FakeX509TrustManager.java

package io.github.azagniotov.stubby4j.server;

import javax.net.ssl.HostnameVerifier;
import javax.net.ssl.HttpsURLConnection;
import javax.net.ssl.KeyManager;
import javax.net.ssl.SSLContext;
import javax.net.ssl.SSLSession;
import javax.net.ssl.TrustManager;
import javax.net.ssl.X509TrustManager;
import java.security.KeyManagementException;
import java.security.NoSuchAlgorithmException;
import java.security.cert.CertificateException;
import java.security.cert.X509Certificate;
import java.util.Arrays;
import java.util.HashSet;
import java.util.Set;

public final class FakeX509TrustManager implements X509TrustManager {

    private final Set<X509Certificate> acceptedIssuers = new HashSet<X509Certificate>();

    public FakeX509TrustManager() {

    }

    @Override
    public void checkClientTrusted(final X509Certificate[] chain, final String authType) throws CertificateException {
        acceptedIssuers.addAll(Arrays.asList(chain));
    }

    @Override
    public void checkServerTrusted(final X509Certificate[] chain, final String authType) throws CertificateException {
        acceptedIssuers.addAll(Arrays.asList(chain));
    }

    public boolean isClientTrusted(final X509Certificate[] chain) {
        return true;
    }

    public boolean isServerTrusted(final X509Certificate[] chain) {
        return true;
    }

    @Override
    public X509Certificate[] getAcceptedIssuers() {
        // it seems to be OK for Java <= 6 to return an empty array but not for Java 7 (at least 1.7.0_04-b20):
        // requesting an URL with a valid certificate throws a
        //  javax.net.ssl.SSLPeerUnverifiedException: peer not authenticated
        // when the array returned here is empty
        if (acceptedIssuers.isEmpty()) {
            return new X509Certificate[0];
        }
        return acceptedIssuers.toArray(new X509Certificate[acceptedIssuers.size()]);
    }

    public void allowAllSSL() throws KeyManagementException, NoSuchAlgorithmException {
        HttpsURLConnection.setDefaultHostnameVerifier(new HostnameVerifier() {
            @Override
            public boolean verify(final String hostname, final SSLSession session) {
                return true;
            }
        });

        final SSLContext defaultSslContext = SSLContext.getInstance("SSL");
        defaultSslContext.init(new KeyManager[]{}, new TrustManager[]{this}, null);
        SSLContext.setDefault(defaultSslContext);
        HttpsURLConnection.setDefaultSSLSocketFactory(defaultSslContext.getSocketFactory());
    }
}