Java Code Examples for javax.net.ssl.HttpsURLConnection#setDefaultHostnameVerifier()

public static void allowAllSSL() {
    HttpsURLConnection.setDefaultHostnameVerifier(new HostnameVerifier() {
        @Override
        public boolean verify(String arg0, SSLSession arg1) {
            return true;
        }
    });

    SSLContext sslContext = null;
    if (trustManagers == null) {
        trustManagers = new TrustManager[]{new HTTPSTrustManager()};
    }

    try {
        sslContext = SSLContext.getInstance("TLS");
        sslContext.init(null, trustManagers, new SecureRandom());
    } catch (NoSuchAlgorithmException | KeyManagementException e) {
        e.printStackTrace();
    }
    if (sslContext != null) {
        HttpsURLConnection.setDefaultSSLSocketFactory(sslContext.getSocketFactory());
    }
}
 

public static void init() {
    // set up system properties for local IDE debug
    if (System.getProperty("mmsConfigFile") == null) {
        System.setProperty("mmsConfigFile", "src/test/resources/config.properties");
    }
    if (System.getProperty("METRICS_LOCATION") == null) {
        System.setProperty("METRICS_LOCATION", "build/logs");
    }
    if (System.getProperty("LOG_LOCATION") == null) {
        System.setProperty("LOG_LOCATION", "build/logs");
    }

    try {
        SSLContext context = SSLContext.getInstance("TLS");
        context.init(null, InsecureTrustManagerFactory.INSTANCE.getTrustManagers(), null);

        HttpsURLConnection.setDefaultSSLSocketFactory(context.getSocketFactory());

        HttpsURLConnection.setDefaultHostnameVerifier((s, sslSession) -> true);
    } catch (GeneralSecurityException e) {
        // ignore
    }
}
 

/**
 * Disable certificate verification.
 *
 * @throws KeyManagementException
 *             the key management exception
 * @throws NoSuchAlgorithmException
 *             the no such algorithm exception
 */
private void disableCertificateVerification()
        throws KeyManagementException, NoSuchAlgorithmException {
    // Create a trust manager that does not validate certificate chains
    final TrustManager[] trustAllCerts = new TrustManager[] { new CustomTrustManager() };

    // Install the all-trusting trust manager
    final SSLContext sslContext = SSLContext.getInstance("SSL");
    sslContext.init(null, trustAllCerts, new SecureRandom());
    final SSLSocketFactory sslSocketFactory = sslContext.getSocketFactory();
    HttpsURLConnection.setDefaultSSLSocketFactory(sslSocketFactory);
    final HostnameVerifier verifier = new HostnameVerifier() {
        @Override
        public boolean verify(final String hostname,
                final SSLSession session) {
            return true;
        }
    };

    HttpsURLConnection.setDefaultHostnameVerifier(verifier);
}
 

public static void initiate() {
	// if (initiated) return;
	SSLContext sc;
	try {
		TrustManager[] trustAllCerts = new TrustManager[] { new EclipseSWTTrustManager() };
		sc = SSLContext.getInstance("SSL");
		sc.init(null, trustAllCerts, new java.security.SecureRandom());
		HttpsURLConnection.setDefaultSSLSocketFactory(sc.getSocketFactory());
		HostnameVerifier allHostsValid = new HostnameVerifier() {
			public boolean verify(String hostname, SSLSession session) {
				return true;
			}
		};
		HttpsURLConnection.setDefaultHostnameVerifier(allHostsValid);
	} catch (Exception e) {
		log.error(e.getMessage(),e);
	}
	initiated = true;
}
 

void doClientSide() throws Exception {
    // Wait for server to get started.
    while (!serverReady) {
        Thread.sleep(50);
    }

    HttpsURLConnection.setDefaultHostnameVerifier(new HostnameVerifier() {
        public boolean verify(String hostname, SSLSession session) {
            return true;
        }});

    URL url = new URL("https://localhost:" + serverPort +"/");

    // Run without a CookieHandler first
    InputStream in = url.openConnection().getInputStream();
    while (in.read() != -1);  // read response body so connection can be reused

    // Set a CookeHandler and retest using the HttpClient from the KAC
    CookieManager manager = new CookieManager(null, CookiePolicy.ACCEPT_ALL);
    CookieHandler.setDefault(manager);

    in = url.openConnection().getInputStream();
    while (in.read() != -1);

    if (manager.getCookieStore().getCookies().isEmpty()) {
        throw new RuntimeException("Failed: No cookies in the cookie Handler.");
    }
}
 

void doClientSide() throws Exception {
    // Wait for server to get started.
    while (!serverReady) {
        Thread.sleep(50);
    }

    HttpsURLConnection.setDefaultHostnameVerifier(new HostnameVerifier() {
        public boolean verify(String hostname, SSLSession session) {
            return true;
        }});

    URL url = new URL("https://localhost:" + serverPort +"/");

    // Run without a CookieHandler first
    InputStream in = url.openConnection().getInputStream();
    while (in.read() != -1);  // read response body so connection can be reused

    // Set a CookeHandler and retest using the HttpClient from the KAC
    CookieManager manager = new CookieManager(null, CookiePolicy.ACCEPT_ALL);
    CookieHandler.setDefault(manager);

    in = url.openConnection().getInputStream();
    while (in.read() != -1);

    if (manager.getCookieStore().getCookies().isEmpty()) {
        throw new RuntimeException("Failed: No cookies in the cookie Handler.");
    }
}
 

public static void disable() {
    try {
        SSLContext sslc = SSLContext.getInstance("TLS");
        TrustManager[] trustManagerArray = { new NullX509TrustManager() };
        sslc.init(null, trustManagerArray, null);
        HttpsURLConnection.setDefaultSSLSocketFactory(sslc.getSocketFactory());
        HttpsURLConnection.setDefaultHostnameVerifier(new NullHostnameVerifier());
    } catch(Exception e) {
        e.printStackTrace();
    }
}
 

@AfterMethod
@Override
public void tearDown() throws Exception {
  myTomcat.stop();
  HttpsURLConnection.setDefaultHostnameVerifier(myDefaultHostnameVerifier);
  super.tearDown();
}
 

/**
 * Set the default Hostname Verifier to an instance of a fake class that trust all hostnames. This
 * method uses the old deprecated API from the com.sun.ssl package.
 *
 * @deprecated see {@link #_trustAllHostnames()}.
 */
private static void __trustAllHostnames() {
  // Create a trust manager that does not validate certificate chains
  if (__hostnameVerifier == null) {
    __hostnameVerifier = new _FakeHostnameVerifier();
  } // if
  // Install the all-trusting host name verifier
  HttpsURLConnection.setDefaultHostnameVerifier(__hostnameVerifier);
}
 

/**
 * Initializes the httpClient.
 */
public static void initialize() throws XPathExpressionException {

    DefaultHttpClient client = new DefaultHttpClient();

    HostnameVerifier hostnameVerifier = org.apache.http.conn.ssl.SSLSocketFactory.ALLOW_ALL_HOSTNAME_VERIFIER;
    SSLSocketFactory socketFactory = SSLSocketFactory.getSocketFactory();
    Scheme sch = new Scheme("https", 443, socketFactory);
    ClientConnectionManager mgr = client.getConnectionManager();
    mgr.getSchemeRegistry().register(sch);
    httpClient = new DefaultHttpClient(mgr, client.getParams());

    // Set verifier
    HttpsURLConnection.setDefaultHostnameVerifier(hostnameVerifier);
}
 

public CleanUpCommand(int status, int remainingBuildCount, TestPlanUOW testPlanUOW, List<String> datasource,
                      String grafanaUrl) {
    HostnameVerifier allHostsValid = new HostValidator();
    HttpsURLConnection.setDefaultHostnameVerifier(allHostsValid);
    this.status = status;
    this.remainingBuildCount = remainingBuildCount;
    this.testPlanUOW = testPlanUOW;
    this.datasource = datasource;
    this.grafanaUrl = grafanaUrl;

}
 

private void untrustEveryone() {
    if(defaultVerifier != null) {
        HttpsURLConnection.setDefaultHostnameVerifier(defaultVerifier);
    }
    if(defaultSSLSocketFactory != null) {
         HttpsURLConnection.setDefaultSSLSocketFactory(defaultSSLSocketFactory);
    }
}
 

@BeforeClass
public static void beforeSecureClass()
    throws IOException, GeneralSecurityException
{
    defaultHostnameVerifier = HttpsURLConnection.getDefaultHostnameVerifier();
    defaultSSLSocketFactory = HttpsURLConnection.getDefaultSSLSocketFactory();
    HttpsURLConnection.setDefaultHostnameVerifier( ( string, ssls ) -> true );
    HttpsURLConnection.setDefaultSSLSocketFactory( buildTrustSSLContext().getSocketFactory() );
}
 

/**
 * Disable SSL hostname verification.
 * @param disableChecks
 * @return
 */
public Builder trustAllHostnames(boolean disableChecks) {
  instance.trustAllHostnames = disableChecks;
  if (disableChecks) {
    HttpsURLConnection.setDefaultHostnameVerifier(new AllValidatingHostnameVerifier());
  }
  return this;
}
 

/** {@inheritDoc} */
@Override protected void beforeTest() throws Exception {
    // Disable SSL hostname verifier.
    HttpsURLConnection.setDefaultHostnameVerifier(new HostnameVerifier() {
        @Override public boolean verify(String s, SSLSession sslSes) {
            return true;
        }
    });

    super.beforeTest();
}
 

/** Set the default Hostname Verifier to an instance of a fake class that trust all hostnames. */
private static void _trustAllHostnames() {
  // Create a trust manager that does not validate certificate chains
  if (_hostnameVerifier == null) {
    _hostnameVerifier = new FakeHostnameVerifier();
  } // if
  // Install the all-trusting host name verifier:
  HttpsURLConnection.setDefaultHostnameVerifier(_hostnameVerifier);
}
 

public static void ignoreSsl() throws Exception {
    System.setProperty("jsse.enableSNIExtension", "false");
    trustAllHttpsCertificates();
    HttpsURLConnection
            .setDefaultHostnameVerifier(new MockHostnameVerifier());
}
 

public void init(Configuration config) {
   LOG.debug("Initializing ConfigurationModule " + this.getClass().getName());
   LOG.warn("Activating bypass: Hostname verifcation. DO NOT USE THIS IN PRODUCTION.");
   this.oldHostNameVerifier = HttpsURLConnection.getDefaultHostnameVerifier();
   HttpsURLConnection.setDefaultHostnameVerifier(new ConfigurationModuleHostNameVerifier.BypassHostnameVerifier());
}
 

public void unload() throws TechnicalConnectorException {
   LOG.debug("Unloading ConfigurationModule " + this.getClass().getName());
   HttpsURLConnection.setDefaultHostnameVerifier(this.oldHostNameVerifier);
}
 

/**
 * Establish a connection to the vCenter.
 */
public void connect() throws Exception {
    // FIXME what to do?
    HostnameVerifier hv = new HostnameVerifier() {
        @Override
        public boolean verify(String urlHostName, SSLSession session) {
            return true;
        }
    };

    int numFailedLogins = 0;
    boolean repeatLogin = true;

    while (repeatLogin) {
        try {
            HttpsURLConnection.setDefaultHostnameVerifier(hv);

            VimService vimService = new VimService();
            VimPortType vimPort = vimService.getVimPort();
            Map<String, Object> ctxt = ((BindingProvider) vimPort)
                    .getRequestContext();

            ctxt.put(BindingProvider.ENDPOINT_ADDRESS_PROPERTY, url);
            ctxt.put(BindingProvider.SESSION_MAINTAIN_PROPERTY,
                    Boolean.TRUE);

            ManagedObjectReference morSvcInstance = new ManagedObjectReference();
            morSvcInstance.setType("ServiceInstance");
            morSvcInstance.setValue("ServiceInstance");
            ServiceContent serviceContent = vimPort
                    .retrieveServiceContent(morSvcInstance);
            vimPort.login(serviceContent.getSessionManager(), user,
                    password, null);
            connection = new ServiceConnection(vimPort, serviceContent);
            LOG.debug("Established connection to vSphere. URL: " + url
                    + ", UserId: " + user);

            repeatLogin = false;
        } catch (Exception e) {
            LOG.error("Failed to establish connection to vSphere. URL: "
                    + url + ", UserId: " + user, e);
            if (numFailedLogins > 2) {
                throw e;
            }
            numFailedLogins++;
            repeatLogin = true;
            try {
                Thread.sleep(3000);
            } catch (@SuppressWarnings("unused") InterruptedException ex) {
                Thread.currentThread().interrupt();
            }
        }
    }
}