TrustAllTrustManager.java

/**
 * Copyright (C) 2013 Alexander Szczuczko
 *
 * This file may be modified and distributed under the terms
 * of the MIT license. See the LICENSE file for details.
 */
package ca.szc.keratin.core.net.util;

import java.security.KeyManagementException;
import java.security.NoSuchAlgorithmException;
import java.security.SecureRandom;
import java.security.cert.CertificateException;
import java.security.cert.X509Certificate;

import javax.net.ssl.KeyManager;
import javax.net.ssl.SSLContext;
import javax.net.ssl.SSLSocketFactory;
import javax.net.ssl.TrustManager;
import javax.net.ssl.X509TrustManager;

import org.pmw.tinylog.Logger;

/**
 * A X509TrustManager that trusts everyone. Use with caution, this exposes you to MITM attacks.
 */
public class TrustAllTrustManager
    implements X509TrustManager
{
    private static SSLSocketFactory trustAllSocketFactory;

    public X509Certificate[] getAcceptedIssuers()
    {
        return new X509Certificate[0];
    }

    @Override
    public void checkClientTrusted( X509Certificate[] cert, String authType )
        throws CertificateException
    {
    }

    @Override
    public void checkServerTrusted( X509Certificate[] cert, String authType )
        throws CertificateException
    {
    }

    /**
     * Get a SSLSocketFactory using this X509TrustManager.
     */
    public static synchronized SSLSocketFactory getSSLSocketFactory()
    {
        if ( trustAllSocketFactory == null )
        {
            try
            {
                KeyManager[] km = new KeyManager[0];
                TrustManager[] tm = new TrustManager[] { new TrustAllTrustManager() };

                SSLContext context = SSLContext.getInstance( "SSL" );
                context.init( km, tm, new SecureRandom() );

                trustAllSocketFactory = (SSLSocketFactory) context.getSocketFactory();
            }
            catch ( KeyManagementException | NoSuchAlgorithmException e )
            {
                Logger.error( e, "Error creating custom SSLSocketFactory" );
                throw new RuntimeException( "Error creating custom SSLSocketFactory", e );
            }
        }

        return trustAllSocketFactory;
    }
}