/*
* RHQ Management Platform
* Copyright (C) 2005-2008 Red Hat, Inc.
* All rights reserved.
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
* the Free Software Foundation version 2 of the License.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU General Public License for more details.
*
* You should have received a copy of the GNU General Public License
* along with this program; if not, write to the Free Software
* Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
*/
package org.rhq.enterprise.server.util.security;
import java.io.IOException;
import java.net.InetAddress;
import java.net.Socket;
import java.net.UnknownHostException;
import java.security.KeyManagementException;
import java.security.NoSuchAlgorithmException;
import javax.net.ssl.SSLContext;
import javax.net.ssl.SSLSocketFactory;
import javax.net.ssl.X509TrustManager;
import org.apache.commons.httpclient.protocol.Protocol;
import org.apache.commons.httpclient.protocol.ProtocolSocketFactory;
import org.apache.commons.httpclient.protocol.SSLProtocolSocketFactory;
/**
* For use with commons-httpclient.
*/
public class UntrustedSSLProtocolSocketFactory extends SSLProtocolSocketFactory {
private static Protocol defaultSSL;
private static Protocol untrustSSL;
private SSLSocketFactory factory;
private static boolean isRegistered() {
Protocol https = Protocol.getProtocol("https");
boolean isRegistered = https.getSocketFactory() instanceof UntrustedSSLProtocolSocketFactory;
if (!isRegistered) {
defaultSSL = https;
}
return isRegistered;
}
public static void register() {
// make sure to accept self-signed certs
if (!isRegistered()) {
if (untrustSSL == null) {
untrustSSL = new Protocol("https", (ProtocolSocketFactory) new UntrustedSSLProtocolSocketFactory(), 443);
}
Protocol.registerProtocol("https", untrustSSL);
}
}
public static void unregister() {
if (isRegistered()) {
Protocol.registerProtocol("https", defaultSSL);
}
}
public UntrustedSSLProtocolSocketFactory() {
super();
try {
BogusTrustManager trustMan;
SSLContext tlsContext;
trustMan = new BogusTrustManager();
tlsContext = SSLContext.getInstance("TLS");
tlsContext.init(null, new X509TrustManager[] { trustMan }, null);
this.factory = tlsContext.getSocketFactory();
} catch (NoSuchAlgorithmException exc) {
throw new IllegalStateException("Unable to get SSL context: " + exc.getMessage());
} catch (KeyManagementException exc) {
throw new IllegalStateException("Unable to initialize ctx with BogusTrustManager: " + exc.getMessage());
}
}
public Socket createSocket(String host, int port, InetAddress clientHost, int clientPort) throws IOException,
UnknownHostException {
return this.factory.createSocket(host, port, clientHost, clientPort);
}
public Socket createSocket(String host, int port) throws IOException, UnknownHostException {
return this.factory.createSocket(host, port);
}
public Socket createSocket(Socket socket, String host, int port, boolean autoClose) throws IOException,
UnknownHostException {
return this.factory.createSocket(socket, host, port, autoClose);
}
}