如何在KMM KTOR中信任自我签名的证书？

Question

我有一台具有自签名证书的服务器，没有域名（仅静态IP地址），该服务器仅为Android和iOS客户端提供API，因此IP和自签名证书足以满足我的目的。

移动客户端是在KMM上写的，它使用KTOR客户端执行请求：

apigateway.kt：

class ApiGateway(
    private val rootUrl: String,
    private val clientId: String,
    private val secretKey: String,
    private val accountManager: IAccountManagerGateway,
    private val getDeviceName: GetDeviceNameUseCase,
) : IApiGateway {
    private val client = HttpClient {
        installContentNegotiation()
        installLogging()
        configureRequest()
        configureResponseValidator()
        installAuth()
    }
    private var account: Account? = this.accountManager.getAccount()

    private fun HttpClientConfig<*>.configureRequest() {
        defaultRequest {
            url([email protected])
            accept(ContentType.Application.Json)
            contentType(ContentType.Application.Json)
        }
    }

    private fun HttpClientConfig<*>.configureResponseValidator() {
        HttpResponseValidator {
            validateResponse { // Stub
                when (it.status.value) {
                    in 300..399 -> throw ClientException(it.bodyAsText())
                    in 400..499 -> throw ClientException(it.bodyAsText())
                    in 500..599 -> throw ClientException(it.bodyAsText())
                }
            }
        }
    }

    private fun HttpClientConfig<*>.installAuth() {
        install(Auth) {
            bearer {
                sendWithoutRequest { request ->
                    val url = request.url.build().toString()
                    !(
                            url.contains("/api/oauth2/token")
                                    || (url.contains("/api/users") &&
                                            request.method == HttpMethod.Post
                                    )
                    )
                }
                loadTokens {
                    [email protected]?.let {
                        BearerTokens(accessToken = it.accessToken, refreshToken = it.refreshToken)
                    }
                }
                refreshTokens {
                    [email protected]?.let {
                        [email protected]()
                        BearerTokens(accessToken = it.accessToken, refreshToken = it.refreshToken)
                    }
                }
            }
        }
    }

    private fun HttpClientConfig<*>.installContentNegotiation() {
        install(ContentNegotiation) {
            json()
        }
    }

    private fun HttpClientConfig<*>.installLogging() {
        install(Logging) {
            logger = Logger.SIMPLE
            level = LogLevel.ALL
        }
    }

    override suspend fun getMe(): Profile {
        return this.client.get("/api/users/me").body()
    }

    // And so on
}

不幸的是，httpclient crastes crastes https发送请求。到具有自签名证书的服务器：

iOS上的Android上：

I/System.out: HttpClient: REQUEST https://xxx.xxx.xxx.xxx:xxx/api/oauth2/token failed with exception: javax.net.ssl.SSLHandshakeException: java.security.cert.CertPathValidatorException: Trust anchor for certification path not found.

：

Uncaught Kotlin exception: io.ktor.client.engine.darwin.DarwinHttpRequestException: Exception in http request: Error Domain=NSURLErrorDomain Code=-1202 "The certificate for this server is invalid. You might be connecting to a server that is pretending to be “xxx.xxx.xxx.xxx” which could put your confidential information at risk." UserInfo={NSLocalizedRecoverySuggestion=Would you like to connect to the server anyway?, _kCFStreamErrorDomainKey=3, NSErrorPeerCertificateChainKey=(
    "<cert(0x15704bc00) s: xxx.xxx.xxx.xxx i: xxx.xxx.xxx.xxx>"

我如何设置KTOR客户端以信任自签名证书？