org.apache.hc.client5.http.ssl

Class TrustAllStrategy

java.lang.Object

org.apache.hc.client5.http.ssl.TrustAllStrategy

All Implemented Interfaces:

TrustStrategy

@Contract(threading=STATELESS)
public class TrustAllStrategy
extends Object
implements TrustStrategy

A trust strategy that accepts all certificates as trusted. Verification of all other certificates is done by the trust manager configured in the SSL context.

Since:

4.5.4, 5.0

Field Summary

Fields

Modifier and Type	Field and Description
static TrustAllStrategy	INSTANCE

Constructor Summary

Constructors

Constructor and Description
TrustAllStrategy()

Method Summary

Modifier and Type	Method and Description
boolean	isTrusted(X509Certificate[] chain, String authType) Determines whether the certificate chain can be trusted without consulting the trust manager configured in the actual SSL context.

Methods inherited from class java.lang.Object

clone, equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

INSTANCE

public static final TrustAllStrategy INSTANCE

Constructor Detail

TrustAllStrategy

public TrustAllStrategy()

Method Detail

isTrusted

public boolean isTrusted(X509Certificate[] chain,
                         String authType)
                  throws CertificateException

Description copied from interface: TrustStrategy

Determines whether the certificate chain can be trusted without consulting the trust manager configured in the actual SSL context. This method can be used to override the standard JSSE certificate verification process.

Please note that, if this method returns false, the trust manager configured in the actual SSL context can still clear the certificate as trusted.

Specified by:

isTrusted in interface TrustStrategy

Parameters:

chain - the peer certificate chain

authType - the authentication type based on the client certificate

Returns:

true if the certificate can be trusted without verification by the trust manager, false otherwise.

Throws:

CertificateException - thrown if the certificate is not trusted or invalid.