TrustModifier.java

package library;

import java.net.HttpURLConnection;
import java.security.KeyManagementException;
import java.security.KeyStoreException;
import java.security.NoSuchAlgorithmException;
import java.security.cert.CertificateException;
import java.security.cert.X509Certificate;

import javax.net.ssl.HostnameVerifier;
import javax.net.ssl.HttpsURLConnection;
import javax.net.ssl.SSLContext;
import javax.net.ssl.SSLSession;
import javax.net.ssl.SSLSocketFactory;
import javax.net.ssl.TrustManager;
import javax.net.ssl.X509TrustManager;

public class TrustModifier {
	private static final TrustingHostnameVerifier TRUSTING_HOSTNAME_VERIFIER = new TrustingHostnameVerifier();
	private static SSLSocketFactory factory;

	/**
	 * Call this with any HttpURLConnection, and it will modify the trust
	 * settings if it is an HTTPS connection.
	 */
	public static void relaxHostChecking(HttpURLConnection conn)
			throws KeyManagementException, NoSuchAlgorithmException,
			KeyStoreException {

		if (conn instanceof HttpsURLConnection) {
			HttpsURLConnection httpsConnection = (HttpsURLConnection) conn;
			SSLSocketFactory factory = prepFactory(httpsConnection);
			httpsConnection.setSSLSocketFactory(factory);
			httpsConnection.setHostnameVerifier(TRUSTING_HOSTNAME_VERIFIER);
		}
	}

	static synchronized SSLSocketFactory prepFactory(
			HttpsURLConnection httpsConnection)
			throws NoSuchAlgorithmException, KeyStoreException,
			KeyManagementException {

		if (factory == null) {
			SSLContext ctx = SSLContext.getInstance("TLS");
			ctx.init(null, new TrustManager[] { new AlwaysTrustManager() },
					null);
			factory = ctx.getSocketFactory();
		}
		return factory;
	}

	private static final class TrustingHostnameVerifier implements
			HostnameVerifier {
		public boolean verify(String hostname, SSLSession session) {
			return true;
		}
	}

	private static class AlwaysTrustManager implements X509TrustManager {
		public void checkClientTrusted(X509Certificate[] arg0, String arg1)
				throws CertificateException {
		}

		public void checkServerTrusted(X509Certificate[] arg0, String arg1)
				throws CertificateException {
		}

		public X509Certificate[] getAcceptedIssuers() {
			return null;
		}
	}

}