Synnefo » Pithos Android Client

package com.rackspace.cloud.files.api.client;

import java.io.InputStream;

import java.security.KeyStore;

import javax.net.ssl.HostnameVerifier;

import javax.net.ssl.HttpsURLConnection;

import javax.net.ssl.SSLContext;

import javax.net.ssl.SSLSession;

import javax.net.ssl.TrustManager;

import javax.net.ssl.X509TrustManager;

import javax.security.cert.CertificateException;

import javax.security.cert.X509Certificate;

import org.apache.http.conn.ClientConnectionManager;

import org.apache.http.conn.scheme.PlainSocketFactory;

import org.apache.http.conn.scheme.Scheme;

import org.apache.http.conn.scheme.SchemeRegistry;

import org.apache.http.conn.ssl.SSLSocketFactory;

import org.apache.http.impl.client.DefaultHttpClient;

import org.apache.http.impl.conn.SingleClientConnManager;

import android.content.Context;

import com.rackspace.cloud.android.R;

/**

 * 

 * @author Chmouel Boudjnah <chmouel.boudjnah@rackspace.co.uk>

 * 

 *         Custom implementation of HTTPClient using the keystore (in bks

 *         format) from android 2.3.1 which allow us to connect to London

 *         CloudFiles SSL host which doesn't work with the default keystore in

 *         other version than 2.3.1.

 */

public class CustomHttpClient extends DefaultHttpClient {

        public static final String X_AUTH_TOKEN = "X-Auth-Token";

        public static final String X_STORAGE_TOKEN = "X-Auth-Token";

        private static KeyStore trusted;

        final Context context;

        public CustomHttpClient(Context context) {

                super();

                this.context = context;

        }

        @Override

        protected ClientConnectionManager createClientConnectionManager() {

                SchemeRegistry registry = new SchemeRegistry();

                registry.register(new Scheme("http", PlainSocketFactory

                                .getSocketFactory(), 80));

                registry.register(new Scheme("https", newSslSocketFactory(), 443));

                ClientConnectionManager m = new SingleClientConnManager(getParams(),

                                registry);

                return m;

        }

        private SSLSocketFactory newSslSocketFactory() {

                try {

                        if(trusted == null){

                                trusted = KeyStore.getInstance("BKS");

                                InputStream in = context.getResources().openRawResource(

                                                R.raw.mystore);

                                try {

                                        trusted.load(in, "ez24get".toCharArray());

                                } finally {

                                        in.close();

                                }

                        }

                        return new SSLSocketFactory(trusted);

                } catch (Exception e) {

                        throw new AssertionError(e);

                }

        }

        final static HostnameVerifier DO_NOT_VERIFY = new HostnameVerifier() {

                public boolean verify(String hostname, SSLSession session) {

                        return true;

                }

        };

        /**

         * Trust every server - dont check for any certificate

         */

        private static void trustAllHosts() {

                // Create a trust manager that does not validate certificate chains

                TrustManager[] trustAllCerts = new TrustManager[] { new X509TrustManager() {

                        public java.security.cert.X509Certificate[] getAcceptedIssuers() {

                                return new java.security.cert.X509Certificate[] {};

                        }

                        @Override

                        public void checkClientTrusted(

                                        java.security.cert.X509Certificate[] arg0, String arg1)

                                        throws java.security.cert.CertificateException {

                                // TODO Auto-generated method stub

                        }

                        @Override

                        public void checkServerTrusted(

                                        java.security.cert.X509Certificate[] arg0, String arg1)

                                        throws java.security.cert.CertificateException {

                                // TODO Auto-generated method stub

                        }

                } };

                // Install the all-trusting trust manager

                try {

                        SSLContext sc = SSLContext.getInstance("TLS");

                        sc.init(null, trustAllCerts, new java.security.SecureRandom());

                        HttpsURLConnection

                                        .setDefaultSSLSocketFactory(sc.getSocketFactory());

                } catch (Exception e) {

                        e.printStackTrace();

                }

        }

}