-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Andrei,

On 9/10/2010 4:35 PM, Andrei Lunjov wrote:
> One more thing was needed:
> 
>     HostnameVerifier verifyEverything = new HostnameVerifier() {
>         public boolean verify(String hostname, SSLSession session) {
> return true; }
>     };
> 
>     HttpsURLConnection.setDefaultHostnameVerifier( verifyEverything );

Thanks for pointing that out.

> This works for me now.
> And yes, make this check switchable per resource would be very useful.

I tried following the code around for 2.1.11 and it gets quite
complicated: there is a class that resolves URLs into InputSources that
doesn't look like it's got access to the Generator's configuration. In
short: this doesn't look like a simple fix. Instead, it appears that a
more extensive re-factoring would be necessary in order to achieve your
goal.

That being said, you could adapt the disableSSLCertificateChecking
method I posted to allow only ignore SSL validity checks for the URLs
that you want. Otherwise, invoke the default (or, at least,
previously-configured) SSLSocketFactory.

- -chris
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAkyOKkcACgkQ9CaO5/Lv0PAGNgCeNg8naC1hevgSraZ9XOg1qpmf
bb4AoI6ffY4XnPugALMDJarpOoX/1HEX
=yZSj
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@cocoon.apache.org
For additional commands, e-mail: users-h...@cocoon.apache.org

Reply via email to