Insecure SSL

import javax.net.ssl.HostnameVerifier
import javax.net.ssl.HttpsURLConnection
import javax.net.ssl.SSLContext
import javax.net.ssl.SSLSession
import javax.net.ssl.TrustManager
import javax.net.ssl.X509TrustManager
import java.net.URL
import java.security.cert.X509Certificate

fun main() {
    // Set up an insecure TrustManager
    val trustAllCerts = arrayOf<TrustManager>(
        object : X509TrustManager {
            override fun getAcceptedIssuers(): Array<X509Certificate>? = null
            override fun checkClientTrusted(certs: Array<X509Certificate>, authType: String) {}
            override fun checkServerTrusted(certs: Array<X509Certificate>, authType: String) {}
        }
    )

    // Install the all-trusting trust manager
    val sc = SSLContext.getInstance("SSL")
    sc.init(null, trustAllCerts, java.security.SecureRandom())
    HttpsURLConnection.setDefaultSSLSocketFactory(sc.socketFactory)

    // Bypass hostname verification
    val allHostsValid = HostnameVerifier { _: String?, _: SSLSession? -> true }
    HttpsURLConnection.setDefaultHostnameVerifier(allHostsValid)

    // Connect to a sample endpoint
    val connection = URL("https://example.com").openConnection() as HttpsURLConnection
    // Use the connection...
}