From f9747078f6f575b77b9a3692162cca0c24b4d56b Mon Sep 17 00:00:00 2001 From: Christophe Beyls Date: Sat, 28 Dec 2013 02:17:26 +0100 Subject: [PATCH] Added code to also bypass hostname verification in HttpUtils (required for HTTPS redirects) --- src/be/digitalia/fosdem/utils/HttpUtils.java | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/src/be/digitalia/fosdem/utils/HttpUtils.java b/src/be/digitalia/fosdem/utils/HttpUtils.java index 8fa7a3f..a677fe6 100644 --- a/src/be/digitalia/fosdem/utils/HttpUtils.java +++ b/src/be/digitalia/fosdem/utils/HttpUtils.java @@ -8,8 +8,10 @@ import java.net.URL; import java.security.cert.CertificateException; import java.security.cert.X509Certificate; +import javax.net.ssl.HostnameVerifier; import javax.net.ssl.HttpsURLConnection; import javax.net.ssl.SSLContext; +import javax.net.ssl.SSLSession; import javax.net.ssl.TrustManager; import javax.net.ssl.X509TrustManager; @@ -33,6 +35,13 @@ public class HttpUtils { System.setProperty("http.keepAlive", "false"); } + // Bypass hostname verification + HttpsURLConnection.setDefaultHostnameVerifier(new HostnameVerifier() { + public boolean verify(String hostname, SSLSession session) { + return true; + } + }); + // Trust all HTTPS certificates TrustManager[] trustAllCerts = new TrustManager[] { new X509TrustManager() { public java.security.cert.X509Certificate[] getAcceptedIssuers() {