<a href="https://stackoverflow.com/questions/64439951/rest-client-call-fails-with-suncertpathbuilderexception-unable-to-find-valid-c">https://stackoverflow.com/questions/64439951/rest-client-call-fails-with-suncertpathbuilderexception-unable-to-find-valid-c</a> <a href="https://stackoverflow.com/questions/49176390/set-jre-to-use-windows-trust-store-specifically-the-users-trust-store">https://stackoverflow.com/questions/49176390/set-jre-to-use-windows-trust-store-specifically-the-users-trust-store</a> <a href="https://www.baeldung.com/java-keystore-truststore-difference">https://www.baeldung.com/java-keystore-truststore-difference</a>&nbsp;<hr>&nbsp;이전에는 아래와 같이 트러스트매니저를 가져와서 만들었었다면,&nbsp;JVM에서 옵션으로 바로 설정하는 방법을 가져왔다.&nbsp;&nbsp;<pre style="background-color:#2b2b2b;color:#a9b7c6;font-family:'D2Coding',monospace;font-size:11.3pt;">private static OkHttpClient getUnsafeOkHttpClient() { try { // Create a trust manager that does not validate certificate chains final TrustManager[] trustAllCerts = new TrustManager[]{new X509TrustManager() { @Override public void checkClientTrusted(java.security.cert.X509Certificate[] chain, String authType) throws CertificateException { } @Override public void checkServerTrusted(java.security.cert.X509Certificate[] chain, String authType) throws CertificateException { } @Override public java.security.cert.X509Certificate[] getAcceptedIssuers() { return new X509Certificate[0]; } }}; // Install the all-trusting trust manager final SSLContext sslContext = SSLContext.getInstance("SSL"); sslContext.init(null, trustAllCerts, new java.security.SecureRandom()); // Create an ssl socket factory with our all-trusting manager final SSLSocketFactory sslSocketFactory = sslContext.getSocketFactory(); return new OkHttpClient.Builder().sslSocketFactory(sslSocketFactory, (X509TrustManager) trustAllCerts[0]) .hostnameVerifier(new HostnameVerifier() { @Override public boolean verify(String hostname, SSLSession session) { return true; } }).build(); } catch (Exception e) { throw new RuntimeException(e); } }</pre>&nbsp;&nbsp;바로 실행시에 다음과 같은 설정을 추가해 주는 것이다.&nbsp;&nbsp;<pre style="background-color:#2b2b2b;color:#a9b7c6;font-family:'D2Coding',monospace;font-size:11.3pt;"># JVM Options -Djavax.net.ssl.trustStore=NUL -Djavax.net.ssl.trustStoreType=Windows-ROOT </pre>&nbsp;인텔리제이에서는 아래 이미지 처럼 할 수 있다.&nbsp;&nbsp;<img src="/api/file/0JX8TRE9388QM">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;

JVM Options 실행시에 사설인증서 통과하도록 하는 방법(self-signed certificate)