Can't generate a java client from a secure (SSL) swagger definition

[keithchong]

See related, #102 I am using v2.1.5.

I tried to configure -Dheader and -a but can't seem to get this to work.

I always get the message:

Server returned HTTP response code: 401 for URL

when I try to generate a java client.

[fehguy]

Please share the entire command that you're using to generate the client.

[keithchong]

I tried various combinations, the difference is just tweaking the options -a and -Dhead:

java -jar C:\swagger\swagger-codegen-cli.jar generate -l java -a "Authorization: Basic {xor}KD4sPjsyNjE=" -t C:\mytemplates\jaxrsClient" -i https://abc.com/wp/swagger.json -o C:\out

java -jar C:\swagger\swagger-codegen-cli.jar generate -l java -a "Authorization: Basic {xor}KD4sPjsyNjE=" -t C:\mytemplates\jaxrsClient" -i https://abc.com/wp/swagger.json -o C:\out -Dhead=Authorization: Basic {xor}KD4sPjsyNjE="

I set -a because I think that is how RemoteURL and AuthParser works:

conn.setRequestProperty(item.getKeyName(), item.getValue());

ie. conn.setRequestProperty("Authorization", "Basic " + encodedValue);

[abderraza8k]

It's a an SSL issue SSLHandshakeException with a detailMessage 'java.security.cert.CertificateException: No name matching localhost found`.

which means that there's a hostname verifier that returns false and the invokation fails.

there's a work around by implementing a hostname verifier that returns true for localhost but it's far from an ideal
solution.

the solution we adopted is to consider that the /swagger.json uri isn't https.

[abderraza8k]

here's what I used to disable hostname verifier

   private static void disableSSLVerification() {

        TrustManager[] trustAllCerts = new TrustManager[]{new X509TrustManager() {
            public java.security.cert.X509Certificate[] getAcceptedIssuers() {
                return null;
            }

            public void checkClientTrusted(X509Certificate[] certs, String authType) {
            }

            public void checkServerTrusted(X509Certificate[] certs, String authType) {
            }

        }};

        SSLContext sc;
        try {
            sc = SSLContext.getInstance("SSL");
            sc.init(null, trustAllCerts, new java.security.SecureRandom());
            HttpsURLConnection.setDefaultSSLSocketFactory(sc.getSocketFactory());
            HostnameVerifier allHostsValid = (hostname, session) -> true;
            HttpsURLConnection.setDefaultHostnameVerifier(allHostsValid);
        } catch (KeyManagementException | NoSuchAlgorithmException e) {
            logger.error("[SSL] Error by passing hostname verifier", e);
        }

    }