If I open a HttpsURLConnection by opening a java.net.URL connection to, say, https://www.google.com/ how does Java decide whether to trust the certificate chain?
Are there some kind of defaults hard-coded into the API?
Sign Up to our social questions and Answers Engine to ask questions, answer people’s questions, and connect with other people.
Login to our social questions & Answers Engine to ask questions answer people’s questions & connect with other people.
Lost your password? Please enter your email address. You will receive a link and will create a new password via email.
Please briefly explain why you feel this question should be reported.
Please briefly explain why you feel this answer should be reported.
Please briefly explain why you feel this user should be reported.
There comes a Truststore with a Java installation. You can use Oracle’s keytool to query the there installed certificates (I think the password is empty, or ‘changeit’).