Deeps-2005/java-ssl-scanner

1import javax.net.ssl.*;2import java.security.cert.X509Certificate;3 4public class InsecureSSLClient {5    public static void main(String[] args) throws Exception {6        TrustManager[] trustAllCerts = new TrustManager[] {7            new X509TrustManager() {8                public X509Certificate[] getAcceptedIssuers() { return null; }9                public void checkClientTrusted(X509Certificate[] certs, String authType) { }10                public void checkServerTrusted(X509Certificate[] certs, String authType) { }11            }12        };13 14        SSLContext sc = SSLContext.getInstance("SSL");15        sc.init(null, trustAllCerts, new java.security.SecureRandom());16        HttpsURLConnection.setDefaultSSLSocketFactory(sc.getSocketFactory());17 18        HttpsURLConnection.setDefaultHostnameVerifier(19            new HostnameVerifier() {20                public boolean verify(String hostname, SSLSession session) {21                    return true;22                }23            });24 25        String[] Ciphers = { "SSL_DH_anon_EXPORT_WITH_DES40_CBC_SHA" };26    }27}28