Apache HttpClient 4.0 Ignore SSL Certificate Errors

Question

How to bypass invalid SSL certificate errors with Apache HttpClient 4.0?

Answer 1

Here's a solution for 3.x, which should be modifiable to 4.x.

Answer 2

You need to create a SSLContext with your own TrustManager and create HTTPS scheme using this context. Here is the code,

SSLContext sslContext = SSLContext.getInstance("SSL");

// set up a TrustManager that trusts everything
sslContext.init(null, new TrustManager[] { new X509TrustManager() {
            public X509Certificate[] getAcceptedIssuers() {
                    System.out.println("getAcceptedIssuers =============");
                    return null;
            }

            public void checkClientTrusted(X509Certificate[] certs,
                            String authType) {
                    System.out.println("checkClientTrusted =============");
            }

            public void checkServerTrusted(X509Certificate[] certs,
                            String authType) {
                    System.out.println("checkServerTrusted =============");
            }
} }, new SecureRandom());

SSLSocketFactory sf = new SSLSocketFactory(sslcontext);
Scheme httpsScheme = new Scheme("https", sf, 443);
SchemeRegistry schemeRegistry = new SchemeRegistry();
schemeRegistry.register(httpsScheme);

HttpParams params = new BasicHttpParams();
ClientConnectionManager cm = new SingleClientConnManager(params, schemeRegistry);
HttpClient              httpClient = new DefaultHttpClient(cm, params);

Answer 3

in extension to this answer it will be nice to override the hostnameverifier

// ...
SSLSocketFactory sf = new SSLSocketFactory (sslContext);
sf.setHostnameVerifier(new X509HostnameVerifier() {

  public boolean verify(String hostname, SSLSession session) {
    return true;
  }

  public void verify(String host, String[] cns, String[] subjectAlts)
  throws SSLException {
  }

  public void verify(String host, X509Certificate cert) throws SSLException {
  }

  public void verify(String host, SSLSocket ssl) throws IOException {
  }
});
// ...