how do I check if the X509Certificate issuer is trusted?

Question

I have an instance of X509Certificate in java and I need to check if the issuer is trusted?

thanks gal

Answer 1

If you just have the certificate (out of context), you should build a certification path using the Java PKI Cert. Path API. If it's within the context of SSL, you should be able to use a TrustManager and check it when using your SSLContext.

This will verify whether the certificate was issued by a CA you trust (or via one of its intermediate CAs perhaps).

You may also be interested in "What data should I validate when validating X.509 certificates using Java?" (on Security.SE).