Self-signed Certificate Support
Apache HttpClient 4 has changed quite a bit from version 3 and has much better self-signed certificate support. In order to support self-signed certificates, we need to create a new class that implements TrustStrategy called TrustSelfSignedStrategy and our TrustSelfSignedStrategy will trust any certificates and just return true. This class is just for illustration purpose and shouldn't be used in production. protected static class TrustSelfSignedStrategy implements TrustStrategy
{
@Override
public boolean isTrusted(X509Certificate[] arg0, String arg1) throws CertificateException
{
return true;
}
}
The following code shows how to create a ClientConnectionManager object using the above TrustSelfSignedStrategy.
protected ClientConnectionManager enableSelfSignedCerts() throws Exception
{
TrustStrategy trustStrategy = new TrustSelfSignedStrategy();
X509HostnameVerifier hostnameVerifier = new AllowAllHostnameVerifier();
SSLSocketFactory sslSf = new SSLSocketFactory(trustStrategy, hostnameVerifier);
Scheme https = new Scheme("https", 443, sslSf);
SchemeRegistry schemeRegistry = new SchemeRegistry();
schemeRegistry.register(https);
ClientConnectionManager connection = new PoolingClientConnectionManager(schemeRegistry);
return connection;
}
Preemptive Basic Authentication with Username and Password
Next we will show how to use preemptive basic authentication using username and password. In web services world we must use preemptive basic authentication, since there is no web client to ask back to and prompt user for authentication credentials.
String urlString = PING_IDENTITY_SERVER_URL + TOKEN_AUTH + URLEncoder.encode(TEST_TOKEN, "UTF-8");
URL url = new URL(urlString);
// support self-signed certificates
DefaultHttpClient httpClient = new DefaultHttpClient(enableSelfSignedCerts());
// add username/password for BASIC authentication
httpClient.getCredentialsProvider().setCredentials(new AuthScope(url.getHost(), url.getPort()),
new UsernamePasswordCredentials("user", "secret"));
// Create AuthCache instance
// Add AuthCache to the execution context
AuthCache authCache = new BasicAuthCache();
BasicScheme basicAuth = new BasicScheme();
authCache.put(new HttpHost(url.getHost(), url.getPort(), url.getProtocol()), basicAuth);
BasicHttpContext localcontext = new BasicHttpContext();
localcontext.setAttribute(ClientContext.AUTH_CACHE, authCache);
//
HttpGet getRequest = new HttpGet(urlString);
getRequest.setHeader("Content-Type", "application/json");
// call HTTP GET with authentication information
HttpResponse response = httpClient.execute(getRequest, localcontext);
if (response.getStatusLine().getStatusCode() != 200)
{
throw new RuntimeException("Failed : HTTP error code : " + response.getStatusLine().getStatusCode());
}
BufferedReader br = new BufferedReader(new InputStreamReader((response.getEntity().getContent())));
Troubleshooting Tips
If getting a 401 error, make sure that preemptive authentication is used and username and password is correct.
