ansaurus

Question

Allowing Java to use an untrusted certificate for SSL/HTTPS connection

Answer 1

+9 A:

Here is some relevant code (from here):

// Create a trust manager that does not validate certificate chains
TrustManager[] trustAllCerts = new TrustManager[]{
    new X509TrustManager() {
        public java.security.cert.X509Certificate[] getAcceptedIssuers() {
            return null;
        }
        public void checkClientTrusted(
            java.security.cert.X509Certificate[] certs, String authType) {
        }
        public void checkServerTrusted(
            java.security.cert.X509Certificate[] certs, String authType) {
        }
    }
};

// Install the all-trusting trust manager
try {
    SSLContext sc = SSLContext.getInstance("SSL");
    sc.init(null, trustAllCerts, new java.security.SecureRandom());
    HttpsURLConnection.setDefaultSSLSocketFactory(sc.getSocketFactory());
} catch (Exception e) {
}

// Now you can access an https URL without having the certificate in the truststore
try {
    URL url = new URL("https://hostname/index.html");
} catch (MalformedURLException e) {
}

This will completely disable SSL checking. Just don't learn exception handling from such code!

To do what you want you would have to implement a check in your TrustManager that prompts the user.

Yishai 2009-07-29 15:27:16

This is the way to do it; however, you need to be really careful that this code doesn't make it to production- and if you're using untrusted certs in a production app, it's a Bad Thing.If you have a dependency injection framework like spring in your app, consider isolating this code and have a secure version for the production environment.

Tim Howland 2009-07-29 15:31:41

Answer 2

A:

Hi,

Can you tell me the package for TrustManager which you are using here. I have seen similar code in The Java Developers Almanac 1.4, but when I tried to use it with JDK 5, it could not be resolved.

2009-08-20 13:28:13

ansaurus

tags:

views:

answers:

Allowing Java to use an untrusted certificate for SSL/HTTPS connection

related questions