NSString *certFilePath = [[NSBundle mainBundle] pathForResource:@"server" ofType:@"cer"];
 NSData *certData = [NSData dataWithContentsOfFile:certFilePath];
 NSSet *certSet = [NSSet setWithObject:certData];
 AFSecurityPolicy *policy = [AFSecurityPolicy policyWithPinningMode:AFSSLPinningModeCertificate withPinnedCertificates:certSet];
 policy.allowInvalidCertificates = YES;
 policy.validatesDomainName = NO;
 self.afnetworkingManager.securityPolicy = policy;

- (void)URLSession:(NSURLSession *)session didReceiveChallenge:(nonnull NSURLAuthenticationChallenge *)challenge completionHandler:(nonnull void (^)(NSURLSessionAuthChallengeDisposition, NSURLCredential * _Nullable))completionHandler

 if (self.taskDidReceiveAuthenticationChallenge) {
  disposition = self.taskDidReceiveAuthenticationChallenge(session, task, challenge, &credential);
 } else {
  ...
 }

[self.afnetworkingManager setSessionDidReceiveAuthenticationChallengeBlock:^NSURLSessionAuthChallengeDisposition(NSURLSession*session, NSURLAuthenticationChallenge *challenge, NSURLCredential *__autoreleasing*_credential) {
  ...
}

//评估服务端安全性
if([weakSelf.afnetworkingManager.securityPolicy evaluateServerTrust:challenge.protectionSpace.serverTrust forDomain:challenge.protectionSpace.host]) {
    //创建凭据
    credential = [NSURLCredential credentialForTrust:challenge.protectionSpace.serverTrust];
    if(credential) {
     disposition =NSURLSessionAuthChallengeUseCredential;
    } else {
     disposition =NSURLSessionAuthChallengePerformDefaultHandling;
    }
   } else {
    disposition = NSURLSessionAuthChallengeCancelAuthenticationChallenge;
   }

   SecIdentityRef identity = NULL;
   SecTrustRef trust = NULL;
   NSString *p12 = [[NSBundle mainBundle] pathForResource:@"client"ofType:@"p12"];
   NSFileManager *fileManager =[NSFileManager defaultManager];

   if(![fileManager fileExistsAtPath:p12])
   {
    NSLog(@"client.p12:not exist");
   }
   else
   {
    NSData *PKCS12Data = [NSData dataWithContentsOfFile:p12];

    if ([[weakSelf class]extractIdentity:&identity andTrust:&trust fromPKCS12Data:PKCS12Data])
    {
     SecCertificateRef certificate = NULL;
     SecIdentityCopyCertificate(identity, &certificate);
     const void*certs[] = {certificate};
     CFArrayRef certArray =CFArrayCreate(kCFAllocatorDefault, certs,1,NULL);
     credential =[NSURLCredential credentialWithIdentity:identity certificates:(__bridge NSArray*)certArray persistence:NSURLCredentialPersistencePermanent];
     disposition =NSURLSessionAuthChallengeUseCredential;
    }
   }

+ (BOOL)extractIdentity:(SecIdentityRef*)outIdentity andTrust:(SecTrustRef *)outTrust fromPKCS12Data:(NSData *)inPKCS12Data {
 OSStatus securityError = errSecSuccess;
 //client certificate password
 NSDictionary*optionsDictionary = [NSDictionary dictionaryWithObject:@"your p12 file pwd"
                 forKey:(__bridge id)kSecImportExportPassphrase];

 CFArrayRef items = CFArrayCreate(NULL, 0, 0, NULL);
 securityError = SecPKCS12Import((__bridge CFDataRef)inPKCS12Data,(__bridge CFDictionaryRef)optionsDictionary,&items);

 if(securityError == 0) {
  CFDictionaryRef myIdentityAndTrust =CFArrayGetValueAtIndex(items,0);
  const void*tempIdentity =NULL;
  tempIdentity= CFDictionaryGetValue (myIdentityAndTrust,kSecImportItemIdentity);
  *outIdentity = (SecIdentityRef)tempIdentity;
  const void*tempTrust =NULL;
  tempTrust = CFDictionaryGetValue(myIdentityAndTrust,kSecImportItemTrust);
  *outTrust = (SecTrustRef)tempTrust;
 } else {
  NSLog(@"Failedwith error code %d",(int)securityError);
  return NO;
 }
 return YES;
}

 completionHandler(NSURLSessionAuthChallengeUseCredential, credential);

- (BOOL)webView:(UIWebView *)webView shouldStartLoadWithRequest:(NSURLRequest *)request navigationType:(UIWebViewNavigationType)navigationType {
 NSString * urlString = [request.URL absoluteString];
 if ([urlString containsString:URL_API_BASE]) {
  [[SUHTTPOperationManager manager]REQUEST:request progress:nil handler:^(BOOL isSucc, id responseObject, NSError *error) {
   NSString * htmlString = [[NSString alloc] initWithData:responseObject encoding:NSUTF8StringEncoding];
   BASE_INFO_FUN(@"下载HTML完毕");
   [self loadHTMLString:htmlString baseURL:nil];
  }];
  return NO;
 }
 return YES;
}