Java Requires Chilkat v11.0.0+

Use a Custom Set of Trusted Root Certificates

See more Certificates Examples

Demonstrates how to build a set of trusted root certificates to be used globally by all Chilkat classes. Chilkat2 Java

import com.chilkatsoft.chilkat2.Cert;
import com.chilkatsoft.chilkat2.ChilkatException;
import com.chilkatsoft.chilkat2.TrustedRoots;
import com.chilkatsoft.chilkat2.Zip;
import com.chilkatsoft.chilkat2.ZipEntry;

public class ChilkatExample {

    public static void main(String[] args) {
        // This example requires the Chilkat API to have been previously unlocked.
        // See Global Unlock Sample for sample code.

        TrustedRoots trustedRoots = new TrustedRoots();

        //  Indicate that we will NOT trust any pre-installed certificates on the system.
        trustedRoots.setTrustSystemCaRoots(false);

        // Thawte is a certificate authority that provides a .zip download of their
        // root CA certificates:  https://www.thawte.com/roots/index.html
        // The direct download link is: https://www.verisign.com/support/thawte-roots.zip
        // Note: The above URLs are valid at the time of writing this example (29-May-2015).

        // Assuming the .zip has already been downloaded, open it and load each .pem file into
        // our trusted roots object.
        Zip zip = new Zip();

        // Open a .zip containing PEM files, among other things..
        try {
            zip.openZip("qa_data/certs/thawte-roots.zip");
        } catch (ChilkatException e) {
            System.out.println(e.getLastErrorText());
            return;
        }

        ZipEntry entry = new ZipEntry();
        String pemStr = "";
        Cert cert = new Cert();

        String pattern = "*.pem";
        boolean bHasMoreEntries;
        try {
            zip.entryMatching(pattern, entry);
            bHasMoreEntries = true;
        } catch (ChilkatException e) {
            bHasMoreEntries = false;
        }
        while (bHasMoreEntries) {
            System.out.println("Entry: " + entry.getFileName());

            // Get the PEM of the CA cert:
            pemStr = entry.unzipToString(0, "utf-8");

            // Load it into a certificate object:
            try {
                cert.loadPem(pemStr);
            } catch (ChilkatException e) {
                System.out.println(e.getLastErrorText());
            }

            // Add it to the trusted roots.
            trustedRoots.addCert(cert);

            bHasMoreEntries = entry.getNextMatch(pattern);
        }

        //  Activate the trusted roots globally for all Chilkat objects.
        //  This call really shouldn't fail, so we're not checking the return value.
        trustedRoots.activate();
    }
}