java ca 验证失败_在Java中针对CA验证X.509证书

可以说我有这样的东西(客户端代码)：

TrustManager[] trustAllCerts = new TrustManager[]{

new X509TrustManager() {

@Override

public java.security.cert.X509Certificate[] getAcceptedIssuers() {

return null;

}

@Override

public void checkClientTrusted(

java.security.cert.X509Certificate[] certs, String authType) {

}

@Override

public void checkServerTrusted(

java.security.cert.X509Certificate[] certs, String authType) {

}

}

};

SSLContext sslc = SSLContext.getInstance("TLS");

sslc.init(null, trustAllCerts, null);

SocketFactory sf = sslc.getSocketFactory();

SSLSocket s = (SSLSocket) sf.createSocket("127.0.0.1", 9124);

这段代码是完整的功能,但我真的无法弄清楚,如何根据我在pem文件中提供的一个具体CA证书验证服务器的证书.

所有证书都由我的自签名CA签名,它是我需要验证