Merge "Check for null hostnames in RootTrustManager"

     */

    public List<X509Certificate> checkServerTrusted(X509Certificate[] certs, String authType,

            String hostname) throws CertificateException {

        if (hostname == null && mConfig.hasPerDomainConfigs()) {

            throw new CertificateException(

                    "Domain specific configurations require that the hostname be provided");

        }

        NetworkSecurityConfig config = mConfig.getConfigForHostname(hostname);

        return config.getTrustManager().checkServerTrusted(certs, authType, hostname);

    }

import android.util.ArraySet;

import android.util.Pair;

import java.io.IOException;

import java.net.InetAddress;

import java.net.Socket;

import java.net.URL;

import java.security.KeyStore;

import javax.net.ssl.HttpsURLConnection;

import javax.net.ssl.SSLContext;

import javax.net.ssl.SSLHandshakeException;

import javax.net.ssl.SSLSocket;

import javax.net.ssl.TrustManager;

import javax.net.ssl.TrustManagerFactory;

        TestUtils.assertConnectionFails(context, "developer.android.com", 443);

        TestUtils.assertUrlConnectionFails(context, "google.com", 443);

        TestUtils.assertUrlConnectionSucceeds(context, "android.com", 443);

        // Check that sockets created without the hostname fail with per-domain configs

        SSLSocket socket = (SSLSocket) context.getSocketFactory()

                .createSocket(InetAddress.getByName("android.com"), 443);

        try {

        socket.startHandshake();

        socket.getInputStream();

        fail();

        } catch (IOException expected) {

        }

    }

    public void testBasicPinning() throws Exception {