前言

运维说服务器证书到期了，更新了证书，结果出现了上述问题。

解决方案

通过排查项目代码，发现之前没有做证书信赖验证。这里先提供一个能解决问题但是不是最佳做法的方案，方便大家快速处理问题

项目使用了okhttp
通过对okhttp的builder添加证书校验

OkHttpClient.Builder builder
SSLContext sslContext = SSLContextUtil.getDefaultSLLContext();
  if (sslContext != null) {
      SSLSocketFactory socketFactory = sslContext.getSocketFactory();
      builder.sslSocketFactory(socketFactory);
  }
  builder.hostnameVerifier(SSLContextUtil.HOSTNAME_VERIFIER);

SSLContextUtil工具类

/*
 * Copyright 2015 Yan Zhenjie
 *
 * Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except
 * in compliance with the License. You may obtain a copy of the License at
 *
 * http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software distributed under the License
 * is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express
 * or implied. See the License for the specific language governing permissions and limitations under
 * the License.
 */
package cn.droidlover.xdroidmvp.net;

import java.security.SecureRandom;
import java.security.cert.CertificateException;
import java.security.cert.X509Certificate;

import javax.net.ssl.HostnameVerifier;
import javax.net.ssl.SSLContext;
import javax.net.ssl.SSLSession;
import javax.net.ssl.TrustManager;
import javax.net.ssl.X509TrustManager;

/**
 * https 证书工具
 *
 * @author Yan Zhenjie.
 */
public class SSLContextUtil {

  /**
   * 如果不需要https证书.(NoHttp已经修补了系统的SecureRandom的bug)。
   */
  public static SSLContext getDefaultSLLContext() {
    SSLContext sslContext = null;
    try {
      sslContext = SSLContext.getInstance("TLS");
      sslContext.init(null, new TrustManager[] {trustManagers}, new SecureRandom());
    } catch (Exception e) {
      e.printStackTrace();
    }
    return sslContext;
  }

  /**
   * 信任管理器
   */
  private static TrustManager trustManagers = new X509TrustManager() {

    @Override
    public void checkClientTrusted(X509Certificate[] chain, String authType)
        throws CertificateException {}

    @Override
    public void checkServerTrusted(X509Certificate[] chain, String authType)
        throws CertificateException {

    }

    @Override
    public X509Certificate[] getAcceptedIssuers() {
      return new X509Certificate[0];
    }
  };

  /**
   * 域名验证
   */
  public static final HostnameVerifier HOSTNAME_VERIFIER = new HostnameVerifier() {
    public boolean verify(String hostname, SSLSession session) {
      return true;
    }
  };

}

上面的方法虽然能快速帮你解决因为证书问题无法请求服务器接口，但是还是不够的，后面的文章，将会给大家正确的姿势讲解