Swift iOS 客户端证书身份验证

Swift iOS 客户端证书身份验证

import UIKit
class ViewController: UIViewController, URLSessionDelegate {
    override func viewDidLoad() {
        super.viewDidLoad()
        
        // 创建URLSession配置
        let sessionConfig = URLSessionConfiguration.default
        
        // 创建URLSession对象，并设置代理
        let session = URLSession(configuration: sessionConfig, delegate: self, delegateQueue: nil)
        
        // 创建URL请求
        guard let url = URL(string: "https://example.com") else {
            return
        }
        let request = URLRequest(url: url)
        
        // 发送请求
        let task = session.dataTask(with: request) { (data, response, error) in
            // 处理响应
            if let error = error {
                print("请求错误：\(error)")
                return
            }
            
            // 处理数据
            if let data = data {
                print("接收到数据：\(data)")
            }
        }
        
        task.resume()
    }
    
    // 实现证书验证逻辑
    func urlSession(_ session: URLSession, didReceive challenge: URLAuthenticationChallenge, completionHandler: @escaping (URLSession.AuthChallengeDisposition, URLCredential?) -> Void) {
        guard let serverTrust = challenge.protectionSpace.serverTrust else {
            completionHandler(.cancelAuthenticationChallenge, nil)
            return
        }
        
        // 验证证书
        var secresult = SecTrustResultType.invalid
        let status = SecTrustEvaluate(serverTrust, &secresult)
        
        if status == errSecSuccess {
            if let result = SecTrustResultType(rawValue: secresult), result == .unspecified || result == .proceed {
                completionHandler(.useCredential, URLCredential(trust: serverTrust))
                return
            }
        }
        
        completionHandler(.cancelAuthenticationChallenge, nil)
    }
}