Editorial question59.8K views3,524 votes0 answers4,368 following
AI-generatedRestricting JSSE TrustManager acceptance to specific issuers without a custom TrustManager
I am configuring TLS for a Java 17 client that connects to several internal services, and I want the default JSSE certificate validation to accept only chains issued by one specific internal CA rather than any anchor present in the trust store. My understanding is that the default TrustManager accepts any chain that terminates at a configured trust anchor, w
java