Java SSL: how to disable hostname verification

by

It should be possible to create custom java agent that overrides default HostnameVerifier:

import javax.net.ssl.*;
import java.lang.instrument.Instrumentation;

public class LenientHostnameVerifierAgent {
    public static void premain(String args, Instrumentation inst) {
        HttpsURLConnection.setDefaultHostnameVerifier(new HostnameVerifier() {
            public boolean verify(String s, SSLSession sslSession) {
                return true;
            }
        });
    }
}

Then just add -javaagent:LenientHostnameVerifierAgent.jar to program’s java startup arguments.

More Related Contents:

  1. Received fatal alert: handshake_failure through SSLHandshakeException
  2. Java: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
  3. How to fix the “java.security.cert.CertificateException: No subject alternative names present” error?
  4. How to ignore PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException?
  5. Caused by: java.security.UnrecoverableKeyException: Cannot recover key
  6. javax.net.ssl.SSLPeerUnverifiedException: Host name does not match the certificate subject provided by the peer
  7. Java7 Refusing to trust certificate in trust store
  8. SSL “Peer Not Authenticated” error with HttpClient 4.1
  9. Java: Loading SSL Keystore via a resource
  10. How Can I Access an SSL Connection Through Android?
  11. Java Keytool error after importing certificate , “keytool error: java.io.FileNotFoundException & Access Denied”
  12. Ignore self-signed ssl cert using Jersey Client [duplicate]
  13. Java HTTPS client certificate authentication
  14. why doesn’t java send the client certificate during SSL handshake?
  15. How to ignore SSL certificate errors in Apache HttpClient 4.0
  16. Import PEM into Java Key Store
  17. limiting java ssl debug logging
  18. Read RSA private key of format PKCS1 in JAVA
  19. Javamail Could not convert socket to TLS GMail
  20. Java and HTTPS url connection without downloading certificate
  21. Whats an easy way to totally ignore ssl with java url connections?
  22. SSLHandshakeException while connecting to a https site
  23. How do I do TLS with BouncyCastle?
  24. Java SSL connect, add server cert to keystore programmatically
  25. Java SSLException: hostname in certificate didn’t match
  26. Using SSLContext with just a CA certificate and no keystore
  27. How to configure trustStore for javax.net.ssl.trustStore on windows?
  28. Using Apache httpclient for https
  29. PKIX path building failed in Eclipse
  30. How do I list / export private keys from a keystore?

Leave a Comment