From 056d1acb17c2140b194be1ba5f352e71f5186086 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?St=C3=A9phane=20Brunner?= <stephane.brunner@camptocamp.com>
Date: Fri, 25 Apr 2025 16:04:47 +0200
Subject: [PATCH] Be able to disable SSL certificate check

---
 .../http/ConfigFileResolvingHttpRequestFactory.java      | 7 +++++++
 .../mapfish/print/http/ConfigFileResolvingRequest.java   | 9 +++++++++
 2 files changed, 16 insertions(+)

diff --git a/core/src/main/java/org/mapfish/print/http/ConfigFileResolvingHttpRequestFactory.java b/core/src/main/java/org/mapfish/print/http/ConfigFileResolvingHttpRequestFactory.java
index 737633d620..411ca49363 100644
--- a/core/src/main/java/org/mapfish/print/http/ConfigFileResolvingHttpRequestFactory.java
+++ b/core/src/main/java/org/mapfish/print/http/ConfigFileResolvingHttpRequestFactory.java
@@ -29,6 +29,9 @@ public final class ConfigFileResolvingHttpRequestFactory implements MfClientHttp
   @Value("${httpRequest.fetchRetry.intervalMillis}")
   private int httpRequestFetchRetryIntervalMillis;
 
+  @Value("${httpRequest.disableSSLCertificateCheck}")
+  private boolean httpRequestFetchDisableSSLCertificateCheck;
+
   /**
    * Constructor.
    *
@@ -82,6 +85,10 @@ public int getHttpRequestFetchRetryIntervalMillis() {
     return httpRequestFetchRetryIntervalMillis;
   }
 
+  public boolean disableSSLCertificateCheck() {
+    return httpRequestFetchDisableSSLCertificateCheck;
+  }
+
   public List<RequestConfigurator> getCallbacks() {
     return callbacks;
   }
diff --git a/core/src/main/java/org/mapfish/print/http/ConfigFileResolvingRequest.java b/core/src/main/java/org/mapfish/print/http/ConfigFileResolvingRequest.java
index a1ae107db2..8a89d24624 100644
--- a/core/src/main/java/org/mapfish/print/http/ConfigFileResolvingRequest.java
+++ b/core/src/main/java/org/mapfish/print/http/ConfigFileResolvingRequest.java
@@ -239,6 +239,15 @@ private ClientHttpResponse executeCallbacksAndRequest(final ClientHttpRequest re
       callback.configureRequest(requestToExecute);
     }
 
+    if (configFileResolvingHttpRequestFactory.disableSSLCertificateCheck()) {
+      HttpsURLConnection.setDefaultHostnameVerifier(
+          new HostnameVerifier() {
+            public boolean verify(String hostname, SSLSession session) {
+              return true;
+            }
+          });
+    }
+
     return requestToExecute.execute();
   }