java.security.KeyStoreException: java.io.IOException: Error initialising store of key store: java.security.InvalidKeyException: Illegal key size

这个尚未明白什么意思，就换了一个方法生成client.bks文件了

7）生成客户端bks文件
keytool -importcert -trustcacerts -keystore E:\newkey\client.bks -file E:\keyhttps\server.cer -storetype BKS -provider org.bouncycastle.jce.provider.BouncyCastleProvider

这个要在JDK目录下：C:\Program Files\Java\jdk1.7.0_80\jre\lib\ext中添加bcprov-ext-jdk15on-146.jar包文件（这个根据不同的jdk版本找对应的，这个搜一下就行啦）

8）将client.bks,truststore.bks，以及server.cercopy到工程的Assets下完成验证

9）项目中的配置

Application文件

import android.app.Application;
import android.os.Environment;
import android.os.Process;
import android.util.Log;import com.baidu.mapapi.SDKInitializer;
import com.franmontiel.persistentcookiejar.ClearableCookieJar;
import com.franmontiel.persistentcookiejar.PersistentCookieJar;
import com.franmontiel.persistentcookiejar.cache.SetCookieCache;
import com.franmontiel.persistentcookiejar.persistence.SharedPrefsCookiePersistor;
import com.zhy.http.okhttp.OkHttpUtils;
import com.zhy.http.okhttp.https.HttpsUtils;
import com.zhy.http.okhttp.log.LoggerInterceptor;import org.wlf.filedownloader.FileDownloadConfiguration;
import org.wlf.filedownloader.FileDownloader;import java.io.File;
import java.io.IOException;
import java.io.InputStream;
import java.util.concurrent.TimeUnit;import javax.net.ssl.HostnameVerifier;
import javax.net.ssl.SSLSession;import okhttp3.OkHttpClient;import static android.content.ContentValues.TAG;
/*** Created by Jane on 2017/6/23.*/
public class HNAPPlication extends Application {private final static String CLIENT_PRI_KEY = "client.bks";private final static String TRUSTSTORE_PUB_KEY = "truststore.bks";private final static String SERVER_KEY = "server.cer";@Overridepublic void onCreate() {super.onCreate();initOkhttp();// 在使用 SDK 各组间之前初始化 context 信息，传入 ApplicationContextcheckAppReplacingState();}private void checkAppReplacingState() {if (getResources() == null) {Log.w(TAG, "app is replacing...kill");Process.killProcess(Process.myPid());}}private void initOkhttp() {//InputStream [] inputStreams=null;ClearableCookieJar cookieJar1 = new PersistentCookieJar(new SetCookieCache(), new SharedPrefsCookiePersistor(getApplicationContext()));
//        inputStreams = new InputStream[4];
//        try {inputStreams[0] = getClass().getResourceAsStream("/assets/newkey.cer");
//            inputStreams[0] = getAssets().open("newkey.cer");
//        } catch (IOException e) {
//            e.printStackTrace();
//        }//读取证书try {InputStream clientkey = getAssets().open(CLIENT_PRI_KEY);InputStream serverkey = getAssets().open(TRUSTSTORE_PUB_KEY);InputStream[] inputStreams = new InputStream[4];
//            inputStreams[0] = getClass().getResourceAsStream("/assets/" + SERVER_KEY);inputStreams[0] = getAssets().open(SERVER_KEY);HttpsUtils.SSLParams sslParams = HttpsUtils.getSslSocketFactory(inputStreams, clientkey, "Eastcom_1");
//        CookieJarImpl cookieJar1 = new CookieJarImpl(new MemoryCookieStore());OkHttpClient okHttpClient = new OkHttpClient.Builder().connectTimeout(10000L, TimeUnit.MILLISECONDS).readTimeout(10000L, TimeUnit.MILLISECONDS).addInterceptor(new LoggerInterceptor("TAG")).cookieJar(cookieJar1).hostnameVerifier(new HostnameVerifier() {@Overridepublic boolean verify(String hostname, SSLSession session) {return true;}}).sslSocketFactory(sslParams.sSLSocketFactory, sslParams.trustManager).build();OkHttpUtils.initClient(okHttpClient);} catch (IOException e) {e.printStackTrace();}}}

HttpsUtil类

public class HttpsUtils
{public static class SSLParams{public SSLSocketFactory sSLSocketFactory;public X509TrustManager trustManager;}public static SSLParams getSslSocketFactory(InputStream[] certificates, InputStream bksFile, String password){SSLParams sslParams = new SSLParams();try{TrustManager[] trustManagers = prepareTrustManager(certificates);KeyManager[] keyManagers = prepareKeyManager(bksFile, password);SSLContext sslContext = SSLContext.getInstance("TLS");X509TrustManager trustManager = null;if (trustManagers != null){trustManager = new MyTrustManager(chooseTrustManager(trustManagers));} else{trustManager = new UnSafeTrustManager();}sslContext.init(keyManagers, new TrustManager[]{trustManager},null);sslParams.sSLSocketFactory = sslContext.getSocketFactory();sslParams.trustManager = trustManager;return sslParams;} catch (NoSuchAlgorithmException e){throw new AssertionError(e);} catch (KeyManagementException e){throw new AssertionError(e);} catch (KeyStoreException e){throw new AssertionError(e);}}private class UnSafeHostnameVerifier implements HostnameVerifier{@Overridepublic boolean verify(String hostname, SSLSession session){return true;}}private static class UnSafeTrustManager implements X509TrustManager{@Overridepublic void checkClientTrusted(X509Certificate[] chain, String authType)throws CertificateException{}@Overridepublic void checkServerTrusted(X509Certificate[] chain, String authType)throws CertificateException{}@Overridepublic X509Certificate[] getAcceptedIssuers(){return new java.security.cert.X509Certificate[]{};}}private static TrustManager[] prepareTrustManager(InputStream... certificates){if (certificates == null || certificates.length <= 0) return null;try{CertificateFactory certificateFactory = CertificateFactory.getInstance("X.509");KeyStore keyStore = KeyStore.getInstance(KeyStore.getDefaultType());keyStore.load(null);int index = 0;for (InputStream certificate : certificates){String certificateAlias = Integer.toString(index++);keyStore.setCertificateEntry(certificateAlias, certificateFactory.generateCertificate(certificate));try{if (certificate != null)certificate.close();} catch (IOException e){}}TrustManagerFactory trustManagerFactory = null;trustManagerFactory = TrustManagerFactory.getInstance(TrustManagerFactory.getDefaultAlgorithm());trustManagerFactory.init(keyStore);TrustManager[] trustManagers = trustManagerFactory.getTrustManagers();return trustManagers;} catch (NoSuchAlgorithmException e){e.printStackTrace();} catch (CertificateException e){e.printStackTrace();} catch (KeyStoreException e){e.printStackTrace();} catch (Exception e){e.printStackTrace();}return null;}private static KeyManager[] prepareKeyManager(InputStream bksFile, String password){try{if (bksFile == null || password == null) return null;KeyStore clientKeyStore = KeyStore.getInstance("BKS");clientKeyStore.load(bksFile, password.toCharArray());KeyManagerFactory keyManagerFactory = KeyManagerFactory.getInstance(KeyManagerFactory.getDefaultAlgorithm());keyManagerFactory.init(clientKeyStore, password.toCharArray());return keyManagerFactory.getKeyManagers();} catch (KeyStoreException e){e.printStackTrace();} catch (NoSuchAlgorithmException e){e.printStackTrace();} catch (UnrecoverableKeyException e){e.printStackTrace();} catch (CertificateException e){e.printStackTrace();} catch (IOException e){e.printStackTrace();} catch (Exception e){e.printStackTrace();}return null;}private static X509TrustManager chooseTrustManager(TrustManager[] trustManagers){for (TrustManager trustManager : trustManagers){if (trustManager instanceof X509TrustManager){return (X509TrustManager) trustManager;}}return null;}private static class MyTrustManager implements X509TrustManager{private X509TrustManager defaultTrustManager;private X509TrustManager localTrustManager;public MyTrustManager(X509TrustManager localTrustManager) throws NoSuchAlgorithmException, KeyStoreException{TrustManagerFactory var4 = TrustManagerFactory.getInstance(TrustManagerFactory.getDefaultAlgorithm());var4.init((KeyStore) null);defaultTrustManager = chooseTrustManager(var4.getTrustManagers());this.localTrustManager = localTrustManager;}@Overridepublic void checkClientTrusted(X509Certificate[] chain, String authType) throws CertificateException{}@Overridepublic void checkServerTrusted(X509Certificate[] chain, String authType) throws CertificateException{try{defaultTrustManager.checkServerTrusted(chain, authType);} catch (CertificateException ce){localTrustManager.checkServerTrusted(chain, authType);}}@Overridepublic X509Certificate[] getAcceptedIssuers(){return new X509Certificate[0];}}
}

Net请求配置

/*** Created by Jane on 2017/6/16.* 网络请求Api*/
public class NetHttpApi {private Retrofit retrofit;//请求超时时间private static final int REQUEST_TIME = 10;private static NetHttpApi instance;private Context context;private OkHttpClient okHttpClient;private   InputStream[] inputStreams;private SSLSocketFactory sslSocketFactory;/*** @param urlType url访问地址类型**/private NetHttpApi(int urlType, Context context) {this.context = context;
//        //日志显示级别Gson gson = new GsonBuilder().setLenient().create();OkHttpClient client = aa();if (urlType == Contants.OLD_URL_TYPE) {retrofit = new Retrofit.Builder().client(client).addConverterFactory(GsonConverterFactory.create(gson)).addCallAdapterFactory(RxJavaCallAdapterFactory.create()).baseUrl(Contants.APP_OLD_URL).build();} else if (urlType == Contants.NEW_URL_TYPE) {retrofit = new Retrofit.Builder().client(client).addConverterFactory(GsonConverterFactory.create(gson)).addCallAdapterFactory(RxJavaCallAdapterFactory.create()).baseUrl(Contants.APP_URL).build();}}private OkHttpClient aa() {//日志显示级别HttpLoggingInterceptor.Level level = HttpLoggingInterceptor.Level.BODY;//新建log拦截器HttpLoggingInterceptor loggingInterceptor = new HttpLoggingInterceptor(new HttpLoggingInterceptor.Logger() {@Overridepublic void log(String message) {Log.d("vvvvvvvvv", "OkHttp====Message==:" + message);}});loggingInterceptor.setLevel(level);OkHttpClient okHttpClient = new OkHttpClient.Builder().sslSocketFactory(SSLHelper.getSSLCertifcation(context)).hostnameVerifier(new UnSafeHostnameVerifier()).addInterceptor(loggingInterceptor).build();return okHttpClient;}/*** 创建单例模式，避免重复创建对象**/public static NetHttpApi getInstance(final int urlType, Context context) {
//        if (instance == null) {
//            synchronized (NetHttpApi.class) {
//                if (instance == null) {
//                    instance = new NetHttpApi(urlType,context);
//                }
//            }
//        }NetHttpApi netHttpApi = new NetHttpApi(urlType, context);return netHttpApi;}/*** 获取一个service对象*/public <T> T getService(Class<T> service) {return retrofit.create(service);}
}

SSLHelper

public class SSLHelper {private final static String CLIENT_PRI_KEY = "client.bks";private final static String TRUSTSTORE_PUB_KEY = "truststore.bks";private final static String CLIENT_BKS_PASSWORD = "Eastcom_1";private final static String TRUSTSTORE_BKS_PASSWORD = "Eastcom_1";private final static String KEYSTORE_TYPE = "BKS";private final static String PROTOCOL_TYPE = "TLS";private final static String CERTIFICATE_STANDARD = "X509";public static SSLSocketFactory getSSLCertifcation(Context context) {SSLSocketFactory sslSocketFactory = null;try {// 服务器端需要验证的客户端证书，其实就是客户端的keystoreKeyStore keyStore = KeyStore.getInstance(KEYSTORE_TYPE);// 客户端信任的服务器端证书KeyStore trustStore = KeyStore.getInstance(KEYSTORE_TYPE);//读取证书InputStream ksIn = context.getAssets().open(CLIENT_PRI_KEY);InputStream tsIn = context.getAssets().open(TRUSTSTORE_PUB_KEY);//加载证书keyStore.load(ksIn, CLIENT_BKS_PASSWORD.toCharArray());trustStore.load(tsIn, TRUSTSTORE_BKS_PASSWORD.toCharArray());ksIn.close();tsIn.close();//初始化SSLContextSSLContext sslContext = SSLContext.getInstance(PROTOCOL_TYPE);TrustManagerFactory trustManagerFactory = TrustManagerFactory.getInstance(CERTIFICATE_STANDARD);KeyManagerFactory keyManagerFactory = KeyManagerFactory.getInstance(CERTIFICATE_STANDARD);trustManagerFactory.init(trustStore);keyManagerFactory.init(keyStore, CLIENT_BKS_PASSWORD.toCharArray());sslContext.init(keyManagerFactory.getKeyManagers(), trustManagerFactory.getTrustManagers(), null);sslSocketFactory = sslContext.getSocketFactory();} catch (KeyStoreException e) {e.printStackTrace();} catch (IOException e) {e.printStackTrace();} catch (CertificateException e) {e.printStackTrace();} catch (NoSuchAlgorithmException e) {e.printStackTrace();} catch (UnrecoverableKeyException e) {e.printStackTrace();} catch (KeyManagementException e) {e.printStackTrace();}return sslSocketFactory;}
}

这是配置文件，其他项目类 需要的话  私我