I’ve just published <https://github.com/charleskor...

# squarelibraries

[charleskorn]

I’ve just published https://github.com/charleskorn/okhttp-system-keystore/, a small library that makes it easy to use trusted certificates from the operating system keystore (Keychain on macOS, Certificate Store on Windows) with OkHttp.

Feedback, suggestions and ideas welcome 🙂

[ephemient]

since it appears to use the SunMSCAPI anmd Apple providers, note that it won't work on versions of the JetBrains runtime released before February 2022: https://youtrack.jetbrains.com/issue/JBR-3917

[yschimke]

That's nice, have you considered building off okhttp-tls instead or as well?

[yschimke]

It already has a small API for configuring the trust store.

HandshakeCertificates clientCertificates = new HandshakeCertificates.Builder()
    .addPlatformTrustedCertificates()
    .build();
OkHttpClient client = new OkHttpClient.Builder()
    .sslSocketFactory(clientCertificates.sslSocketFactory(), clientCertificates.trustManager())
    .build();

Here platform, just means the standard JVM ones.

[yschimke]

Ahhh, never mind, I see you aren't loading them, you are selecting a different or multiple TrustManager.