http和https的区别以及程序的处理

转自：http://www.cnblogs.com/stan0714/archive/2012/03/21/2409872.html

http和https使用的是完全不同的连接方式,用的端口也不一样,前者是80,后者是443。http的连接很简单,是无状态的,…
HTTPS协议是由SSL+HTTP协议构建的可进行加密传输、身份认证的网络协议
要比http协议安全

ios中http 和https 协议的访问
最近做个项目，开始采用的是HTTP协议实现客户端和服务器端的交互，后来需要改成HTTPS协议。在修改的过程中发现了一些问题，解决方案如下：
 
HTTP：
    NSString *urlString =[NSString stringWithFormat:@”https://127.0.0.1/default.aspx?USER=%@“,@”111”];
    
    NSMutableURLRequest *request = [[[NSMutableURLRequest alloc] init] autorelease];
    [request setURL:[NSURL URLWithString:urlString]];
    [request setHTTPMethod:@”GET”];
    
    NSHTTPURLResponse* urlResponse = nil;
    NSError *error = [[NSError alloc] init];
    NSData *responseData = [NSURLConnection sendSynchronousRequest:request returningResponse:&urlResponse error:&error];
    NSMutableString *result = [[NSMutableString alloc] initWithData:responseData encoding:NSUTF8StringEncoding];
    
    NSLog(@”The result string is :%@”,result);   
 
 HTTPS
事件触发 
{ 
    NSString *urlString =[NSString stringWithFormat:@”https://127.0.0.1/default.aspx?USER=%@“,@”111”];
    NSMutableURLRequest *request = [[NSMutableURLRequest alloc] initWithURL:[NSURL URLWithString:urlString]        cachePolicy:NSURLRequestReloadIgnoringLocalCacheData timeoutInterval:5];
    //设置请求方式为get
    [request setHTTPMethod:@”GET”];
    //添加用户会话id
    [request addValue:@”text/html” forHTTPHeaderField:@”Content-Type”];
    //连接发送请求
    finished = false;
    NSURLConnection *conn = [[NSURLConnection alloc] initWithRequest:request delegate:self];
//堵塞线程，等待结束
while(!finished) {
[[NSRunLoop currentRunLoop] runMode:NSDefaultRunLoopMode beforeDate:[NSDate distantFuture]];
}
} 
 
- (void)connection:(NSURLConnection )connection didReceiveResponse:(NSURLResponse)response 
{}
 
- (void)connectionDidFinishLoading:(NSURLConnection *)connection 
{
    //[_waitingDialog dismissWithClickedButtonIndex:0 animated:NO];
    [connection release];
}
-(void)connection:(NSURLConnection )connection didFailWithError:(NSError )error
{ 
}
- (BOOL)connectionShouldUseCredentialStorage:(NSURLConnection *)connection{
    return NO;
}
//下面两段是重点，要服务器端单项HTTPS 验证，iOS 客户端忽略证书验证。
- (BOOL)connection:(NSURLConnection )connection canAuthenticateAgainstProtectionSpace:(NSURLProtectionSpace )protectionSpace {
    return [protectionSpace.authenticationMethod isEqualToString:NSURLAuthenticationMethodServerTrust];
} 
- (void)connection:(NSURLConnection )connection didReceiveAuthenticationChallenge:(NSURLAuthenticationChallenge )challenge {    
    NSLog(@”didReceiveAuthenticationChallenge %@ %zd”, [[challenge protectionSpace] authenticationMethod], (ssize_t) [challenge previousFailureCount]);
    
    if ([challenge.protectionSpace.authenticationMethod isEqualToString:NSURLAuthenticationMethodServerTrust]){
        [[challenge sender]  useCredential:[NSURLCredential credentialForTrust:challenge.protectionSpace.serverTrust] forAuthenticationChallenge:challenge];
        [[challenge sender]  continueWithoutCredentialForAuthenticationChallenge: challenge];
    }
} 
    NSLog(@”get the whole response”);
    //[receivedData setLength:0];
}
//处理数据 
- (void)connection:(NSURLConnection )connection didReceiveData:(NSData )data
{ 
}