Ensure that HTTPS clients only use allowed ciphers and protocol versions

1 files changed, 21 insertions, 0 deletions

diff --git a/http-utils/src/main/java/ai/vespa/util/http/AcceptAllHostnamesVerifier.java b/http-utils/src/main/java/ai/vespa/util/http/AcceptAllHostnamesVerifier.java
new file mode 100644
index 00000000000..77d718bccb3
--- /dev/null
+++ b/http-utils/src/main/java/ai/vespa/util/http/AcceptAllHostnamesVerifier.java
@@ -0,0 +1,21 @@
+// Copyright Yahoo. Licensed under the terms of the Apache 2.0 license. See LICENSE in the project root.
+package ai.vespa.util.http;
+
+import javax.net.ssl.HostnameVerifier;
+import javax.net.ssl.SSLSession;
+
+/**
+ * @author bjorncs
+ */
+public class AcceptAllHostnamesVerifier implements HostnameVerifier {
+
+    private static final AcceptAllHostnamesVerifier INSTANCE = new AcceptAllHostnamesVerifier();
+
+    public static AcceptAllHostnamesVerifier instance() { return INSTANCE; }
+
+    private AcceptAllHostnamesVerifier() {}
+
+    @Override public boolean verify(String hostname, SSLSession session) { return true; }
+
+}
+