import javax.net.ssl.*;

import java.security.SecureRandom;

import java.security.cert.X509Certificate;

static volatile bool disableCertificateValidation_attempted;

static void disableCertificateValidation() ctex {

  if (disableCertificateValidation_attempted) ret;

  set disableCertificateValidation_attempted;

  print("Disabling certificate validation for whole VM");

  pcall {

    // Create a trust manager that does not validate certificate chains

    TrustManager[] trustAllCerts = new TrustManager[] { 

      new X509TrustManager() {

        public X509Certificate[] getAcceptedIssuers() { 

          return new X509Certificate[0]; 

        }

        public void checkClientTrusted(X509Certificate[] certs, String authType) {}

        public void checkServerTrusted(X509Certificate[] certs, String authType) {}

    }};

    // Ignore differences between given hostname and certificate hostname

    HostnameVerifier hv = new HostnameVerifier() {

      public boolean verify(String hostname, SSLSession session) { return true; }

    };

    // Install the all-trusting trust manager

    SSLContext sc = SSLContext.getInstance("SSL");

    sc.init(null, trustAllCerts, new SecureRandom());

    HttpsURLConnection.setDefaultSSLSocketFactory(sc.getSocketFactory());

    HttpsURLConnection.setDefaultHostnameVerifier(hv);

  }

}