Skip to content

Commit c032811

Browse files
committed
fix: actually bypassing all verifications if needed
1 parent 5dad955 commit c032811

File tree

2 files changed

+33
-5
lines changed

2 files changed

+33
-5
lines changed

pom.xml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -8,7 +8,7 @@
88
<url>https://github.com/clean-arch-enablers-project/cae-utils-http-client/blob/main/README.md</url>
99
<groupId>com.clean-arch-enablers</groupId>
1010
<artifactId>cae-http-client</artifactId>
11-
<version>2.2.0</version>
11+
<version>2.2.1</version>
1212
<packaging>jar</packaging>
1313
<licenses>
1414
<license>

src/main/java/com/cae/http_client/implementations/SSLBypassSettings.java

Lines changed: 32 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -4,8 +4,10 @@
44
import lombok.NoArgsConstructor;
55

66
import javax.net.ssl.SSLContext;
7+
import javax.net.ssl.SSLEngine;
78
import javax.net.ssl.TrustManager;
8-
import javax.net.ssl.X509TrustManager;
9+
import javax.net.ssl.X509ExtendedTrustManager;
10+
import java.net.Socket;
911
import java.security.KeyManagementException;
1012
import java.security.NoSuchAlgorithmException;
1113
import java.security.SecureRandom;
@@ -33,18 +35,44 @@ public static SSLContext getContext(){
3335
}
3436
}
3537

36-
public static class CustomTrustManager implements X509TrustManager{
38+
public static class CustomTrustManager extends X509ExtendedTrustManager {
39+
40+
public static final String BYPASS_MESSAGE = "Bypassing SSL verifications";
3741

3842
@Override
39-
public void checkClientTrusted(X509Certificate[] certs, String authType) {}
43+
public void checkClientTrusted(X509Certificate[] certs, String authType) {
44+
System.out.println(BYPASS_MESSAGE);
45+
}
4046

4147
@Override
42-
public void checkServerTrusted(X509Certificate[] certs, String authType) {}
48+
public void checkServerTrusted(X509Certificate[] certs, String authType) {
49+
System.out.println(BYPASS_MESSAGE);
50+
}
4351

4452
@Override
4553
public X509Certificate[] getAcceptedIssuers() {
4654
return new X509Certificate[0];
4755
}
56+
57+
@Override
58+
public void checkClientTrusted(X509Certificate[] chain, String authType, Socket socket) {
59+
System.out.println(BYPASS_MESSAGE);
60+
}
61+
62+
@Override
63+
public void checkServerTrusted(X509Certificate[] chain, String authType, Socket socket) {
64+
System.out.println(BYPASS_MESSAGE);
65+
}
66+
67+
@Override
68+
public void checkClientTrusted(X509Certificate[] chain, String authType, SSLEngine engine) {
69+
System.out.println(BYPASS_MESSAGE);
70+
}
71+
72+
@Override
73+
public void checkServerTrusted(X509Certificate[] chain, String authType, SSLEngine engine) {
74+
System.out.println(BYPASS_MESSAGE);
75+
}
4876
}
4977

5078
public static class SSLBypassSettingsException extends RuntimeException{

0 commit comments

Comments
 (0)