Public java.security.cert.x509certificate getacceptedissuers return null

Source file: NetTest. Source file: TlsConnector. Source file: TrustAllSocketFactory. Source file: BasicXTrustManager. Source file: LdapDicomConfiguration. Source file: TwAjax. Source file: WareNinjaUtils. Source file: ServerTrustManager.

Source file: DomainNameChecker. Popular Classes. S ources - E xamples - D iscussions. Java Code Examples for java. TrustManager; import javax. XTrustManager; import sun. Please note that if XTrustManager.

The algorithm constraints is expected to ignoring the trusted certificates checking I think TM. The addAll There is one other place that calls getAcceptedIssuers, and that's in the ServerHandshaker when we do client authentication.

All certificates are signed by my self-signed CA, and it is the CA I need to validate against only against this one. In response to jglouie thank you very much this way - can not vote up your answer. The accepted answer is extremely incorrect. It doesn't cryptographically verify any connection between the server certificate and the trusted certificate authority.

In general, you should almost never need to implement your own TrustManager, doing so is extremely dangerous. As EJP stated, there's no need to implement your own TrustManager, you can just use the default one, and ensure that the trusted CA certificate has been added to your default TrustStore.

See this question for more information. Take a look at the CertPathValidator class from the JDK, which verifies a continuous chain of trust from the server's own certificate up through a trusted CA. See Oracle's docs for an introduction to certificate chain validation. This code is completely dysfunctional. It is completely insecure, as well as not even conforming to its own specification. There is rarely a need to supply your own TrustManager, the default one works really well.

All you need to do is ensure that the CA certificate you have is present in your truststore, and then set the system property javax.

You don't need to write any code at all beyond possibly System. EDIT Your 'solution' certainly won't work in general. It assumes that every certificate in the chain is signed by your certificate. Stack Overflow for Teams — Collaborate and share knowledge with a private group. Create a free Team What is Teams? Collectives on Stack Overflow. Learn more. Validate X. Asked 10 years, 6 months ago.