问OkHttp3: SSL证书不被识别为有效证书

EN

@Provides
@PerApplication
OkHttpClient provideOkHttpClient(@ApplicationContext Context context) {
    int cacheSize = 10 * 1024 * 1024; // 10 MiB

    File cacheDirectory = new File(context.getCacheDir().getAbsolutePath(), "HttpCache");

    ConnectionSpec spec = new ConnectionSpec.Builder(ConnectionSpec.MODERN_TLS)
            .tlsVersions(TlsVersion.TLS_1_2)
            .cipherSuites(
                    CipherSuite.TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,
                    CipherSuite.TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,
                    CipherSuite.TLS_DHE_RSA_WITH_AES_128_GCM_SHA256)
            .build();

    OkHttpClient.Builder httpClientBuilder = new OkHttpClient.Builder()
            .connectionSpecs(Collections.singletonList(spec))
            .readTimeout(60, TimeUnit.SECONDS)
            .connectTimeout(10, TimeUnit.SECONDS)
            .cache(new Cache(cacheDirectory, cacheSize));

    if (BuildConfig.DEBUG) {
        HttpLoggingInterceptor loggingInterceptor = new HttpLoggingInterceptor();
        loggingInterceptor.setLevel(HttpLoggingInterceptor.Level.BODY);
        httpClientBuilder.addInterceptor(loggingInterceptor);
    }

    return httpClientBuilder.build();
}