From adbfc473b26e0588bbbcb843923e74b45f6f695c Mon Sep 17 00:00:00 2001
From: Ian Young <ian@iay.org.uk>
Date: Fri, 26 Oct 2012 17:15:47 +0000
Subject: [PATCH] Arrange for the default httpClient to ignore SSL certificates
 entirely.  This is per the Metadata IOP, but also means that it won't be
 fazed by either self-signed certificates or wildcard ones.

---
 mdx/common-beans.xml | 12 +++++++++++-
 1 file changed, 11 insertions(+), 1 deletion(-)

diff --git a/mdx/common-beans.xml b/mdx/common-beans.xml
index cd626861..7a6bf819 100644
--- a/mdx/common-beans.xml
+++ b/mdx/common-beans.xml
@@ -374,12 +374,22 @@
         *********************
     -->
     
+    <!--
+        httpClientBuilder
+        
+        Factory for the httpClient bean below.
+    -->
+    <bean id="httpClientBuilder"
+        class="net.shibboleth.utilities.java.support.httpclient.HttpClientBuilder"
+        p:connectionDisregardSslCertificate="true"
+    />
+
     <!--
         httpClient
         
         Common, basic, HTTP client for use with HTTP resources.
     -->
-    <bean name="httpClient" class="org.apache.http.impl.client.DefaultHttpClient"/>
+    <bean id="httpClient" factory-bean="httpClientBuilder" factory-method="buildClient"/>
     
     <!--
         parserPool