A quick and dirty fix for problems with Java's SSL certificate verification system. Works by disabling all SSL security for the entire VM running instance.
SSL verification problems are most commonly caused by trying to connect to a server with an invalid certificate via HTTPS, or by not having the certificate in question in your trust-store. They are usually associated with the following exceptions:
javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
OR
java.io.IOException: HTTPS hostname wrong
I greatly recommend solving the underlying problem before using this solution (as it is not so much of a solution as it is a nuclear option that will lay waste to all that lies before it).
Failing that, you should try bypassing the security on a per-connection basis.
Create your own SSLSocketFactory and HostnameVerifier which contain
exceptions for your specific situation, and use them when opening the connection
(or pass them to the library you are using).
Only if there is no way to solve the underlying problem, and no way to specify your own factory and verifier, should this tool be employed. Also if you are just testing and debugging, and don't want to fiddle with all that.
Put the SecurityBypasser object in your project. You can then use
destroySSLSecurity and restoreSllSecurity methods directly, or you can use
the executeBypassed method:
val result = SecurityBypasser.executeBypassed {
...
}Put the SecurityBypasser class in your project. You can then use
destroySSLSecurity and restoreSllSecurity methods:
SecurityBypasser.destroySSLSecurity();
...
SecurityBypasser.restoreSllSecurity();