无法使用Sun的代码将CA导入cacert

Question

I'm trying to make my program that could add self-signed CA from remote into local Java trust keystore.

(Yeah, I know this is dangerous and I talks, but THEY don't bother, so don't bother to tell me "This is dangerous" too. What I can do is just make a "switch" in the config properties so this function could be switch off when they don't need to use it.)

The code that I'm using is coming from this link:

https://web.archive.org/web/20130319003303/http://dzone.com/snippets/ssl-download-certificate-chain

I made a little modify that this program will choose first CA displayed on screen(at line 107, and it looks like the Right CA from remote that I need when I run it.), and I thought it should add the CA into cacerts automatically but No. It generated an file call "jssecacerts" at the folder where I run this program, and my own program still popping "PKIX build path failed".

So... assume that this is the right program that I need, how could that "jssecacerts" would help me to solve my issue? could I name it as "cacert" and replace the original one?