AllCertificatesAndHostsTruster.java

package com.alexbbb.uploadservice;

import java.security.SecureRandom;
import java.security.cert.CertificateException;
import java.security.cert.X509Certificate;
import java.util.logging.Level;
import java.util.logging.Logger;

import javax.net.ssl.HostnameVerifier;
import javax.net.ssl.HttpsURLConnection;
import javax.net.ssl.SSLContext;
import javax.net.ssl.SSLSession;
import javax.net.ssl.TrustManager;
import javax.net.ssl.X509TrustManager;

/**
 * TrustManager that accepts all certificates and hosts.
 * Useful when the server has self signed certificates.
 * Use at your own risk.
 *
 * @author alexbbb (Alex Gotev)
 */
public class AllCertificatesAndHostsTruster implements TrustManager, X509TrustManager {

    private static final Logger LOGGER = Logger.getLogger(AllCertificatesAndHostsTruster.class.getName());
    private static final String SSL_FAILED = "Unable to initialize the Trust Manager to trust all the "
                                           + "SSL certificates and HTTPS hosts.";

    @Override
    public final void checkClientTrusted(final X509Certificate[] xcs, final String string) throws CertificateException {
    }

    @Override
    public final void checkServerTrusted(final X509Certificate[] xcs, final String string) throws CertificateException {
    }

    @Override
    public final X509Certificate[] getAcceptedIssuers() {
        return new X509Certificate[0];
    }

    public static void apply() {
        final TrustManager[] trustAllCerts = new TrustManager[] {new AllCertificatesAndHostsTruster()};

        try {
            final SSLContext context = SSLContext.getInstance("SSL");
            context.init(null, trustAllCerts, new SecureRandom());
            HttpsURLConnection.setDefaultSSLSocketFactory(context.getSocketFactory());
            HttpsURLConnection.setDefaultHostnameVerifier(new HostnameVerifier() {
                
                @Override
                public boolean verify(String hostname, SSLSession session) {
                    return true;
                }
            });
        
        } catch (Exception e) {
            LOGGER.log(Level.INFO, SSL_FAILED);
        }
    }
}