Skip to content

Commit 7e56663

Browse files
authored
Change Default SSL Context (jopenlibs#58)
1 parent e8f7af7 commit 7e56663

File tree

2 files changed

+28
-6
lines changed

2 files changed

+28
-6
lines changed

build.gradle

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -19,10 +19,10 @@ repositories {
1919

2020
dependencies {
2121
testImplementation('junit:junit:4.13.2')
22-
testImplementation('org.mockito:mockito-core:5.2.0')
23-
testImplementation('org.testcontainers:testcontainers:1.17.6')
24-
testImplementation('org.eclipse.jetty:jetty-server:11.0.14')
25-
testImplementation('org.slf4j:slf4j-api:2.0.5')
22+
testImplementation('org.mockito:mockito-core:5.4.0')
23+
testImplementation('org.testcontainers:testcontainers:1.19.1')
24+
testImplementation('org.eclipse.jetty:jetty-server:11.0.15')
25+
testImplementation('org.slf4j:slf4j-api:2.0.7')
2626
testImplementation('org.bouncycastle:bcprov-jdk15on:1.70')
2727
testImplementation('org.bouncycastle:bcpkix-jdk15on:1.70')
2828
testImplementation('org.apache.commons:commons-io:1.3.2')

src/main/java/io/github/jopenlibs/vault/rest/Rest.java

Lines changed: 24 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -4,6 +4,7 @@
44
import io.github.jopenlibs.vault.VaultConfig;
55
import java.io.IOException;
66
import java.io.UnsupportedEncodingException;
7+
import java.net.Socket;
78
import java.net.URI;
89
import java.net.URISyntaxException;
910
import java.net.URLEncoder;
@@ -27,8 +28,9 @@
2728
import java.util.StringJoiner;
2829
import java.util.TreeMap;
2930
import javax.net.ssl.SSLContext;
31+
import javax.net.ssl.SSLEngine;
3032
import javax.net.ssl.TrustManager;
31-
import javax.net.ssl.X509TrustManager;
33+
import javax.net.ssl.X509ExtendedTrustManager;
3234

3335
/**
3436
* <p>A simple client for issuing HTTP requests. Supports the HTTP verbs:</p>
@@ -77,7 +79,27 @@ public class Rest {
7779
static {
7880
try {
7981
DISABLED_SSL_CONTEXT = SSLContext.getInstance("TLSv1.2");
80-
DISABLED_SSL_CONTEXT.init(null, new TrustManager[]{new X509TrustManager() {
82+
DISABLED_SSL_CONTEXT.init(null, new TrustManager[]{new X509ExtendedTrustManager() {
83+
@Override
84+
public void checkClientTrusted(X509Certificate[] chain, String authType,
85+
Socket socket) throws CertificateException {
86+
}
87+
88+
@Override
89+
public void checkServerTrusted(X509Certificate[] chain, String authType,
90+
Socket socket) throws CertificateException {
91+
}
92+
93+
@Override
94+
public void checkClientTrusted(X509Certificate[] chain, String authType,
95+
SSLEngine engine) throws CertificateException {
96+
}
97+
98+
@Override
99+
public void checkServerTrusted(X509Certificate[] chain, String authType,
100+
SSLEngine engine) throws CertificateException {
101+
}
102+
81103
@Override
82104
public void checkClientTrusted(final X509Certificate[] x509Certificates,
83105
final String s) throws CertificateException {

0 commit comments

Comments
 (0)