服务器证书的 HandshakeException

Question

我正在开发一个移动应用程序，该应用程序正在向我公司构建的 public API 发送请求，并使用有效证书建立安全连接从我这边每次我试图发出请求握手异常无法获得本地颁发者证书出现当我运行这个命令输出

openssl s_client -showcerts -servername pub.dartlang.org -connect pub.dartlang.org:443

输出如下所示

    CONNECTED(00000003)
    depth=1 C = US, O = Let's Encrypt, CN = Let's Encrypt Authority X3
    verify error:num=20:unable to get local issuer certificate
    ---
    Certificate chain
     0 s:/CN=pub.dartlang.org
       i:/C=US/O=Let's Encrypt/CN=Let's Encrypt Authority X3
    -----BEGIN CERTIFICATE-----
   ....
    -----END CERTIFICATE-----
     1 s:/C=US/O=Let's Encrypt/CN=Let's Encrypt Authority X3
       i:/O=Digital Signature Trust Co./CN=DST Root CA X3
    -----BEGIN CERTIFICATE-----
   ...
    -----END CERTIFICATE-----
    ---
    Server certificate
    subject=/CN=pub.dartlang.org
    issuer=/C=US/O=Let's Encrypt/CN=Let's Encrypt Authority X3
    ---
    No client certificate CA names sent
    Peer signing digest: SHA256
    Server Temp Key: ECDH, P-256, 256 bits
    ---
    SSL handshake has read 3055 bytes and written 456 bytes
    ---
    New, TLSv1/SSLv3, Cipher is ECDHE-RSA-AES128-GCM-SHA256
    Server public key is 2048 bit
    Secure Renegotiation IS supported
    Compression: NONE
    Expansion: NONE
    No ALPN negotiated
    SSL-Session:
        Protocol  : TLSv1.2
        Cipher    : ECDHE-RSA-AES128-GCM-SHA256
        Session-ID: 6E905904FEF3D9B5BA45A2F9140CD2DEC8F31F762759AB2193FD0649585348C9
        Session-ID-ctx: 
        Master-Key: B7762B8FC1543749F02A0011ABBEC22E2C29CA0089F5A4410CCFDE2DB2F1067CED0D8496522292A0338E855E3C717B4E
        Key-Arg   : None
        PSK identity: None
        PSK identity hint: None
        SRP username: None
        Start Time: 1571919503
        Timeout   : 300 (sec)
        Verify return code: 20 (unable to get local issuer certificate)
    ---

    read:errno=0

如何解决这个问题 - 我不想使用信任所有证书的代码 - 我不想将我的证书添加到资产文件夹

还有其他解决方案吗？比如将我的证书添加到 flutter 可信商店？

Answer 1

我通过使用 httpClient 信任我的证书解决了这个问题通过根据此处的相同代码添加我的根证书和链证书

服务器证书的 HandshakeException

HandshakeException for a server certificate

certificate

dart

flutter