Arrange for the default httpClient to ignore SSL certificates entirel…

…y. This is per the Metadata IOP, but also means that it won't be fazed by either self-signed certificates or wildcard ones.
InCommon · Oct 26, 2012 · adbfc47 · adbfc47
1 parent 82406cc
commit adbfc47
Showing 1 changed file with 11 additions and 1 deletion.
diff --git a/mdx/common-beans.xml b/mdx/common-beans.xml
@@ -374,12 +374,22 @@
         *********************
     -->
 
+    <!--
+        httpClientBuilder
+        
+        Factory for the httpClient bean below.
+    -->
+    <bean id="httpClientBuilder"
+        class="net.shibboleth.utilities.java.support.httpclient.HttpClientBuilder"
+        p:connectionDisregardSslCertificate="true"
+    />
+
     <!--
         httpClient
         
         Common, basic, HTTP client for use with HTTP resources.
     -->
-    <bean name="httpClient" class="org.apache.http.impl.client.DefaultHttpClient"/>
+    <bean id="httpClient" factory-bean="httpClientBuilder" factory-method="buildClient"/>
 
     <!--
         parserPool