Skip to content

Instantly share code, notes, and snippets.

Embed
What would you like to do?
mariuszprzydatek.com blog example on how to disable SSL certificate validation in Java
package my.hydepark.ssl;
import javax.net.ssl.*;
import java.security.cert.CertificateException;
import java.security.cert.X509Certificate;
public class SSLCertificateValidation {
public static void disable() {
try {
SSLContext sslc = SSLContext.getInstance("TLS");
TrustManager[] trustManagerArray = { new NullX509TrustManager() };
sslc.init(null, trustManagerArray, null);
HttpsURLConnection.setDefaultSSLSocketFactory(sslc.getSocketFactory());
HttpsURLConnection.setDefaultHostnameVerifier(new NullHostnameVerifier());
} catch(Exception e) {
e.printStackTrace();
}
}
private static class NullX509TrustManager implements X509TrustManager {
public void checkClientTrusted(X509Certificate[] chain, String authType) throws CertificateException {
System.out.println();
}
public void checkServerTrusted(X509Certificate[] chain, String authType) throws CertificateException {
System.out.println();
}
public X509Certificate[] getAcceptedIssuers() {
return new X509Certificate[0];
}
}
private static class NullHostnameVerifier implements HostnameVerifier {
public boolean verify(String hostname, SSLSession session) {
return true;
}
}
}
@jm1024

This comment has been minimized.

Copy link

commented Sep 17, 2014

Thanks!!!

Nice clean example. Exactly what I needed.

@maxiwu

This comment has been minimized.

Copy link

commented Jan 4, 2016

this works, thanks

@aviadhadida

This comment has been minimized.

Copy link

commented Jan 21, 2016

Anyone has an idea how to make the same for websocket? i mean for Java websocket client and "wss"

@prodigy4440

This comment has been minimized.

Copy link

commented Nov 29, 2017

Not working for me, i'm using Okhttp

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
You can’t perform that action at this time.