Trusting to every certificate

// TODO: This is trusting every certificate. This is not secure for live. Add trusted certificates to tomcat. Think about it.
private String sendSoapRequest( String xmlData ){
try{
// TODO: Make this configurable. Don't use configurable things as hardcoded.
String hostName = "localhost";
int port = 8443;

URLConnection connection = null;
URL url = new URL( "https://" + hostName + ":" + port + "/mywebserviceapp/xservice" );
logger.debug( "Hostname: " + url.getHost() );

trustAllCertificates();

connection = url.openConnection();
// TODO: Make this values as configurable
// connection.setConnectTimeout( 1000 );
// connection.setReadTimeout( 1000 );
connection.setDoOutput( true );
connection.setDoInput( true );
connection.setUseCaches( false );
connection.setRequestProperty( "Content-Type", "text/xml; charset=UTF-8" );
connection.setRequestProperty( "User-Agent", "Jakarta Commond-HttpClient/3.1" );
connection.setRequestProperty( "Content-Length", "" + xmlData.length() );

Writer wr = new OutputStreamWriter( connection.getOutputStream(), "UTF-8" );
wr.write( xmlData );
wr.flush();
wr.close();

return read( connection.getInputStream() );
}
catch( Exception e ){
logger.error( "Error: ", e );
}
return null;
}

private void trustAllCertificates(){

TrustManager[] trustAllCerts = new TrustManager[]{ new X509TrustManager(){

public java.security.cert.X509Certificate[] getAcceptedIssuers(){
return null;
}

public void checkClientTrusted( X509Certificate[] certs, String authType ){
}

public void checkServerTrusted( X509Certificate[] certs, String authType ){
}
} };
// Install the all-trusting trust manager
try{
SSLContext sc = SSLContext.getInstance( "SSL" );
sc.init( null, trustAllCerts, new java.security.SecureRandom() );
HttpsURLConnection.setDefaultSSLSocketFactory( sc.getSocketFactory() );
}
catch( Exception e ){
}
// Create all-trusting host name verifier
HostnameVerifier allHostsValid = new HostnameVerifier(){

@Override
public boolean verify( String arg0, SSLSession arg1 ){
// TODO Auto-generated method stub
return false;
}
};
// Install the all-trusting host verifier
HttpsURLConnection.setDefaultHostnameVerifier( allHostsValid );

HostnameVerifier verifier = new HostnameVerifier(){

@Override
public boolean verify( String hostname, SSLSession session ){
return true;
}
};
HttpsURLConnection.setDefaultHostnameVerifier( verifier );
}