If you want to turn off SSL certificate validation in httpclient, do this:
1. Put not-yet-commons-ssl.jar on your classpath.
2. Execute the following method before you start any SSL connections:
public static void trustAllCerts() throws GeneralSecurityException, IOException {
ProtocolSocketFactory sf = new EasySSLProtocolSocketFactory();
Protocol p = new Protocol("https", sf, 443);
Protocol.registerProtocol("https", p);
}
This essentially makes commons-httpclient accept every SSL certificate it gets. Yeah, that's what I thought. Who's bitching now?