(Java) Use a Custom Set of Trusted Root Certificates

Demonstrates how to build a set of trusted root certificates to be used globally by all Chilkat classes.

Chilkat Java Downloads Java Libs for Windows, MacOS, Linux, Alpine Linux, Solaris Java Libs for Android

import com.chilkatsoft.*;

public class ChilkatExample {

  static {
    try {
        System.loadLibrary("chilkat");
    } catch (UnsatisfiedLinkError e) {
      System.err.println("Native code library failed to load.\n" + e);
      System.exit(1);
    }
  }

  public static void main(String argv[])
  {
    // This example requires the Chilkat API to have been previously unlocked.
    // See Global Unlock Sample for sample code.

    CkTrustedRoots trustedRoots = new CkTrustedRoots();

    //  Indicate that we will NOT trust any pre-installed certificates on the system.
    trustedRoots.put_TrustSystemCaRoots(false);

    // Thawte is a certificate authority that provides a .zip download of their
    // root CA certificates:  https://www.thawte.com/roots/index.html
    // The direct download link is: https://www.verisign.com/support/thawte-roots.zip
    // Note: The above URLs are valid at the time of writing this example (29-May-2015).

    // Assuming the .zip has already been downloaded, open it and load each .pem file into
    // our trusted roots object.
    CkZip zip = new CkZip();

    // Open a .zip containing PEM files, among other things..
    boolean success = zip.OpenZip("qa_data/certs/thawte-roots.zip");
    if (success != true) {
        System.out.println(zip.lastErrorText());
        return;
        }

    CkZipEntry entry = zip.FirstMatchingEntry("*.pem");
    if (zip.get_LastMethodSuccess() != true) {
        System.out.println("No entries matched.");
        return;
        }

    CkZipEntry nextEntry;
    String pemStr;

    CkCert cert = new CkCert();

    boolean bHasMoreEntries = true;
    while ((bHasMoreEntries == true)) {

        System.out.println("Entry: " + entry.fileName());

        // Get the PEM of the CA cert:
        pemStr = entry.unzipToString(0,"utf-8");

        // Load it into a certificate object:
        success = cert.LoadPem(pemStr);
        if (success != true) {
            System.out.println(cert.lastErrorText());
            }

        // Add it to the trusted roots.
        trustedRoots.AddCert(cert);

        // The NextMatchingEntry method was added in v9.5.0.50
        nextEntry = entry.NextMatchingEntry("*.pem");
        bHasMoreEntries = entry.get_LastMethodSuccess();

        entry = nextEntry;
        }

    //  Activate the trusted roots globally for all Chilkat objects.
    //  This call really shouldn't fail, so we're not checking the return value.
    success = trustedRoots.Activate();
  }
}