使用NSURLConnection处理自签名证书

Question

如果主机位于可信列表中，我希望允许使用NSURLConnection的自签名证书。

我看到很多人做着这样的：

- (BOOL)connection:(NSURLConnection *)connection canAuthenticateAgainstProtectionSpace:(NSURLProtectionSpace *)protectionSpace { 
    if ([protectionSpace.authenticationMethod isEqualToString:NSURLAuthenticationMethodServerTrust]) { 
     if (allowSelfSignedCertForThisHost) { 
      NSLog(@"Allowing self signed!"); 
      return YES; 
     } 
    } 
    return NO; 
} 

- (void)connection:(NSURLConnection *)connection didReceiveAuthenticationChallenge:(NSURLAuthenticationChallenge *)challenge { 
    if ([challenge.protectionSpace.authenticationMethod isEqualToString:NSURLAuthenticationMethodServerTrust]) { 
     if ([trustedHosts containsObject:challenge.protectionSpace.host]) { 
      [challenge.sender useCredential:[NSURLCredential credentialForTrust:challenge.protectionSpace.serverTrust] forAuthenticationChallenge:challenge]; 
     } 
    } 
    [challenge.sender continueWithoutCredentialForAuthenticationChallenge:challenge]; 
} 

不过，我想知道你为什么会调用useCredential:forAuthenticationChallenge而且continueWithoutCredentialForAuthenticationChallenge之后。

Answer 1

只需在设备上使用iPhone Configuration Utility或Apple Configurator添加该证书即可。