Java SSL Client Auth: How to select alias in Keystore?

1
votes

Trying to perform SSL client auth using JSSE, by initializing a SSLContext using a KeyManagerFactory, which is created using a Keystore.

This works fine if the Keystore has 1 certificate, but if it contains 2 different certificates issued by the same issuer, how can I tell SSLContext which certificate to use?

1
javajsse

1 Answers

2
votes

Install your own X509KeyManager into the SSLContext, with your desired implementation of the chooseClientAlias() method.