import java.security.cert.CertificateException;
import java.security.cert.X509Certificate;
import javax.net.ssl.X509TrustManager;

public class InsecureTrustManager {

    // A trust manager whose check methods never throw accepts any certificate,
    // including forged or untrusted ones.
    static X509TrustManager trustAny() {
        return new X509TrustManager() {
            @Override
            public void checkClientTrusted(X509Certificate[] chain, String authType) throws CertificateException {
                // empty: never rejects a client certificate
            }
            @Override
            public void checkServerTrusted(X509Certificate[] chain, String authType) throws CertificateException {
                // 'Use of Insecure verify for Certificate (Java)' warning issued here
            }
            @Override
            public X509Certificate[] getAcceptedIssuers() {
                return new X509Certificate[0];
            }
        };
    }
}

JAVA_ANALYSIS_ENTRY_POINTS_MODE = ALL_METHODS
# This warning class is modeled only by the Android framework, so the example
# is analyzed with the Android runtime rather than a plain Java one.
JAVA_ANALYSIS_FRAMEWORK = androidAPI35