Is there an easy way in OkHttp to automatically de...

# squarelibraries

[charleskorn]

Is there an easy way in OkHttp to automatically default to the OS-native trusted certificate store? (eg. the equivalent of adding -<http://Djavax.net|Djavax.net>.ssl.trustStoreType=WINDOWS-ROOT or -<http://Djavax.net|Djavax.net>.ssl.trustStoreType=KeychainStore to the java command line if running on Windows or macOS respectively)

I have an app that runs across multiple operating systems and corporate environments and it often runs into issues with corporate proxies MITMing traffic. Most of the time, the self-signed root CA certificate these proxies use has been added to the native trust store, but not the Java trust store, so any outgoing connections fail because the certificate presented is not trusted.