x

src/main/java/com/egolm/sso/clients/SAPServiceFactory.java

@@ -6,6 +6,8 @@ import java.io.IOException;
 import java.net.MalformedURLException;
 import java.net.URL;
 import java.security.KeyStore;
+import java.security.cert.CertificateException;
+import java.security.cert.X509Certificate;
 import java.util.HashMap;
 import java.util.Map;
 
@@ -13,6 +15,7 @@ import javax.net.ssl.KeyManager;
 import javax.net.ssl.KeyManagerFactory;
 import javax.net.ssl.TrustManager;
 import javax.net.ssl.TrustManagerFactory;
+import javax.net.ssl.X509TrustManager;
 import javax.security.auth.callback.Callback;
 import javax.security.auth.callback.CallbackHandler;
 import javax.xml.namespace.QName;
@@ -71,10 +74,9 @@ public class SAPServiceFactory {
 				HTTPConduit httpConduit = (HTTPConduit) client.getConduit();
 				TLSClientParameters tlsParams = httpConduit.getTlsClientParameters();
 				tlsParams = tlsParams == null ? new TLSClientParameters() : tlsParams;
-				tlsParams.setSecureSocketProtocol(SSLProtocol);
-				tlsParams.setKeyManagers(getKeyManagers());
-				tlsParams.setTrustManagers(getTrustManagers());
 				httpConduit.setTlsClientParameters(tlsParams);
+				tlsParams.setTrustManagers(new TrustManager[] {new TrustAllManager() });
+				tlsParams.setDisableCNCheck(true);
 			}
 		}
 		return service;
@@ -110,10 +112,18 @@ public class SAPServiceFactory {
 	}
 
 	
+	private class TrustAllManager implements X509TrustManager {
+		public void checkClientTrusted(X509Certificate[] arg0, String arg1) throws CertificateException {}
+		public void checkServerTrusted(X509Certificate[] arg0, String arg1) throws CertificateException {}
+		public X509Certificate[] getAcceptedIssuers() {
+			return null;
+		}
+	}
+	
 	private static TrustManager[] trustManagers = null;
 	private static KeyManager[] keyManagers = null;
 	
-	private TrustManager[] getTrustManagers() {
+	public TrustManager[] getTrustManagers() {
 		if(trustManagers == null) {
 			FileInputStream fis = null;
 			try {
@@ -140,7 +150,7 @@ public class SAPServiceFactory {
 		return trustManagers;
 	}
 
-	private KeyManager[] getKeyManagers() {
+	public KeyManager[] getKeyManagers() {
 		if(keyManagers == null) {
 			FileInputStream fis = null;
 			try {