注册 登录
5***@qq.com
5***@qq.com
  • 发布：2025-12-26 11:27
  • 更新：2025-12-26 16:17
  • 阅读：36

使用官方UniMPsdk集成到原生app中，wgt包内的https请求报错证书问题 请问有解决方案吗，安卓原生请求是忽略了ssl验证可行，但wgt包的uniapp应该是没有适配到

分类：uni小程序sdk

使用官方UniMPsdk集成到原生app中，wgt包内的https请求报错证书问题 请问有解决方案吗，安卓原生请求是忽略了ssl验证可行，但wgt包的uniapp应该是没有适配到。尝试了各种方案，包括原生适配：
1.

android:networkSecurityConfig="@xml/network_security_config"  
android:usesCleartextTraffic="true"

network_security_config中忽略配置或者使用证书。

2.获取信任指定证书的OkHttpClient，但是发现OkHttpClient没有地方设置，因为SDK的源码是arr包无法修改。
3.也设置过源码中的：DCWXHttpAdapter类插入这个【OkHttpClient】，也还是如此。

这个问题已经困扰两天了，找不到解决方案。你们的官方群也没有任何人回复一下消息，请问下这个还有其他解决方案吗？

日志信息如下：
javax.net.ssl.SSLHandshakeException: java.security.cert.CertPathValidatorException: Trust anchor for certification path not found.
2025-12-26 11:14:26.476 28563-28792 System.err com.example.unimpdemo W at com.android.org.conscrypt.ConscryptFileDescriptorSocket.startHandshake(ConscryptFileDescriptorSocket.java:229)
2025-12-26 11:14:26.476 28563-28792 System.err com.example.unimpdemo W at dc.squareup.okhttp3.internal.connection.RealConnection.connectTls(r8-map-id-168a8911c198db382adea05f30dd44b2772442721951d00a5256bbbecfe3838d:22)
2025-12-26 11:14:26.477 28563-28792 System.err com.example.unimpdemo W at dc.squareup.okhttp3.internal.connection.RealConnection.establishProtocol(r8-map-id-168a8911c198db382adea05f30dd44b2772442721951d00a5256bbbecfe3838d:15)
2025-12-26 11:14:26.477 28563-28792 System.err com.example.unimpdemo W at dc.squareup.okhttp3.internal.connection.RealConnection.connect(r8-map-id-168a8911c198db382adea05f30dd44b2772442721951d00a5256bbbecfe3838d:41)
2025-12-26 11:14:26.477 28563-28792 System.err com.example.unimpdemo W at dc.squareup.okhttp3.internal.connection.StreamAllocation.findConnection(r8-map-id-168a8911c198db382adea05f30dd44b2772442721951d00a5256bbbecfe3838d:92)
2025-12-26 11:14:26.477 28563-28792 System.err com.example.unimpdemo W at dc.squareup.okhttp3.internal.connection.StreamAllocation.findHealthyConnection(r8-map-id-168a8911c198db382adea05f30dd44b2772442721951d00a5256bbbecfe3838d:1)
2025-12-26 11:14:26.477 28563-28792 System.err com.example.unimpdemo W at dc.squareup.okhttp3.internal.connection.StreamAllocation.newStream(r8-map-id-168a8911c198db382adea05f30dd44b2772442721951d00a5256bbbecfe3838d:8)
2025-12-26 11:14:26.477 28563-28792 System.err com.example.unimpdemo W at dc.squareup.okhttp3.internal.connection.ConnectInterceptor.intercept(r8-map-id-168a8911c198db382adea05f30dd44b2772442721951d00a5256bbbecfe3838d:7)
2025-12-26 11:14:26.477 28563-28792 System.err com.example.unimpdemo W at dc.squareup.okhttp3.internal.http.RealInterceptorChain.proceed(r8-map-id-168a8911c198db382adea05f30dd44b2772442721951d00a5256bbbecfe3838d:23)
2025-12-26 11:14:26.477 28563-28792 System.err com.example.unimpdemo W at dc.squareup.okhttp3.internal.http.RealInterceptorChain.proceed(r8-map-id-168a8911c198db382adea05f30dd44b2772442721951d00a5256bbbecfe3838d:1)
2025-12-26 11:14:26.477 28563-28792 System.err com.example.unimpdemo W at dc.squareup.okhttp3.internal.cache.CacheInterceptor.intercept(r8-map-id-168a8911c198db382adea05f30dd44b2772442721951d00a5256bbbecfe3838d:41)
2025-12-26 11:14:26.477 28563-28792 System.err com.example.unimpdemo W at dc.squareup.okhttp3.internal.http.RealInterceptorChain.proceed(r8-map-id-168a8911c198db382adea05f30dd44b2772442721951d00a5256bbbecfe3838d:23)
2025-12-26 11:14:26.477 28563-28792 System.err com.example.unimpdemo W at dc.squareup.okhttp3.internal.http.RealInterceptorChain.proceed(r8-map-id-168a8911c198db382adea05f30dd44b2772442721951d00a5256bbbecfe3838d:1)
2025-12-26 11:14:26.478 28563-28792 System.err com.example.unimpdemo W at dc.squareup.okhttp3.internal.http.BridgeInterceptor.intercept(r8-map-id-168a8911c198db382adea05f30dd44b2772442721951d00a5256bbbecfe3838d:65)
2025-12-26 11:14:26.478 28563-28792 System.err com.example.unimpdemo W at dc.squareup.okhttp3.internal.http.RealInterceptorChain.proceed(r8-map-id-168a8911c198db382adea05f30dd44b2772442721951d00a5256bbbecfe3838d:23)
2025-12-26 11:14:26.478 28563-28792 System.err com.example.unimpdemo W at dc.squareup.okhttp3.internal.http.RetryAndFollowUpInterceptor.intercept(r8-map-id-168a8911c198db382adea05f30dd44b2772442721951d00a5256bbbecfe3838d:21)
2025-12-26 11:14:26.478 28563-28792 System.err com.example.unimpdemo W at dc.squareup.okhttp3.internal.http.RealInterceptorChain.proceed(r8-map-id-168a8911c198db382adea05f30dd44b2772442721951d00a5256bbbecfe3838d:23)
2025-12-26 11:14:26.478 28563-28792 System.err com.example.unimpdemo W at dc.squareup.okhttp3.internal.http.RealInterceptorChain.proceed(r8-map-id-168a8911c198db382adea05f30dd44b2772442721951d00a5256bbbecfe3838d:1)
2025-12-26 11:14:26.478 28563-28792 System.err com.example.unimpdemo W at dc.squareup.okhttp3.RealCall.getResponseWithInterceptorChain(r8-map-id-168a8911c198db382adea05f30dd44b2772442721951d00a5256bbbecfe3838d:16)
2025-12-26 11:14:26.478 28563-28792 System.err com.example.unimpdemo W at dc.squareup.okhttp3.RealCall.execute(r8-map-id-168a8911c198db382adea05f30dd44b2772442721951d00a5256bbbecfe3838d:10)
2025-12-26 11:14:26.478 28563-28792 System.err com.example.unimpdemo W at io.dcloud.feature.weex.adapter.DCWXHttpAdapter$1.run(r8-map-id-b4716a25f9920722ba6f2d7f7c6f40e43a654927e8ebe1c489894a7bc6a88ab4:19)
2025-12-26 11:14:26.478 28563-28792 System.err com.example.unimpdemo W at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1167)
2025-12-26 11:14:26.478 28563-28792 System.err com.example.unimpdemo W at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:641)
2025-12-26 11:14:26.478 28563-28792 System.err com.example.unimpdemo W at java.lang.Thread.run(Thread.java:764)
2025-12-26 11:14:26.479 28563-28792 System.err com.example.unimpdemo W Caused by: java.security.cert.CertificateException: java.security.cert.CertPathValidatorException: Trust anchor for certification path not found.
2025-12-26 11:14:26.479 28563-28792 System.err com.example.unimpdemo W at com.android.org.conscrypt.TrustManagerImpl.checkTrustedRecursive(TrustManagerImpl.java:646)
2025-12-26 11:14:26.479 28563-28792 System.err com.example.unimpdemo W at com.android.org.conscrypt.TrustManagerImpl.checkTrusted(TrustManagerImpl.java:495)
2025-12-26 11:14:26.479 28563-28792 System.err com.example.unimpdemo W at com.android.org.conscrypt.TrustManagerImpl.checkTrusted(TrustManagerImpl.java:418)
2025-12-26 11:14:26.479 28563-28792 System.err com.example.unimpdemo W at com.android.org.conscrypt.TrustManagerImpl.getTrustedChainForServer(TrustManagerImpl.java:339)
2025-12-26 11:14:26.479 28563-28792 System.err com.example.unimpdemo W at android.security.net.config.NetworkSecurityTrustManager.checkServerTrusted(NetworkSecurityTrustManager.java:94)
2025-12-26 11:14:26.480 28563-28792 System.err com.example.unimpdemo W at android.security.net.config.RootTrustManager.checkServerTrusted(RootTrustManager.java:88)
2025-12-26 11:14:26.480 28563-28792 System.err com.example.unimpdemo W at com.android.org.conscrypt.Platform.checkServerTrusted(Platform.java:208)
2025-12-26 11:14:26.480 28563-28792 System.err com.example.unimpdemo W at com.android.org.conscrypt.ConscryptFileDescriptorSocket.verifyCertificateChain(ConscryptFileDescriptorSocket.java:404)
2025-12-26 11:14:26.480 28563-28792 System.err com.example.unimpdemo W at com.android.org.conscrypt.NativeCrypto.SSL_do_handshake(Native Method)
2025-12-26 11:14:26.480 28563-28792 System.err com.example.unimpdemo W at com.android.org.conscrypt.NativeSsl.doHandshake(NativeSsl.java:375)
2025-12-26 11:14:26.480 28563-28792 System.err com.example.unimpdemo W at com.android.org.conscrypt.ConscryptFileDescriptorSocket.startHandshake(ConscryptFileDescriptorSocket.java:224)
2025-12-26 11:14:26.480 28563-28792 System.err com.example.unimpdemo W ... 23 more
2025-12-26 11:14:26.481 28563-28792 System.err com.example.unimpdemo W Caused by: java.security.cert.CertPathValidatorException: Trust anchor for certification path not found.
2025-12-26 11:14:26.481 28563-28792 System.err com.example.unimpdemo W ... 34 more

2025-12-26 11:27 负责人:无 分享

没有找到相关结果

    已邀请:
    Ask小助手

    Ask小助手

    该问题请在专业群（ uni-app 官方技术交流群 1 ） 咨询，群中有相关专业的管理员和群友。

    根据您描述的问题和日志信息，这是典型的SSL证书验证失败问题。结合知识库内容，提供以下解决方案：

    1. 在wgt包内设置sslVerify参数
      在uni.request()调用中添加sslVerify: false参数（虽然不推荐，但可临时解决问题）： 

      uni.request({  
 url: 'https://your-api.com',  
 sslVerify: false, // 关键配置  
 success: (res) => { /*...*/ }  
})

      注意：知识库明确说明小众CA签发的证书在安卓设备会失败，且"离线打包不支持sslVerify配置"，但wgt热更新包应支持此参数。

    2. 检查wgt manifest配置
      在wgt包的manifest.json中添加网络安全配置： 

      {  
 "app-plus": {  
   "networkSecurityConfig": {  
     "domainSettings": {  
       "cleartextTraffic": true,  
       "trustedDomains": ["your-domain.com"]  
     }  
   }  
 }  
}

    3. UniMPsdk特殊处理
      由于您使用UniMPsdk集成，需确认：

      • 是否在初始化SDK时设置了网络安全策略
      • 检查SDK文档是否有setSSLVerifyEnabled(false)类似API
      • 尝试在原生层面对WebView组件单独设置（因wgt运行在独立WebView中）

    4. 根本解决方案
      建议更换为Let's Encrypt等系统内置信任的证书机构，避免使用CFCA等小众CA证书。知识库明确指出："可以更换其他常见机构签发的证书（如：Let's Encrypt）"。

    注意：忽略SSL验证仅适用于测试环境，生产环境务必使用有效证书。参考request API文档中关于SSL证书的说明。

    内容为 AI 生成，仅供参考
    2025-12-26 11:27
    5***@qq.com

    5***@qq.com (作者) - 没啥说的

    你说的这些方法都试过，还是没有任何效果。还是报一样的错误。

    2025-12-26 11:51 分享
    爱豆豆

    爱豆豆 - 办法总比困难多

    在manifest.json中配置ssl 的 untrustedca为accept试试呢

    "app-plus": {  
  "ssl": {  
    "untrustedca": "accept" // 允许非受信证书  
  }  
}

    参考文档：https://uniapp.dcloud.net.cn/collocation/manifest-app.html#full-manifest

    2025-12-26 16:17 分享
    为什么被折叠? 0 个回复被折叠

    要回复问题请先登录或注册

    退出全屏模式 全屏模式 回复
    友情链接
    优势智云 黑马程序员 程序员客栈 个推 锐亚教育 即速应用 DCloud新闻 InfoQ 蓝莺IM HeapDump性能社区 diygw可视化 艾普阳科技 申请友链

    DCloud 即数字天堂(北京)网络技术有限公司是W3C成员及HTML5中国产业联盟发起单位

    京ICP备12046007号-4 | 京公网安备：11010802035340号 | 国家信息安全等级保护三级，证书编号：11010813802-20001

    | | 违法违规信息举报