Do not enforce hostname validation 29/29529/2
authorAlexis de Talhouët <adetalhouet89@gmail.com>
Mon, 29 Jan 2018 15:38:40 +0000 (10:38 -0500)
committerAlexis de Talhouët <adetalhouet89@gmail.com>
Mon, 29 Jan 2018 16:16:00 +0000 (11:16 -0500)
Change-Id: I1c4e5d58126e35a64140c91c0c3afda5e9b3a5bd
Issue-ID: POLICY-510
Signed-off-by: Alexis de Talhouët <adetalhouet89@gmail.com>
controlloop/common/model-impl/rest/src/main/java/org/onap/policy/rest/RESTManager.java

index 2540cb2..dae31c3 100644 (file)
@@ -30,6 +30,7 @@ import org.apache.http.auth.UsernamePasswordCredentials;
 import org.apache.http.client.CredentialsProvider;
 import org.apache.http.client.methods.HttpGet;
 import org.apache.http.client.methods.HttpPost;
+import org.apache.http.conn.ssl.NoopHostnameVerifier;
 import org.apache.http.entity.StringEntity;
 import org.apache.http.impl.client.BasicCredentialsProvider;
 import org.apache.http.impl.client.CloseableHttpClient;
@@ -67,7 +68,11 @@ public class RESTManager {
         logger.debug(body);
 
         try (CloseableHttpClient client =
-                HttpClientBuilder.create().setDefaultCredentialsProvider(credentials).build()) {
+                HttpClientBuilder
+                        .create()
+                        .setSSLHostnameVerifier(NoopHostnameVerifier.INSTANCE)
+                        .setDefaultCredentialsProvider(credentials)
+                        .build()) {
 
             HttpPost post = new HttpPost(url);
             if (headers != null) {
@@ -111,7 +116,11 @@ public class RESTManager {
                 new UsernamePasswordCredentials(username, password));
 
         try (CloseableHttpClient client =
-                HttpClientBuilder.create().setDefaultCredentialsProvider(credentials).build()) {
+                HttpClientBuilder
+                        .create()
+                        .setSSLHostnameVerifier(NoopHostnameVerifier.INSTANCE)
+                        .setDefaultCredentialsProvider(credentials)
+                        .build()) {
 
             HttpGet get = new HttpGet(url);
             if (headers != null) {