Skip to content

Instantly share code, notes, and snippets.

@mariuszprzydatek
Last active February 3, 2023 10:28
Show Gist options
  • Save mariuszprzydatek/6046279 to your computer and use it in GitHub Desktop.
Save mariuszprzydatek/6046279 to your computer and use it in GitHub Desktop.
mariuszprzydatek.com blog example on how to disable SSL certificate validation in Java
package my.hydepark.ssl;
import javax.net.ssl.*;
import java.security.cert.CertificateException;
import java.security.cert.X509Certificate;
public class SSLCertificateValidation {
public static void disable() {
try {
SSLContext sslc = SSLContext.getInstance("TLS");
TrustManager[] trustManagerArray = { new NullX509TrustManager() };
sslc.init(null, trustManagerArray, null);
HttpsURLConnection.setDefaultSSLSocketFactory(sslc.getSocketFactory());
HttpsURLConnection.setDefaultHostnameVerifier(new NullHostnameVerifier());
} catch(Exception e) {
e.printStackTrace();
}
}
private static class NullX509TrustManager implements X509TrustManager {
public void checkClientTrusted(X509Certificate[] chain, String authType) throws CertificateException {
System.out.println();
}
public void checkServerTrusted(X509Certificate[] chain, String authType) throws CertificateException {
System.out.println();
}
public X509Certificate[] getAcceptedIssuers() {
return new X509Certificate[0];
}
}
private static class NullHostnameVerifier implements HostnameVerifier {
public boolean verify(String hostname, SSLSession session) {
return true;
}
}
}
@maxiwu
Copy link

maxiwu commented Jan 4, 2016

this works, thanks

@aviadhadida
Copy link

Anyone has an idea how to make the same for websocket? i mean for Java websocket client and "wss"

@prodigy4440
Copy link

Not working for me, i'm using Okhttp

@JamesSunny
Copy link

Very nice, it works with RestTemaple! thank you

Is it possible to limit it to one specific call?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment