[java-opensaml2 COMMIT] /branches/REL_2/src/main/java/org/opensaml/DefaultBootstrap.java

[noreply at shibboleth.net]

Author: putmanb
Date: Fri Sep 12 22:07:33 2014
New Revision: 1670

URL: http://svn.shibboleth.net/view/java-opensaml2?rev=1670&view=rev
Log:
Switch to our own HostnameVerifier impl.

Modified:
    branches/REL_2/src/main/java/org/opensaml/DefaultBootstrap.java

Modified: branches/REL_2/src/main/java/org/opensaml/DefaultBootstrap.java
URL: http://svn.shibboleth.net/view/java-opensaml2/branches/REL_2/src/main/java/org/opensaml/DefaultBootstrap.java?rev=1670&r1=1669&r2=1670&view=diff
==============================================================================
--- branches/REL_2/src/main/java/org/opensaml/DefaultBootstrap.java (original)
+++ branches/REL_2/src/main/java/org/opensaml/DefaultBootstrap.java Fri Sep 12 22:07:33 2014
@@ -28,6 +28,7 @@
 import org.opensaml.xml.parse.StaticBasicParserPool;
 import org.opensaml.xml.parse.XMLParserException;
 import org.opensaml.xml.security.DefaultSecurityConfigurationBootstrap;
+import org.opensaml.xml.security.x509.tls.StrictHostnameVerifier;
 import org.owasp.esapi.ESAPI;
 import org.slf4j.Logger;
 import org.slf4j.LoggerFactory;
@@ -115,7 +116,7 @@
     protected static void initializeHttpClient() {
         if (!Boolean.getBoolean(SYSPROP_HTTPCLIENT_HTTPS_DISABLE_HOSTNAME_VERIFICATION)) {
             ProtocolSocketFactory socketFactory = 
-                    new TLSProtocolSocketFactory(null, null, org.apache.commons.ssl.HostnameVerifier.STRICT);
+                    new TLSProtocolSocketFactory(null, null, new StrictHostnameVerifier());
             Protocol.registerProtocol("https", new Protocol("https", socketFactory, 443));
         }
     }