Disabling SSL Certificate Validation in Spring RestTemplate

Question

I am having two Spring-based web apps A and B, on two different machines.

I want to make an HTTPS call from web app A to web app B, however, I am using a self-signed certificate in Machine B. So my HTTPS request fails.

How can I disable HTTPS certificate validation when using RestTemplate in Spring? I want to disable validation because both web app A and B are within the internal network, but data transfer has to happen over HTTPS

Answer 1

@Bean public RestTemplate restTemplate()                  throws KeyStoreException, NoSuchAlgorithmException, KeyManagementException {     TrustStrategy acceptingTrustStrategy = (X509Certificate[] chain, String authType) -> true;      SSLContext sslContext = org.apache.http.ssl.SSLContexts.custom()                     .loadTrustMaterial(null, acceptingTrustStrategy)                     .build();      SSLConnectionSocketFactory csf = new SSLConnectionSocketFactory(sslContext);      CloseableHttpClient httpClient = HttpClients.custom()                     .setSSLSocketFactory(csf)                     .build();      HttpComponentsClientHttpRequestFactory requestFactory =                     new HttpComponentsClientHttpRequestFactory();      requestFactory.setHttpClient(httpClient);     RestTemplate restTemplate = new RestTemplate(requestFactory);     return restTemplate;  }