主要的核心代码是HttpsClient.java
其实思路就是客户端证书要验证，CA证书就跳过认证
package com.bron.test.mobiletestssl.util;import java.io.BufferedReader;import java.io.IOException;import java.io.InputStream;import java.io.InputStreamReader;import java.io.Reader;import java.net.URL;import java.security.GeneralSecurityException;import java.security.KeyStore;import java.security.cert.CertificateException;import java.security.cert.X509Certificate;import javax.net.ssl.HostnameVerifier;import javax.net.ssl.HttpsURLConnection;import javax.net.ssl.KeyManagerFactory;import javax.net.ssl.SSLContext;import javax.net.ssl.SSLSession;import javax.net.ssl.SSLSocketFactory;import javax.net.ssl.TrustManager;import javax.net.ssl.X509TrustManager;import android.util.Log;/** * The summery of the class. * <ul> * <li>File name : HttpsClient.java</li> * <li>Description : The detail description of the class</li> * <li>Copyright : Copyright(C)2008-2014</li> * <li>Company : CST</li> * <li>remark :</li> * <li>create date : 2014-1-7</li> * </ul> * * @version 1.0 * @author 许力多 */public class HttpsClient { private final static String TAG = "HttpsClient"; public StringBuilder ssl(URL url, InputStream keyInput, String pKeyPassword) { StringBuilder response = new StringBuilder(); HttpsURLConnection conn = null; BufferedReader br = null; Reader reader = null; try { conn = (HttpsURLConnection) url.openConnection(); // 设置ssl工厂 conn.setSSLSocketFactory(getFactory(keyInput, pKeyPassword)); // 忽略主机名验证 conn.setHostnameVerifier(new HostnameVerifier() { @Override public boolean verify(String arg0, SSLSession arg1) { return true; } }); // System.out.println(conn.getResponseCode()); // 读取结果，这个效率不太高，只是demo使用 reader = new InputStreamReader(conn.getInputStream()); br = new BufferedReader(reader); String line = ""; while ((line = br.readLine()) != null) { response.append(line); response.append('\n'); } } catch (IOException e) { response.append(e.getLocalizedMessage()); Log.e(TAG, e.getLocalizedMessage(), e); } catch (GeneralSecurityException e) { response.append(e.getLocalizedMessage()); Log.e(TAG, e.getLocalizedMessage(), e); } finally { try { br.close(); } catch (Exception e) { } conn.disconnect(); } return response; } /** * 获得ssl连接的验证工厂 * * @param keyInput * @param pKeyPassword * @return * @throws GeneralSecurityException * @throws IOException */ private SSLSocketFactory getFactory(InputStream keyInput, String pKeyPassword) throws GeneralSecurityException, IOException { // j2se要使用SUNX509 KeyManagerFactory keyManagerFactory = KeyManagerFactory .getInstance("X509"); // 使用p12格式的证书，也支持其他类型的，具体请看KeyStore的API KeyStore keyStore = KeyStore.getInstance("PKCS12"); // InputStream keyInput = new FileInputStream(pKeyFile); keyStore.load(keyInput, pKeyPassword.toCharArray()); keyInput.close(); keyManagerFactory.init(keyStore, pKeyPassword.toCharArray()); SSLContext context = SSLContext.getInstance("TLS"); // init的第一个参数是验证客户端证书，第二个参数验证CA证书，由于私签的CA，所有绕过证书安全认证 context.init(keyManagerFactory.getKeyManagers(), new TrustManager[] { new DefaultTrustManager() }, null); if (keyInput != null) { keyInput.close(); } return context.getSocketFactory(); } /** * * The summery of the class. * <ul> * <li>File name : HttpsClient.java</li> * <li>Description :绕过证书（信任证书）的验证</li> * <li>Copyright : Copyright(C)2008-2014</li> * <li>Company : CST</li> * <li>remark :</li> * <li>create date : 2014-1-8</li> * </ul> * * @version 1.0 * @author 许力多 */ class DefaultTrustManager implements X509TrustManager { @Override public void checkClientTrusted(X509Certificate[] arg0, String arg1) throws CertificateException { } @Override public void checkServerTrusted(X509Certificate[] arg0, String arg1) throws CertificateException { } @Override public X509Certificate[] getAcceptedIssuers() { return null; } }}附件是完整项目（svn目录未杀，请自行查杀），请更换assets目录下的clinet.p12和https的url为自己的