Skip to content

Instantly share code, notes, and snippets.

@wilinz
Forked from preethamhegdes/OkHttpUtil.java
Created April 23, 2024 17:03
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save wilinz/05a416993f1a1dc1c4c1c096f59b9d9f to your computer and use it in GitHub Desktop.
Save wilinz/05a416993f1a1dc1c4c1c096f59b9d9f to your computer and use it in GitHub Desktop.
OkHttp Client Ignore certificate
import okhttp3.*;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;
import javax.net.ssl.*;
import java.net.*;
import java.security.cert.CertificateException;
/*
okhttp version used 3.8.1
*/
public class OkHttpUtil {
private static final Logger LOGGER = LoggerFactory.getLogger(OkHttpUtil.class.getName());
private static OkHttpClient client = null;
private static boolean ignoreSslCertificate = false;
public static OkHttpClient getClient() {
return client;
}
public static void init(boolean ignoreCertificate) throws Exception {
OkHttpClient.Builder builder = new OkHttpClient.Builder();
LOGGER.info("Initialising httpUtil with default configuration");
if (ignoreCertificate) {
ignoreSslCertificate = true;
builder = configureToIgnoreCertificate(builder);
}
//Other application specific configuration
client = builder.build();
}
//Setting testMode configuration. If set as testMode, the connection will skip certification check
private static OkHttpClient.Builder configureToIgnoreCertificate(OkHttpClient.Builder builder) {
LOGGER.warn("Ignore Ssl Certificate");
try {
// Create a trust manager that does not validate certificate chains
final TrustManager[] trustAllCerts = new TrustManager[] {
new X509TrustManager() {
@Override
public void checkClientTrusted(java.security.cert.X509Certificate[] chain, String authType)
throws CertificateException {
}
@Override
public void checkServerTrusted(java.security.cert.X509Certificate[] chain, String authType)
throws CertificateException {
}
@Override
public java.security.cert.X509Certificate[] getAcceptedIssuers() {
return new java.security.cert.X509Certificate[]{};
}
}
};
// Install the all-trusting trust manager
final SSLContext sslContext = SSLContext.getInstance("SSL");
sslContext.init(null, trustAllCerts, new java.security.SecureRandom());
// Create an ssl socket factory with our all-trusting manager
final SSLSocketFactory sslSocketFactory = sslContext.getSocketFactory();
builder.sslSocketFactory(sslSocketFactory, (X509TrustManager)trustAllCerts[0]);
builder.hostnameVerifier(new HostnameVerifier() {
@Override
public boolean verify(String hostname, SSLSession session) {
return true;
}
});
} catch (Exception e) {
LOGGER.warn("Exception while configuring IgnoreSslCertificate" + e, e);
}
return builder;
}
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment