ca根证书校验 java_Java获取受信任的根证书列表的方法

import java.io.File;

import java.io.FileInputStream;

import java.io.IOException;

import java.security.InvalidAlgorithmParameterException;

import java.security.KeyStore;

import java.security.KeyStoreException;

import java.security.NoSuchAlgorithmException;

import java.security.cert.CertificateException;

import java.security.cert.PKIXParameters;

import java.security.cert.TrustAnchor;

import java.security.cert.X509Certificate;

import java.util.Iterator;

public class Demo {

public static void main(String[] args) {

try {

// 加载JDK的cacerts keystore文件

String filename = System.getProperty("java.home") + "/lib/security/cacerts".replace('/', File.separatorChar);

FileInputStream is = new FileInputStream(filename);

KeyStore keystore = KeyStor