我使用Retrofit和OkHttp3来发出请求.我知道在

Android 4.4 TLS 1.1和TLS 1.2中没有启用defult.所以我想尝试启用它们.但到目前为止,我没有成功.我读到这可能是android工作室模拟器的一个问题,但是我无法在带有andoroid 4.4 rigthnow的真实设备上进行测试

这是我到目前为止所做的：

private S createService(Class serviceClass) {

Retrofit retrofit = builder.client(getNewHttpClient()).build();

return retrofit.create(serviceClass);

}

private OkHttpClient getNewHttpClient() {

OkHttpClient.Builder clientBuilder = new OkHttpClient.Builder()

.connectTimeout(10, TimeUnit.SECONDS)

.writeTimeout(10, TimeUnit.SECONDS)

.readTimeout(0, TimeUnit.MINUTES); // Disable timeouts for read

return enableTls12OnPreLollipop(clientBuilder).build();

}

public static OkHttpClient.Builder enableTls12OnPreLollipop(OkHttpClient.Builder client) {

if (Build.VERSION.SDK_INT == Build.VERSION_CODES.KITKAT) {

try {

client.sslSocketFactory(new TLSSocketFactory());

ConnectionSpec cs = new ConnectionSpec.Builder(ConnectionSpec.MODERN_TLS)

.tlsVersions(TlsVersion.TLS_1_2)

.build();

List specs = new ArrayList<>();

specs.add(cs);

specs.add(ConnectionSpec.COMPATIBLE_TLS);

specs.add(ConnectionSpec.CLEARTEXT);

client.connectionSpecs(specs);

} catch (Exception exc) {

Log.e("OkHttpClientProvider", "Error while enabling TLS 1.2", exc);

}

}

return client;

}

TLSSocketFactory CLASS

public class TLSSocketFactory extends SSLSocketFactory {

private SSLSocketFactory delegate;

public TLSSocketFactory() throws KeyManagementException, NoSuchAlgorithmException {

SSLContext context = SSLContext.getInstance("TLS");

context.init(null, null, null);

delegate = context.getSocketFactory();

}

@Override

public String[] getDefaultCipherSuites() {

return delegate.getDefaultCipherSuites();

}

@Override

public String[] getSupportedCipherSuites() {

return delegate.getSupportedCipherSuites();

}

@Override

public Socket createSocket(Socket s, String host, int port, boolean autoClose) throws IOException {

return enableTLSOnSocket(delegate.createSocket(s, host, port, autoClose));

}

@Override

public Socket createSocket(String host, int port) throws IOException, UnknownHostException {

return enableTLSOnSocket(delegate.createSocket(host, port));

}

@Override

public Socket createSocket(String host, int port, InetAddress localHost, int localPort) throws IOException, UnknownHostException {

return enableTLSOnSocket(delegate.createSocket(host, port, localHost, localPort));

}

@Override

public Socket createSocket(InetAddress host, int port) throws IOException {

return enableTLSOnSocket(delegate.createSocket(host, port));

}

@Override

public Socket createSocket(InetAddress address, int port, InetAddress localAddress, int localPort) throws IOException {

return enableTLSOnSocket(delegate.createSocket(address, port, localAddress, localPort));

}

private Socket enableTLSOnSocket(Socket socket) {

if(socket != null && (socket instanceof SSLSocket)) {

((SSLSocket)socket).setEnabledProtocols(new String[] {"TLSv1.1", "TLSv1.2"});

}

return socket;

}

}

我试过this但没有用.

我的错误是：javax.net.ssl.SSLProtocolException：SSL握手中止：ssl = 0xb829bae0：SSL库失败,通常是协议错误：14077410：SSL例程：SSL23_GET_SERVER_HELLO：sslv3警报握手失败(external / openssl / ssl / s23_clnt. c：741 0x8d9e3990：0x00000000)