使用NSURLConnection處理自簽名證書

Question

如果主機位於可信列表中，我希望允許使用NSURLConnection的自簽名證書。

我看到很多人做着這樣的：

- (BOOL)connection:(NSURLConnection *)connection canAuthenticateAgainstProtectionSpace:(NSURLProtectionSpace *)protectionSpace { 
    if ([protectionSpace.authenticationMethod isEqualToString:NSURLAuthenticationMethodServerTrust]) { 
     if (allowSelfSignedCertForThisHost) { 
      NSLog(@"Allowing self signed!"); 
      return YES; 
     } 
    } 
    return NO; 
} 

- (void)connection:(NSURLConnection *)connection didReceiveAuthenticationChallenge:(NSURLAuthenticationChallenge *)challenge { 
    if ([challenge.protectionSpace.authenticationMethod isEqualToString:NSURLAuthenticationMethodServerTrust]) { 
     if ([trustedHosts containsObject:challenge.protectionSpace.host]) { 
      [challenge.sender useCredential:[NSURLCredential credentialForTrust:challenge.protectionSpace.serverTrust] forAuthenticationChallenge:challenge]; 
     } 
    } 
    [challenge.sender continueWithoutCredentialForAuthenticationChallenge:challenge]; 
} 

不過，我想知道你爲什麼會調用useCredential:forAuthenticationChallenge而且continueWithoutCredentialForAuthenticationChallenge之後。

Answer 1

只需在設備上使用iPhone Configuration Utility或Apple Configurator添加該證書即可。