/** * Creates a new SSLConnectionSocketFactory with the behavior described in * {@link #getFactory(String, CodeDxExtension)}. Instead of returning, this * method registers the factory instance to the
factoriesByHost
 * map, as well as registering its ExtraCertManager to the
 * certManagersByHost map. The cert manager registration is
 * important in order to detect and purge trusted certificates on a per-host
 * basis.
 * 
 * @param host
 * @param extension
 * @throws IOException
 * @throws GeneralSecurityException
 */
private static void initializeFactory(
	String host,
	CodeDxExtension extension,
	String fingerprint,
	boolean acceptPermanently
) throws IOException, GeneralSecurityException {
	// set up the certificate management
	File managedKeyStoreFile = getTrustStoreForHost(host);
	ExtraCertManager certManager = new SingleExtraCertManager(managedKeyStoreFile, "u9lwIfUpaN");

	// get the default hostname verifier that gets used by the modified one
	// and the invalid cert dialog
	HostnameVerifier defaultHostnameVerifier = new DefaultHostnameVerifier();

	
	InvalidCertificateStrategy invalidCertStrat;
	if(fingerprint == null){
		invalidCertStrat = new InvalidCertificateDialogStrategy(defaultHostnameVerifier, host, extension);
	} else {
		invalidCertStrat = new InvalidCertificateFingerprintStrategy(fingerprint, acceptPermanently);
	}

	/*
	 * Set up a composite trust manager that uses the default trust manager
	 * before delegating to the "reloadable" trust manager that allows users
	 * to accept invalid certificates.
	 */
	List trustManagersForComposite = new LinkedList<>();
	X509TrustManager systemTrustManager = getDefaultTrustManager();
	ReloadableX509TrustManager customTrustManager = new ReloadableX509TrustManager(certManager, invalidCertStrat);
	trustManagersForComposite.add(systemTrustManager);
	trustManagersForComposite.add(customTrustManager);
	X509TrustManager trustManager = new CompositeX509TrustManager(trustManagersForComposite);

	// setup the SSLContext using the custom trust manager
	SSLContext sslContext = SSLContext.getInstance("TLS");
	sslContext.init(null, new TrustManager[] { trustManager }, null);
	// the actual hostname verifier that will be used with the socket
	// factory
	Set allowedHosts = new HashSet<>();
	allowedHosts.add(host);
	HostnameVerifier modifiedHostnameVerifier = new HostnameVerifierWithExceptions(defaultHostnameVerifier, allowedHosts);
	
	SSLConnectionSocketFactory factory = new SSLConnectionSocketFactory(sslContext, modifiedHostnameVerifier);
	// Register the `factory` and the `customTrustManager` under the given
	// `host`
	if(fingerprint == null){
		dialogFactoriesByHost.put(host, factory);
	} else {
		fingerprintFactoriesByHost.put(host, factory);
	}
}
类org.apache.http.conn.ssl.DefaultHostnameVerifier源码实例Demo
