Camel iMap - 忽略SSL证书

时间:2015-11-24 16:07:17

标签: ssl apache-camel javamail imap blueprint-osgi

我正在使用imap端点,并尝试使用以下方法忽略SSL证书:

头等舱DummySSLSocketFactory:

    public class DummySSLSocketFactory extends SSLSocketFactory {
        private SSLSocketFactory factory;
        public DummySSLSocketFactory() {
            try {
                SSLContext sslcontext = SSLContext.getInstance("TLS");
                sslcontext.init(null,
                                     new TrustManager[] { new

DummyTrustManager()},
                                 null);
            factory = (SSLSocketFactory)sslcontext.getSocketFactory();
        } catch(Exception ex) {
            // ignore
        }
    }

    public static SocketFactory getDefault() {
        return new DummySSLSocketFactory();
    }

    public Socket createSocket() throws IOException {
        return factory.createSocket();
    }

    public Socket createSocket(Socket socket, String s, int i, boolean flag)
                                throws IOException {
        return factory.createSocket(socket, s, i, flag);
    }

    public Socket createSocket(InetAddress inaddr, int i,
                                InetAddress inaddr1, int j) throws IOException {
        return factory.createSocket(inaddr, i, inaddr1, j);
    }

    public Socket createSocket(InetAddress inaddr, int i)
                                throws IOException {
        return factory.createSocket(inaddr, i);
    }

    public Socket createSocket(String s, int i, InetAddress inaddr, int j)
                                throws IOException {
        return factory.createSocket(s, i, inaddr, j);
    }

    public Socket createSocket(String s, int i) throws IOException {
        return factory.createSocket(s, i);
    }

    public String[] getDefaultCipherSuites() {
        return factory.getDefaultCipherSuites();
    }

    public String[] getSupportedCipherSuites() {
        return factory.getSupportedCipherSuites();
    }
}

第二类DummyTrustManager:

public class DummyTrustManager implements X509TrustManager {

    public void checkClientTrusted(X509Certificate[] cert, String authType) {
        // everything is trusted
    }

    public void checkServerTrusted(X509Certificate[] cert, String authType) {
        // everything is trusted
    }

    public X509Certificate[] getAcceptedIssuers() {
        return new X509Certificate[0];
    }
}

the third class AllowAll to set java mail propeties:

public class AllowAll {
         public void setsslproperties()  {

                 //DummySSLSocketFactory easy = new EasySSLProtocolSocketFactory();
                 Properties props = System.getProperties();
                 props.setProperty("mail.imap.ssl.enable", "true");
             props.setProperty("mail.imap.ssl.socketFactory.class","com.mycompany.imapssl.DummySSLSocketFactory");
                 props.setProperty("mail.imap.ssl.socketFactory.fallback", "false");
                 props.setProperty("mail.imap.socketFactory.port", "993");
                 Session session = Session.getInstance(props, null);

        }

}

如何将此与iMap EiP关联以忽略SSL证书?

这是路线:

<route id="timerToLog">
    <from uri="imaps://server:993?username=user_name&password=pass"/>
    <log message="ok"/>

1 个答案:

答案 0 :(得分:0)

如果您使用的是最新版本的JavaMail,请将mail.imap.ssl.trust属性设置为您要信任的主机的名称。这样就无需创建自己的套接字工厂。