDataTask * _Nullable task, NSError * _Nonnull error) {            fail(error);    }];  }  }

//创建对象  //如果是自签名证书，使用前先到AKNetPackegeAFN相应的方法里进行证书的绑定（证书直接拖入项目中）即可  /*   *   netWorkType:请求方式 GET 或 POST   signature:是否使用签名证书，是的话直接写入证书名字，否的话填nil   api:请求的URL接口   parameters:请求参数   sucess:请求成功时的返回值   fail:请求失败时的返回值   *   */    AKNetPackegeAFN *netHttps = [AKNetPackegeAFN shareHttpManager];  [netHttps netWorkType:请求类型 Signature:证书名称 API:请求URL Parameters:参数 Success:^(id json) {        NSLog(@"Json:%@",json);  } Fail:^(NSError *error) {        NSLog(@"Error:%@",error);  }];