truststore

Configuration element for a truststore containing trusted CA certificates.

Used by Membrane's TLS components to validate remote certificates presented during SSL/TLS handshakes.


Can be used in:

ssl and bean

Attributes

NameRequiredDefaultDescriptionExample
password false - The password used to open the keystore/truststore.
-
provider false - Provider to use when loading the keystore.
-
checkRevocation false - Comma-separated PKIX revocation options: ONLY_END_ENTITY, PREFER_CRLS, NO_FALLBACK, SOFT_FAIL.
ONLY_END_ENTITY,SOFT_FAIL
location false - A file/resource containing the PKCS#12 keystore (*.p12).
-
type false - Keystore type (e.g., {@code PKCS12}, {@code JKS}).
-
algorithm false - Trust manager algorithm used to validate certificate chains.
-