Added --naive option to trust all SSL certificates

Author: quintesse

src/main/java/dk/xam/jbang/Main.java

@@ -8,8 +8,10 @@
 import java.net.URL;
 import java.nio.charset.StandardCharsets;
 import java.nio.file.*;
+import java.security.KeyManagementException;
 import java.security.MessageDigest;
 import java.security.NoSuchAlgorithmException;
+import java.security.cert.X509Certificate;
 import java.util.*;
 import java.util.concurrent.Callable;
 import java.util.jar.Attributes;
@@ -18,6 +20,13 @@
 import java.util.stream.Collectors;
 import java.util.stream.Stream;
 
+import javax.net.ssl.HostnameVerifier;
+import javax.net.ssl.HttpsURLConnection;
+import javax.net.ssl.SSLContext;
+import javax.net.ssl.SSLSession;
+import javax.net.ssl.TrustManager;
+import javax.net.ssl.X509TrustManager;
+
 import org.apache.commons.text.StringEscapeUtils;
 
 import com.sun.nio.file.SensitivityWatchEventModifier;
@@ -83,6 +92,9 @@ boolean debug() {
 	@Option(names = { "-D" }, description = "set a system property")
 	Map<String, String> properties = new HashMap<>();
 
+	@Option(names = { "--naive" }, description = "Trust all SSL certificates.")
+	boolean naive;
+
 	public int completion() throws IOException {
 		String script = AutoComplete.bash(
 				spec.name(),
@@ -156,6 +168,41 @@ private Integer doCall() throws IOException {
 			return completion();
 		}
 
+		if (naive) {
+			try {
+				// Create a trust manager that does not validate certificate chains
+				TrustManager[] trustAllCerts = new TrustManager[] { new X509TrustManager() {
+					public java.security.cert.X509Certificate[] getAcceptedIssuers() {
+						return null;
+					}
+
+					public void checkClientTrusted(X509Certificate[] certs, String authType) {
+					}
+
+					public void checkServerTrusted(X509Certificate[] certs, String authType) {
+					}
+				}
+				};
+
+				// Install the all-trusting trust manager
+				SSLContext sc = SSLContext.getInstance("SSL");
+				sc.init(null, trustAllCerts, new java.security.SecureRandom());
+				HttpsURLConnection.setDefaultSSLSocketFactory(sc.getSocketFactory());
+
+				// Create all-trusting host name verifier
+				HostnameVerifier allHostsValid = new HostnameVerifier() {
+					public boolean verify(String hostname, SSLSession session) {
+						return true;
+					}
+				};
+
+				// Install the all-trusting host verifier
+				HttpsURLConnection.setDefaultHostnameVerifier(allHostsValid);
+			} catch (NoSuchAlgorithmException | KeyManagementException ex) {
+				throw new RuntimeException(ex);
+			}
+		}
+
 		if (clearCache) {
 			info("Clearing cache at " + Settings.getCacheDir().toPath());
 			// noinspection resource