如何检查X509Certificate颁发者是否可信？

Question

I have an instance of X509Certificate in java and I need to check if the issuer is trusted?

thanks gal

Answer 1

If you just have the certificate (out of context), you should build a certification path using the Java PKI Cert. Path API . If it's within the context of SSL, you should be able to use a TrustManager and check it when using your SSLContext .

This will verify whether the certificate was issued by a CA you trust (or via one of its intermediate CAs perhaps).

You may also be interested in " What data should I validate when validating X.509 certificates using Java? " (on Security.SE).