Disable SSL validation in Groovy

disableSSL.groovy

def nullTrustManager = [
    checkClientTrusted: { chain, authType ->  },
    checkServerTrusted: { chain, authType ->  },
    getAcceptedIssuers: { null }
]

def nullHostnameVerifier = [
    verify: { hostname, session -> true }
]

SSLContext sc = SSLContext.getInstance("SSL")
sc.init(null, [nullTrustManager as X509TrustManager] as TrustManager[], null)
HttpsURLConnection.setDefaultSSLSocketFactory(sc.getSocketFactory())
HttpsURLConnection.setDefaultHostnameVerifier(nullHostnameVerifier as HostnameVerifier)

Thank you. Works for me. Using in grails restBuilder for integration tests.

Tried this in a Jenkins pipeline:

groovy.lang.MissingMethodException: No signature of method: java.util.LinkedHashMap.checkClientTrusted() is applicable for argument types: (null, null) values: [null, null]

In Jenkins you may need to put @NonCPS in front of your function/method to make this work.

Mine works. Tested on latest v of jenkins.

I have the same error as @crummy. @kchandan What did you change to make this work?

I managed to do this in jenkins pipeline by :

1. put the script above in a @NonCPS function
2. disable groovy sandbox and call the function

If you're using okhttp3 client from 3.1.2 onwards, use the following code instead:

import java.security.cert.X509Certificate

def nullTrustManager = [
    checkClientTrusted: { chain, authType ->  },
    checkServerTrusted: { chain, authType ->  },
    getAcceptedIssuers: { -> new X509Certificate[0] }
]

See this commit