default certificate store

Question

In some old notes I have that the JDK comes with a default certificate store that includes Verisign. If this is true, is the SSLFTPStandardValidator.getRootCertificateStore() initialized with default certificates for the JDK allowing me to verify certificates in this chain of trust without adding to the cert store?

Brian

Answer 1

No. We'll look into this though.

Answer 2

This seems to work fairly well:

      String certfile = System.getProperty("java.home") + "\\lib\\security\\cacerts";
      SSLFTPClient ftp = new SSLFTPClient();
      KeyStore ks = KeyStore.getInstance(KeyStore.getDefaultType());
      ks.load(new FileInputStream(certfile), null);
      ftp.getRootCertificateStore().importKeyStore(ks);

Brian