• 设为首页
  • 点击收藏
  • 手机版
    手机扫一扫访问
    迪恩网络手机版
  • 关注官方公众号
    微信扫一扫关注
    公众号

arteme/gradle-trust-all: A gradle plugin to disable SSL certificate validation

原作者: [db:作者] 来自: 网络 收藏 邀请

开源软件名称(OpenSource Name):

arteme/gradle-trust-all

开源软件地址(OpenSource Url):

https://github.com/arteme/gradle-trust-all

开源编程语言(OpenSource Language):

Groovy 100.0%

开源软件介绍(OpenSource Introduction):

Gradle "Trust All" Plugin

This plugin was born out of necessity for a quick-and-dirty way to use a Maven repository over HTTPS with a self-signed certificate.

When working with such a repository in gradle you may get an error:

Error transferring file: sun.security.validator.ValidatorException:
PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException:
unable to find valid certification path to requested target

Usual Java way to handle such scenario would be to download site certificate, import it into a keystore and use that keystore via the -Djavax.net.ssl.trustStore=... JVM options.

Sometimes you just need an easier way -- disable certificate validation altogether! There are many reasons not to do that, one of them being that this approach makes connections vulnerable to man-in-the-middle attacks.

Consider this code a proof-of-concept and accept full responsibility that by using it you're ultimately making an informed bad decision.

Origin

The code to disable certificate validation come from this StackOverflow answer, although there are many similar code snippets floating around the web.

Using "Trust All" Plugin

To use gradle-trust-all, build the jar file and include it in your project:

$ git clone https://github.com/arteme/gradle-trust-all.git
$ cd gradle-trust-all
$ gradle build
$ cp build/libs/gradle-trust-all.jar /path/to/your/project/gradle/folder/

Then in your project's build.gradle file add it as a buildscript dependency and activate the plugin:

buildscript {
    dependencies {
        classpath files('gradle/gradle-trust-all.jar')
    }
}

apply plugin: 'trust-all'

That is it. Now certificate validation in gradle is disabled.




鲜花

握手

雷人

路过

鸡蛋
该文章已有0人参与评论

请发表评论

全部评论

专题导读
热门推荐
阅读排行榜

扫描微信二维码

查看手机版网站

随时了解更新最新资讯

139-2527-9053

在线客服(服务时间 9:00~18:00)

在线QQ客服
地址:深圳市南山区西丽大学城创智工业园
电邮:jeky_zhao#qq.com
移动电话:139-2527-9053

Powered by 互联科技 X3.4© 2001-2213 极客世界.|Sitemap