Android 网络安全

// 自定义证书验证
class CustomTrustManager : X509TrustManager {
    private val defaultTrustManager: X509TrustManager
    
    init {
        val trustManagerFactory = TrustManagerFactory.getInstance(
            TrustManagerFactory.getDefaultAlgorithm()
        )
        trustManagerFactory.init(null as KeyStore?)
        defaultTrustManager = trustManagerFactory.trustManagers[0] as X509TrustManager
    }
    
    override fun checkClientTrusted(chain: Array<X509Certificate>, authType: String) {
        defaultTrustManager.checkClientTrusted(chain, authType)
    }
    
    override fun checkServerTrusted(chain: Array<X509Certificate>, authType: String) {
        try {
            defaultTrustManager.checkServerTrusted(chain, authType)
        } catch (e: CertificateException) {
            // 自定义证书验证逻辑
        }
    }
    
    override fun getAcceptedIssuers(): Array<X509Certificate> {
        return defaultTrustManager.acceptedIssuers
    }
}

// 证书固定示例
val certificatePinner = CertificatePinner.Builder()
    .add("api.example.com", "sha256/XXXX=") // 证书指纹
    .build()
 
val client = OkHttpClient.Builder()
    .certificatePinner(certificatePinner)
    .build()

// AES加密工具类
class AESEncryption {
    private val keySpec: SecretKeySpec
    private val cipher: Cipher
    
    init {
        val key = generateKey()
        keySpec = SecretKeySpec(key, "AES")
        cipher = Cipher.getInstance("AES")
    }
    
    fun encrypt(data: String): String {
        cipher.init(Cipher.ENCRYPT_MODE, keySpec)
        val encrypted = cipher.doFinal(data.toByteArray())
        return Base64.encodeToString(encrypted, Base64.DEFAULT)
    }
    
    fun decrypt(data: String): String {
        cipher.init(Cipher.DECRYPT_MODE, keySpec)
        val decoded = Base64.decode(data, Base64.DEFAULT)
        return String(cipher.doFinal(decoded))
    }
}