0

我正在寻找一种方法来实现能够切换我的网络应用程序正在使用哪个 NSURLCredential 与给定服务器通信。

有没有办法让我“重置”给定服务器信任的 NSURLCredential ssl 凭据并强制整个握手过程使用不同的凭据集重复？ 换句话说，我希望我的网络应用程序忘记它曾经与该服务器通信。

我认为下面的代码片段是检索我之前评估过的凭证的内容。

- (void)customHTTPProtocol:(CustomHTTPProtocol *)protocol didReceiveAuthenticationChallenge:(NSURLAuthenticationChallenge *)challenge
{

NSURLCredential *   credential = nil;
SecTrustRef         trust;
NSURLProtectionSpace* protectionSpace = challenge.protectionSpace;
  if ([protectionSpace.authenticationMethod isEqualToString:NSURLAuthenticationMethodServerTrust]) {
            //this verifies that we are talking to a server that we trust by checking it's certificate


            // Extract the SecTrust object from the challenge, apply our trusted anchors to that
            // object, and then evaluate the trust.  If it's OK, create a credential and use
            // that to resolve the authentication challenge.  If anything goes wrong, resolve
            // the challenge with nil, which continues without a credential, which causes the
            // connection to fail.
            trust = [protectionSpace serverTrust];
            if (trust == NULL) {
                assert(NO);
            } else {
                // Just Ignore Self Signed Certs
                SecTrustResultType result;

                //This takes the serverTrust object and checkes it against your keychain
                SecTrustEvaluate(protectionSpace.serverTrust, &result);
                //if we want to ignore invalid server for certificates, we just accept the server
                credential = [NSURLCredential credentialForTrust: challenge.protectionSpace.serverTrust];
                if(result == kSecTrustResultProceed ||
                          // result == kSecTrustResultConfirm || // Deprecated - Remove?
                          result == kSecTrustResultUnspecified) {

                    [challenge.sender useCredential:credential forAuthenticationChallenge: challenge];
                }
            }
            [protocol resolveAuthenticationChallenge:challenge withCredential:credential];
        }

//... more ways to resolve challenge
}
4

1 回答 1

3

我尝试了各种方法来实现这一目标，但一切都在脉络中。

但是一个简单的技巧奏效了。

要强制我的网页重新进行身份验证，我会在请求 url 的末尾添加以下内容。

&r=1100910192 **(timestamp)**.

因此，它实际上重新进行了身份验证，而不是使用缓存的经过身份验证的凭据。

在其他情况下，只需在请求末尾添加 # 即可：

[NSMutableURLRequest requestWithURL:[NSURL URLWithString:@"http://localhost:8080/some.json#"]]

我希望它有所帮助。

于 2014-10-10T16:19:00.947 回答