On 27.07.18 06:46, ffreitas wrote:
>
> fun.
> https://hc.apache.org/httpclient-3.x/apidocs/org/apache/commons/httpclient/protocol/SSLProtocolSocketFactory.html
> does NOT take another socket factory as a constructor parameter, and
> implementing one that is accepted by the Protocol() call requires
> something like:
>
> public class EasySSLProtocolSocketFactory implements
> SecureProtocolSocketFactory {
>
> to be used as a parameter there. Unfortunately I have not found a way to
> create that in ECMA making calls to Java 🙂 might be why the REST
> activity parameter takes a truststore call - it can then use the
> truststore in an internal implementation of the
> SecureProtocolSocketFactory ...
>
>After lots of trial and error, and even more copy/paste from many
examples this is what I ended up with. This will handle self-signed
certificates, but until Apache httpclient 4.4 - most of the code is
deprecated with httpclient 4.5 (still runs), might not work after 4.6.
This will build an HttpClient class which will talk to an end-point
which uses an selfsigned certificate.
Casper
@SuppressWarnings("deprecation")
private HttpClient buildClient() throws KeyManagementException,
NoSuchAlgorithmException, KeyStoreException {
HttpClientBuilder b = HttpClientBuilder.create();
// setup a Trust Strategy that allows all certificates.
//
SSLContext sslContext = new
SSLContextBuilder().loadTrustMaterial(null, new TrustStrategy() {
public boolean isTrusted(X509Certificate[] arg0,
String arg1) throws CertificateException {
return true;
}
}).build();
b.setSslcontext(sslContext);
// don't check Hostnames, either.
// -- use
SSLConnectionSocketFactory.getDefaultHostnameVerifier(), if
// you don't want to weaken
HostnameVerifier hostnameVerifier =
SSLConnectionSocketFactory.ALLOW_ALL_HOSTNAME_VERIFIER;
// here's the special part:
// -- need to create an SSL Socket Factory, to use our
weakened "trust
// strategy";
// -- and create a Registry, to register it.
//
SSLConnectionSocketFactory sslSocketFactory = new
SSLConnectionSocketFactory(sslContext, hostnameVerifier);
Registry<ConnectionSocketFactory> socketFactoryRegistry =
RegistryBuilder.<ConnectionSocketFactory>create()
.register("http",
PlainConnectionSocketFactory.getSocketFactory()).register("https",
sslSocketFactory)
.build();
// now, we create connection-manager using our Registry.
// -- allows multi-threaded use
PoolingHttpClientConnectionManager connMgr = new
PoolingHttpClientConnectionManager(socketFactoryRegistry);
b.setConnectionManager(connMgr);
// finally, build the HttpClient;
// -- done!
HttpClient client = b.build();
return client;
}
