28 Aug 13:24
https & invalid certs
From: Dirk Vleugels <dvl <at> 2scale.net>
Subject: https & invalid certs
Newsgroups: gmane.comp.lang.jython.user
Date: 2008-08-28 11:28:26 GMT
Subject: https & invalid certs
Newsgroups: gmane.comp.lang.jython.user
Date: 2008-08-28 11:28:26 GMT
Hi,
i'm able to connect to SSL sockets issuing selfsigned or just plain
invalid certs by using code like this:
class TrustManager(javax.net.ssl.X509TrustManager):
def checkClientTrusted(self,chain,authtype):
pass
def checkServerTrusted(self,chain,authtype):
pass
def getAcceptedIssuers(self):
None
class HostnameVerifier(javax.net.ssl.HostnameVerifier):
def verify(self,hostname,ssl_session):
true
def setupSSLFactory():
sc = javax.net.ssl.SSLContext.getInstance("SSLv3")
sc.init(None,array([TrustManager()], TrustManager),None)
urlConn=javax.net.ssl.HttpsURLConnection
urlConn.setDefaultSSLSocketFactory(sc.getSocketFactory())
urlConn.setDefaultHostnameVerifier(HostnameVerifier())
setupSSLFactory()
url=java.net.URL("https://domain-with-wrong-cert.com")
[..............]
(Continue reading)
RSS Feed