HttpDns iOS : 报错 Code=-1202 此服务器的证书无效,如何解决？

{ [policies addObject:(__bridge_transfer id) SecPolicyCreateBasicX509()]; }

/*
 * 绑定校验策略到服务端的证书上
 */
SecTrustSetPolicies(serverTrust, (__bridge CFArrayRef) policies);
/*
 * 评估当前serverTrust是否可信任，
 * 官方建议在result = kSecTrustResultUnspecified 或 kSecTrustResultProceed
 * 的情况下serverTrust可以被验证通过，https://developer.apple.com/library/ios/technotes/tn2232/_index.html
 * 关于SecTrustResultType的详细信息请参考SecTrust.h
 */
SecTrustResultType result;
SecTrustEvaluate(serverTrust, &result);

if (result == kSecTrustResultRecoverableTrustFailure) {
    CFDataRef errDataRef = SecTrustCopyExceptions(serverTrust);
    SecTrustSetExceptions(serverTrust, errDataRef);
    SecTrustEvaluate(serverTrust, &result);
}

return (result == kSecTrustResultUnspecified || result == kSecTrustResultProceed);

} 注意添加了如下步骤 :

Objective-C

if (trustResult == kSecTrustResultRecoverableTrustFailure) { CFDataRef errDataRef = SecTrustCopyExceptions(serverTrust); SecTrustSetExceptions(serverTrust, errDataRef);

    SecTrustEvaluate(serverTrust, &trustResult);
}

具体调整的原因可以参考： Apple Doc - Function:SecTrustCopyExceptions Use HTTPS certificate handling to protect your iOS app