by.stub.server.FakeX509TrustManager Maven / Gradle / Ivy

Go to download
package by.stub.server;

import javax.net.ssl.HostnameVerifier;
import javax.net.ssl.HttpsURLConnection;
import javax.net.ssl.KeyManager;
import javax.net.ssl.SSLContext;
import javax.net.ssl.SSLSession;
import javax.net.ssl.TrustManager;
import javax.net.ssl.X509TrustManager;
import java.security.KeyManagementException;
import java.security.NoSuchAlgorithmException;
import java.security.cert.CertificateException;
import java.security.cert.X509Certificate;
import java.util.Arrays;
import java.util.HashSet;
import java.util.Set;

public final class FakeX509TrustManager implements X509TrustManager {

   private final Set acceptedIssuers = new HashSet();

   public FakeX509TrustManager() {

   }

   @Override
   public void checkClientTrusted(final X509Certificate[] chain, final String authType) throws CertificateException {
      acceptedIssuers.addAll(Arrays.asList(chain));
   }

   @Override
   public void checkServerTrusted(final X509Certificate[] chain, final String authType) throws CertificateException {
      acceptedIssuers.addAll(Arrays.asList(chain));
   }

   public boolean isClientTrusted(final X509Certificate[] chain) {
      return true;
   }

   public boolean isServerTrusted(final X509Certificate[] chain) {
      return true;
   }

   @Override
   public X509Certificate[] getAcceptedIssuers() {
      // it seems to be OK for Java <= 6 to return an empty array but not for Java 7 (at least 1.7.0_04-b20):
      // requesting an URL with a valid certificate throws a
      //  javax.net.ssl.SSLPeerUnverifiedException: peer not authenticated
      // when the array returned here is empty
      if (acceptedIssuers.isEmpty()) {
         return new X509Certificate[0];
      }
      return acceptedIssuers.toArray(new X509Certificate[acceptedIssuers.size()]);
   }

   public void allowAllSSL() throws KeyManagementException, NoSuchAlgorithmException {
      HttpsURLConnection.setDefaultHostnameVerifier(new HostnameVerifier() {
         @Override
         public boolean verify(final String hostname, final SSLSession session) {
            return true;
         }
      });

      final SSLContext defaultSslContext = SSLContext.getInstance("SSL");
      defaultSslContext.init(new KeyManager[]{}, new TrustManager[]{this}, null);
      SSLContext.setDefault(defaultSslContext);
      HttpsURLConnection.setDefaultSSLSocketFactory(defaultSslContext.getSocketFactory());
   }
}