Why is the connection to the web server via HTTPS successful even without HostnameVerifier?

Question

Java

There is a simple Java client code that connects to a web server. Previously, without the following "poultice", the HTTPS connection failed due to a forgot-what-exception, similar to running curl without the "-k" option:

// не для продакшна!
X509TrustManager[] DUMMY_TRUST_MANAGERS = {
  new X509TrustManager() {
      public X509Certificate[] getAcceptedIssuers() { return null; }
      public void checkClientTrusted(X509Certificate[] certs, String authType) { }
      public void checkServerTrusted(X509Certificate[] certs, String authType) { }
  }
}
sslContext = SSLContext.getInstance("SSL");
sslContext.init(null, DUMMY_TRUST_MANAGERS, new SecureRandom());
connection.setSSLSocketFactory(sslContext.getSocketFactory())
connection.setHostnameVerifier(new HostnameVerifier {
    public boolean verify(String host, SSLSession sslSession) {
        return true
    }
})

Unfortunately now I can not reproduce that exception on Java 6 - everything works without "poultice". Connected to different servers - ssllabs, google... JDK already demolished and reinstalled.

Tell me how to upset Java so that the code starts to fall again?

The simplest client code:

URL url = new URL(args[0]);
HttpsURLConnection c = (HttpsURLConnection)url.openConnection();
c.setDoOutput(false);
c.setDoInput(true);
c.connect();
c.getResponseCode();
...

Answer 1

I think you are talking about the lack of SNI support (in java < 7). Try to connect to https://bob.sni.velox.ch/.